Privacy Policy

Last updated: November 2025

1. Introduction

1.1. Scope

This Privacy Policy explains how ASOCIAȚIA SPHERIK (“we”, “us”, or “the Organisation”) collects, uses, stores, and protects personal data in accordance with Regulation (EU) 2016/679 (GDPR) and national data protection laws. It applies to all digital platforms and affiliated brands owned, managed, or operated by ASOCIAȚIA SPHERIK (the “Platforms”), including websites, mobile applications, and social media accounts. By accessing our Platforms, registering for programs or events, making purchases, or engaging in any interaction with us, you acknowledge that you have read and understood this Policy.

1.2. Who We Are

ASOCIAȚIA SPHERIK
Registered office: 21 Garii Street, Cluj-Napoca, jud. Cluj, 400267
Registration number: 203/2013
Unique Identification Code (CUI): 32694261
Email: contact@spherikaccelerator.com

1.3. Affiliated Brands

This Privacy Policy applies equally to all brands, projects, and initiatives owned or managed by ASOCIAȚIA SPHERIK, including sub-brands and programs operated under its umbrella.

1.4. Complaints

If you have questions, concerns, or wish to exercise your data protection rights, please contact us at contact@spherikaccelerator.com.

You may also lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336, Bucharest, Romania
Email: anspdcp@dataprotection.ro
Website: https://www.dataprotection.ro

2. Data Collection

2.1. Definition of Personal Data

Personal data means any information relating to an identified or identifiable natural person. This may include identifiers such as name, identification number, email address, or other factors specific to one’s identity.

2.2. Categories of Data We Collect
  • Identification data: name, surname, organisation name, registration number, role, country, preferred language.
  • Contact data: email, telephone number, billing and delivery addresses.
  • Transactional data: payment confirmations, invoices, tickets, proof of purchase, donation details.
  • Technical data: IP address, browser type and version, operating system, login data, online identifiers.
  • Usage data: interaction with our Platforms and digital services.
  • Marketing preferences: communication consents.
  • Audio-visual data: photographs, recordings, videos during events.

We do not collect or process sensitive data (e.g., political opinions, religion, health data).

3. How Data Is Collected

Data is collected:

  • Directly from you: registration, purchases, donations, newsletter subscriptions, inquiries, forms, event participation.
  • Automatically via cookies and analytics tools.
  • From third parties (payment processors, service providers, publicly available sources).

4. How Data Is Used

  • To register you for events, programs, or services.
  • To process payments and issue invoices.
  • To provide access to purchased or subscribed content.
  • To manage communications and respond to inquiries.
  • To send newsletters or marketing (with consent).
  • To comply with legal obligations.
  • To improve platform experience and functionality.

We ensure that data is used only for legitimate, specific purposes and never in ways incompatible with the initial reason for collection.

5. Legal Basis for Processing

  • Performance of a contract: participation in programs, purchases.
  • Legal obligation: tax and reporting requirements.
  • Consent: newsletters and marketing.
  • Legitimate interest: service improvement, fraud prevention, security.

6. Sharing Data with Third Parties

Your data may be shared only when necessary, with:

  • Payment processors and financial institutions.
  • Event management and logistics partners.
  • IT and communication service providers.
  • Legal, accounting, or regulatory authorities.

All third parties are contractually bound to confidentiality and GDPR compliance.

6.1. Analytics and Monitoring Services

We use analytics providers to monitor and improve performance. Google Analytics collects IP, device information, and browsing behaviour to generate statistical usage reports. Google may use collected data to personalise ads within its network. Users may opt out via the Google Analytics Opt-Out Browser Add-on.

All data collected is aggregated and anonymised where possible; we do not use analytics to identify individuals.

7. International Data Transfers

If data is transferred outside the EEA, we ensure GDPR-compliant safeguards, including adequacy decisions of the European Commission or standard contractual clauses. More details are available at contact@spherikaccelerator.com.

8. Data Security

We implement technical and organisational measures such as:

  • Encrypted connections and secure storage systems.
  • Restricted access based on necessity.
  • Regular backups and audits.
  • Employee data protection training.

9. Data Storage

We retain data only as long as necessary:

  • Transactional data: up to 5 years.
  • Marketing data: until consent is withdrawn.
  • Event participation records: until event or reporting completion.

After expiration, data is securely deleted or anonymised.

10. User Rights

ASOCIAȚIA SPHERIK respects all GDPR rights regarding your personal data.

10.1. Right of Access

You may request confirmation and a copy of personal data we process about you.

10.2. Right to Rectification

You may request correction of inaccurate or incomplete data.

10.3. Right to Erasure (“Right to be Forgotten”)

You may request deletion when data is no longer needed, consent is withdrawn, processing is unlawful, or erasure is required by law.

10.4. Right to Restriction of Processing

You may request restriction under legally defined conditions.

10.5. Right to Data Portability

You may request your data in a structured, machine-readable format.

10.6. Right to Object

You may object to legitimate-interest processing or direct marketing.

10.7. Right to Withdraw Consent

You may withdraw consent at any time.

10.8. Right to Lodge a Complaint

You may file a complaint with ANSPDCP:
B-dul G-ral. Gheorghe Magheru nr. 28–30, Sector 1, 010336, Bucharest
Email: anspdcp@dataprotection.ro
Website: https://www.dataprotection.ro

10.9. Exercising Your Rights

To exercise your rights, send a written request to contact@spherikaccelerator.com. We respond within one month, with possible extension for complex requests.

11. Changes to This Policy

We may update this Policy periodically. Updated versions will be posted on our website. Continued use of our services after updates constitutes acceptance of the revised Policy.