Privacy Policy

Last updated: May 2025

This privacy policy applies to the website tasteofcovasna.ro, owned by the Local and Cultural Development Association Târgu Secuiesc (hereinafter „the Controller"), organiser of the Taste of Covasna – National Potato Festival.

The Controller is committed to protecting the confidentiality of your personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable Romanian legislation.

1. Who is the Data Controller?

Name: Local and Cultural Development Association Târgu Secuiesc
Address: Târgu Secuiesc, Covasna County, Romania
Contact email: [email protected]

2. What data do we collect?

The website tasteofcovasna.ro may collect or process the following categories of data:

Identification data (first and last name) — if you complete a contact or partnership form
Contact data (email address, phone number) — upon explicit request, via form
Technical data — IP address, browser type, operating system, pages visited, time spent on site (via cookies, with your consent)
Preference data — settings saved locally in your browser (localStorage), without transfer to the server

3. Purpose and legal basis for processing

Providing festival information — basis: performance of a contract or legitimate interest (Art. 6(1)(b) and (f) GDPR)
Event communications (newsletter, programme updates) — basis: your explicit consent (Art. 6(1)(a) GDPR)
Traffic analysis and site improvement — basis: consent (analytical cookies)
Fulfilment of legal obligations — document archiving, accounting (Art. 6(1)(c) GDPR)

4. Recipients of data

Your data may be accessed by members of the organising team. We do not transfer personal data to third parties, except:

Public authorities, upon their lawful request
Technical service providers (hosting, email) who process data strictly on our behalf, under a processing agreement

We do not sell, rent or exchange your data with third parties for commercial purposes.

5. Storage period

Contact data received via email/form: for the duration of the festival organisation + a maximum of 3 years thereafter, for archiving obligations
Technical data/cookies: in accordance with cookie settings (usually max. 12 months)
Newsletter consent: until consent is withdrawn

6. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access — you may request a copy of the data being processed
Right to rectification — correction of inaccurate or incomplete data
Right to erasure ("right to be forgotten") — deletion of data, under the conditions of the GDPR
Right to restriction of processing — temporary limitation of processing
Right to data portability — receiving data in a structured format
Right to object — objecting to processing based on legitimate interest
Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
Right to lodge a complaint with ANSPDCP — the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro)

To exercise these rights, contact us at: [email protected]. We will respond within a maximum of 30 calendar days.

7. Data security

We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction or disclosure. The site is served via HTTPS (encrypted connection). We do not store payment data or sensitive special-category data.

8. Transfer of data outside the EU

We do not transfer your personal data outside the European Economic Area (EEA), except where the technical service provider is based outside the EEA and guarantees an adequate level of protection (e.g. standard contractual clauses approved by the European Commission).

9. Cookies

We use strictly necessary cookies for the operation of the site and, with your consent, analytical cookies. Please consult our Cookie Policy for full details.

10. Policy updates

We reserve the right to update this policy. Significant changes will be communicated by posting on the site. The date of the last update is indicated in the header of this page.

11. Contact

For any question or request regarding personal data processing:
Email: [email protected]
Address: Târgu Secuiesc, Covasna County, Romania