Privacy policy

This policy explains in plain terms how we use the data you give us through caravana.arsc.ro and at the Caravana Smart City 2026 events.

1. Who we are

Asociația Română pentru Smart City (ARSC) (the Romanian Smart City Association), with its registered office at Integral Business Center, Bd. Pipera nr. 1-IA, Voluntari 077190, Ilfov County, Romania. For any question about your data: [email protected], phone +40 31 425 42 63.

2. What data we collect

Form data: name, email, phone, organisation, job title, the city you are interested in and the message you send.
Event attendance: which event you register for and any preferences you tell us.
Technical data, only if you accept analytics cookies: anonymised IP address, browser, pages visited (through Google Analytics 4).

We do not collect sensitive data.

3. Why we use it

To register you and confirm your attendance;
To send you information about the event (agenda, venue, changes);
To reply to messages sent through the contact form;
To tell you about future editions, only if you agree;
To improve the website, in aggregated and anonymised form.

4. Legal basis

We process data on the basis of your consent (analytics cookies, future communications), your participation in the event, our legitimate interest in organising it properly, and our legal obligations - in accordance with Regulation (EU) 2016/679 (GDPR).

5. Cookies

We use strictly necessary cookies (to make the website work) and Google Analytics 4 analytics cookies, the latter only after you consent in the banner. The IP address is anonymised. You can withdraw your consent at any time by choosing "Decline" in the banner or by deleting the cookies from your browser.

6. Who we share data with

Only with the providers who help us run the event and the website: Google (Analytics), our web hosting provider and, where needed, logistics partners (e.g. access lists). We do not sell or rent data.

7. Transfers outside the EU

Some providers (e.g. Google) may process data outside the European Economic Area, with the safeguards provided by the GDPR (standard contractual clauses).

8. How long we keep data

Registration and contact data are kept for a maximum of 3 years after the event or until you withdraw your consent. Analytics data - for a maximum of 14 months. After that, they are deleted or anonymised.

9. Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You can exercise them by writing to [email protected] - we reply within one month at most. If you believe your rights have been infringed, you can contact ANSPDCP, the Romanian National Supervisory Authority for Personal Data Processing, www.dataprotection.ro.

10. Security and minors

We use reasonable protection measures (encrypted HTTPS connection, restricted access to data). The website is aimed at professionals; we do not knowingly collect data from people under 16.

11. Changes

We may update this policy. The version in force is the one published here, with the date below.

Last updated: May 2026