Privacy policy

1. Who we are

The controller of your data is Asociația Vizibil, a non-governmental organisation in Cluj-Napoca. For any question about your data you can write to us by e-mail; we reply within one month of receiving your request.

Name

Asociația Vizibil

Registered office

Str. Eugen Ionesco nr. 99, ap. 1, Cluj-Napoca, jud. Cluj

CIF (tax ID)

53043096

Registry no.

3440/A/2025

E-mail

asociatiavizibil@gmail.com

2. What data we process

On the site we process the data you give us in its forms (contact, partnership, volunteering and the news subscription):

• first name and surname;
• e-mail address;
• what you fill in on the contact, partnership and volunteering forms: the subject, your phone number and company if you give them, how you would like to help and when you have time;
• the content of the messages you send us.

When you write to us through a form, we keep with your message the moment you gave your consent and the wording of the consent you ticked.

To stop abusive sending, for every form sent we keep, for two days at most, a code calculated from your IP address and one from the e-mail address you type, not the addresses themselves.

In the fields where you write freely, such as the message or “Something about you”, please do not give us information about your health. If you need an adjustment in order to take part, it is enough to tell us what adjustment you need.

Donations, tickets and event registrations are not made in a form on the site: their buttons take you to LAZULI TECHNOLOGIES S.R.L., through the getfan.cy platform, our payment platform, which asks only for what it needs for them. Card payments are processed by Stripe, into the association’s account; your card details do not reach us. From the payment platform and from Stripe we receive what concerns the payment or the registration: the amount, currency, date and status of the payment and any refund; what you paid for (the product, the type and number of tickets); the language you paid in; your name, e-mail and phone number, if you gave it; the payment’s Stripe references, among them your Stripe customer reference; the information the platform attaches to the payment (its metadata); and for an order with delivery, the delivery name, phone number and address.

Pages with donation, ticket or registration buttons load, with the page itself, a script of the payment platform, from getfan.cy: so LAZULI TECHNOLOGIES S.R.L. receives your IP address and information about your browser when you open the page, even if you press no button. The script stores nothing in your browser.

3. Why we process it and on what legal basis

Tickets and registrations for events

Entering into and performing the contract; for free workshops, your consent.

Donations

Your consent and the legal obligations to keep accounting records.

Invoices and accounting records

A legal obligation (Article 6(1)(c)).

Replying to messages

Your consent, given in the form (Article 6(1)(a)); when you write to us directly by e-mail, our legitimate interest in replying to you (Article 6(1)(f)).

The volunteers’ list

Your consent, given in the form. We write to you when we need help with something that matches what you told us.

News by e-mail

Your consent: you are subscribed only after you confirm your address from the e-mail we send you. You can withdraw it at any time, from the unsubscribe link in every news e-mail.

Stopping abusive sending

Our legitimate interest in keeping the site’s forms safe (Article 6(1)(f)).

4. Who we share it with

We do not sell or rent out your data. We share it only as far as necessary, with the providers who help us complete what you asked for:

• LAZULI TECHNOLOGIES S.R.L., through the getfan.cy platform: our payment platform, in whose window you donate, buy tickets and sign up for events;
• Stripe, which processes card payments;
• Brevo (Sendinblue SAS, France), through which we send the site’s e-mails: the confirmation that we have received your message, your message to us, and the news;
• Vercel, which hosts the site, and Neon, which hosts its database;
• the provider of the association’s mailbox;
• the association’s accountant, for the tax documents;
• the authorities, only when the law requires us to.

With each provider we have a contract that requires it to keep the data safe and to use it only for the service it provides.

5. Transfers outside the European Economic Area

We keep the data in the European Economic Area (EEA). If a provider processes it outside the EEA, it does so only with the safeguards the regulation requires, such as the standard contractual clauses approved by the European Commission.

6. How long we keep it

Donations and invoices

As long as financial and accounting law requires, currently ten years, counted from the end of the year in which the payment was made.

Workshop registrations and tickets

Until the event ends and for at most one year after.

Messages and partnership requests

As long as we need to reply to you, and for at most two years after the last message.

Volunteering sign-ups

As long as you are on the volunteers’ list. We take you off it whenever you ask us to.

News subscription

Until you unsubscribe.

Payments we have to check

Until an administrator sorts them, for example a payment we cannot tell what it was for; then, as long as the row of the payment they move to says.

The codes calculated from your IP address and from your e-mail address

Two days at most.

Payments also stay on record in the association’s Stripe account, under Stripe’s rules.

7. Your rights

You have the right to ask for access to your data, for its rectification or erasure, for restriction of processing and for data portability, and the right to object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw your consent at any time, without affecting what was done before.

Write to us by e-mail and we will reply within one month. If you are not satisfied with our reply, you can lodge a complaint with ANSPDCP (the National Supervisory Authority for Personal Data Processing).

Supervisory authority (ANSPDCP)

8. How we protect the data

The site uses an encrypted connection. Only the team members who need the data to do their work have access to it, and their accounts are protected.

9. Videos on YouTube

Some of the videos on the site are hosted on YouTube. Until you start one of these videos, the page loads nothing from YouTube. When you start it, the player loads from youtube-nocookie.com, and Google Ireland Limited, which operates YouTube, receives your IP address and information about your browser and device. From then on, YouTube may store data in your browser. Google processes this data on its own responsibility, under its own privacy policy.

Google’s privacy policy

10. Cookies

The site uses only what it needs in order to work. We do not use analytics or advertising cookies.

vizibil-cookies

Essential. Not a cookie but an entry in the browser’s local storage: it remembers, in this browser, that you have seen the cookie notice. It stays until you delete it.

YouTube

Only if you start a video from YouTube. Before that, YouTube stores nothing in your browser; after, the player may store its own cookies and data in the browser’s local storage, described in Google’s policy.

Donations, tickets and registrations are made with LAZULI TECHNOLOGIES S.R.L., through the getfan.cy platform, and card payment through Stripe; both use their own cookies, for instance to prevent fraud, described in their own policies.

Cookie settings

11. Changes

When we change this policy, we publish the new version and its date here. If the change concerns you directly, we also let you know by e-mail.