PRIVACY POLICY

Last updated: 01.11.2026

This page explains how the Student Culture House of Sibiu (Casa de Cultură a Studenților Sibiu) processes personal data, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Romanian Law no. 190/2018.

1. Data controller

Casa de Cultură a Studenților Sibiu, a public cultural institution under the Romanian Ministry of Labour, Family, Youth and Social Solidarity, Calea Dumbrăvii nr. 34A, Sibiu, Romania. Phone: +40 269 212 883 · E-mail: ccs.sibiu@yahoo.com.

2. Data protection officer

The data protection officer (DPO) is dr.ing. Radu Pascu. You can contact him at ccs.sibiu@yahoo.com, marked “For the attention of the data protection officer”, or by post at the institution’s address.

3. What data we process and why

  • Messages and correspondence (contact form, e-mail, phone): name, e-mail address, phone (optional), status (optional), the reason and content of your message – to reply to you.
  • Volunteering: the data sent through the contact form, to involve you in organising our events.
  • Requests for public information (Law no. 544/2001): the identification and contact data needed to reply.
  • Competitions, festivals and projects (for example the Lirismograf literary competition): registration data (name, contact details, age category), the works submitted and, for winners, the names and texts published in the anthology.
  • Artistic groups and courses: members’ registration and participation data.
  • Public events: photographs and video recordings are made at the institution’s performances and events and may be published on the website, on the institution’s social media pages or broadcast live.
  • Recruitment: candidates’ application data, processed under the legislation on public sector employment; only announcements and results are published on the website, in the form required by law.
  • Declarations of assets and interests: published under Law no. 176/2010, with personal data that must not be made public anonymised.
  • Visiting the website: technical data (IP address, browser type, pages visited, date and time), for the operation and security of the website and for aggregated traffic statistics.

4. Legal basis

We process data on the basis of Article 6(1) GDPR: compliance with a legal obligation (c) – for example requests under Law no. 544/2001, recruitment, declarations of assets; performance of a task carried out in the public interest (e) – cultural activity, events and public communication; performance of a contract or steps prior to entering into one (b); your consent (a) – for example for messages sent through the contact form and for volunteering. You can withdraw your consent at any time, without affecting processing carried out before the withdrawal.

5. How long we keep data

We keep data only for as long as they are needed for the purpose for which they were collected, depending on how they are actually used: correspondence until the request is resolved and for as long as needed for any follow-up; volunteering, competition and project data for as long as the person is involved in those activities; after that, data no longer in use are deleted. Documents that the institution must archive are kept for the periods set by Romanian archiving legislation and the institution’s filing plan. Technical data and traffic statistics are kept in aggregated form.

6. Who receives the data

We do not sell or rent personal data. Data may be accessed, strictly within the services they provide, by our providers:

  • SWISS WEBBUSINESS – website hosting;
  • Automattic Inc. (WordPress.com / Jetpack) – traffic statistics and optimised image delivery;
  • Yahoo – the e-mail service of ccs.sibiu@yahoo.com, where messages arrive;
  • Google – the e-mail service of sibiuccs@gmail.com, used for Lirismograf entries, and the YouTube platform, for videos and live broadcasts.

Data may be disclosed to public authorities only when required by law (for example the ministry we belong to, or the courts).

7. Transfers outside the European Union

Some providers (Automattic, Yahoo, Google) may process data outside the European Economic Area, mainly in the United States. Such transfers rely on the safeguards provided by the GDPR, for example the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

8. Traffic statistics

The website does not use Google Analytics. We use Jetpack Stats (WordPress.com), which counts visits and pages viewed (in our check, without setting cookies) and shows us only aggregated results. The pages of the Romanian “Public information” section are excluded from statistics and from search engines.

9. Cookies and local storage

We use only strictly necessary and functional cookies, which do not identify you and are not used for advertising. For this reason the website does not display a consent banner.

NamePurposeDuration
pll_languageRemembers the language chosen for the website (RO, EN, DE, FR).1 year
a11y-high-contrast, a11y-larger-fontsizeRemember the options of the accessibility toolbar (high contrast, larger text), only if you use them.current session
ccssGaleria_v3 (local storage)Keeps in the browser the list of images of the home page gallery, for faster loading. It contains no personal data.12 hours
wordpress_*, wp-settings-*Only for website administrators, when they log in.session / 1 year

External content. YouTube videos are embedded in privacy-enhanced mode (youtube-nocookie.com): YouTube sets no cookies until you start a video. Images on the “CCSS in the press” page are loaded from the websites of the respective publications, which can see your browser’s IP address. Links to Facebook, Instagram and YouTube transmit no data until you follow them.

You can delete or block cookies at any time in your browser settings; the website will still work, but will not remember your language and accessibility options.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection and to withdraw your consent. Requests can be sent to ccs.sibiu@yahoo.com (for the attention of the data protection officer), through the contact form or by post, and are answered within one month at most, as required by the GDPR.

If you believe your rights have been infringed, you can lodge a complaint with the Romanian supervisory authority:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest
E-mail: anspdcp@dataprotection.ro · www.dataprotection.ro

11. Minors

For children under 16, data are processed with the consent of their parents or legal representatives. The Lirismograf competition is open to young people aged 16 and over.

12. Data security

The website uses an encrypted connection (HTTPS). Access to personal data is limited to staff who need them to carry out their duties.

13. Changes

This policy may be updated when our activities, providers or the legislation change. The version in force is the one published on this page. For the accessibility of the website, see the Accessibility statement.