Privacy policy

The controller of the personal data processed through this website is Asociația IPSC România. For any question about your data, you can reach us here:

Controller

Asociația IPSC România

Email

contact@ipsc.ro

We ask for nothing for you to read the website. We only receive personal data in the cases below:

• The contact form: the name, email address and message you write to us, the options you pick from the two lists, if you fill them in, plus the language of the page you sent it from.
• Your member account: your name, email address, the date the account was created and your password, which we only keep as an irreversible hash.
• Messages sent straight to our email: your address and what you write.
• Technical data: your IP address and browser type, used to protect the form from automated and bulk submissions. Like any website, the server that hosts it may also log the requests it receives (IP address, date, page requested) for security and troubleshooting.
• Strictly necessary cookies, described in the cookie policy.

We do not use your data for advertising, we do not build profiles and we do not sell it to anyone.

• To answer you and carry on the conversation you started: our legitimate interest in replying to people who write to us (GDPR art. 6(1)(f)) or, if you write about a registration or a collaboration, steps taken at your request before entering into a contract (art. 6(1)(b)).
• To run your member account and consider your membership request: steps taken at your request before entering into a contract, and performing it (art. 6(1)(b)).
• To protect the website and the form from abuse, spam and attacks: our legitimate interest in keeping the website secure and working (art. 6(1)(f)).
• To comply with a legal obligation, when an authority lawfully asks us for data (art. 6(1)(c)).

• Messages received through the form or by email: for as long as the conversation lasts and at most two years after the last message exchanged, unless the law requires us to keep them longer.
• Your member account: for as long as you keep it. You can delete it at any time from the account page, and its data then leaves the website’s database.
• The IP address used to limit how many messages the form accepts: 10 minutes.
• Cookies: the lifetime of each one is listed in the cookie policy.

Your messages are read only by the people at Association IPSC Romania who answer them. To work, the website relies on a few providers that process data on our behalf and only on our instructions:

• the company that hosts the website and the email provider through which we receive messages;
• Cloudflare, Inc., for the Turnstile check on the contact and members pages (Turnstile privacy addendum(opens in a new tab)).

Cloudflare is a United States company, so some technical data may be processed outside the European Economic Area. Such transfers only take place with the safeguards required by Chapter V of the GDPR.

We do not sell or rent data to anyone. We disclose it to authorities only when the law requires us to.

Regulation (EU) 2016/679 (GDPR) gives you the following rights over your data:

• the right of access: to find out whether we process data about you and get a copy of it (art. 15);
• the right to rectification: to have inaccurate or incomplete data corrected (art. 16);
• the right to erasure: to have data deleted when we no longer have a reason to keep it (art. 17);
• the right to restriction: to have processing limited for a while, for example while we check a correction (art. 18);
• the right to data portability: to receive your data in a structured, commonly used format (art. 20);
• the right to object: to object to processing based on our legitimate interest (art. 21).

To exercise any of them, write to us at contact@ipsc.ro. We answer without undue delay and at the latest within one month of receiving the request; for complex or numerous requests this may be extended by two further months, in which case we let you know (art. 12(3)). Exercising your rights is free of charge.

If you believe we process your data unlawfully, you can lodge a complaint with the Romanian supervisory authority. You can always write to us as well: most of the time we can sort things out directly.

Authority

National Supervisory Authority for Personal Data Processing (ANSPDCP)

Address

B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania

Phone

+40 31 805 9211

Email

anspdcp@dataprotection.ro

Website

www.dataprotection.ro(opens in a new tab)

The contact form is protected against automated, forged and bulk submissions. Messages are not saved in a database on the website: they go straight to email, to the people who answer them. Member accounts are kept in a database, and passwords are never stored in plain text.

We update this policy whenever the website starts processing new data, for example when online registration launches. The date at the top of the page shows the latest update.