2. Processed personal data and the purpose of its processing

2.0. The Operator processes your personal data collected through the www.artmaniafestival.ro website (hereinafter referred to as the site) for the purpose of logging in to your site, of providing the services to which you are entitled on the basis of your ticket, or the subscription you purchased for your participation in the ARTmania Festival 2019 (the festival), your information on the organization of the festival, the evaluation of the products and services and the verification and access to the festival area (Piaţa Mare, Sibiu).

In order to analyze the preferences of the festival participants, the operator processes aggregate data, which does not create individual profiles of the festival participants.

Data processing for commercial, advertising, media, and administrative purposes will only be done with your express prior consent.

2.1. The operator will only process the following personal data:

 1) name and surname,

 2) the e-mail address,

 3) phone number and

4) the account password created on the site.

2.2. The operator processes your identification and contact information for the following purposes:

a) Obtaining a validly expressed consent,

b) linking you to the site and avoiding fraud,

c) compliance with the contract for purchase of the ticket or subscription,

d) protecting the rights and legitimate interests of the operator and ensuring the good unfolding of the festival (example: interest in not allowing access to the festival area other than the person who bought the ticket: if two or more persons take advantage of a ticket / which shows the same name to establish the right participant to enter the festival area, we will contact him / her at the phone number associated with the account through which the ticket / subscription was purchased)

e) facilitating the payment of the ticket / subscription (see 3.1., below) and its receipt (see 3.2., below).

2.3. Accordingly, this policy also applies to beneficiaries of festival invitations.

3. To whom data is disclosed

3.0. Your personal data will be stored on our servers in Romania, but we will be able to store them on cloud platforms operated by providers of such services in the European Union.

3.1. Your personal data will be forwarded to the NETOPIA mobilPAY payment processor solely for the purpose of processing your ticket / subscription payments.

The processor belongs to NETOPIA SRL, a Romanian legal entity, headquartered in Bucharest, Bulevardul Pierre de Coubertin Nr. 3-5, Office Building, Et. 4, Sector 2, registered with the Trade Registry at the Bucharest Tribunal under no. J40 / 9170/2003 and having CUI 15565496.

The payment processor's website is mobilepay.ro, which you please access for the Terms of Service and the Privacy Policy.

3.2. Your personal data will be transmitted to the BLT.ro ticketing platform exclusively for the purpose of providing you tickets / subscriptions to the festival.

The platform belongs to TICKET TECHNOLOGIES SRL, a Romanian legal entity with headquarters in Bucharest, Calea Victoriei Nr. 224, Bl. D5, Et. 13, Ap 48, Cam. 3, Sector 1, registered with the Trade Registry under the Bucharest Tribunal under no. J40 / 2632/2016 and having CUI 35697122.

The ticketing platform's website is blt.ro, which you can use to access the Terms of Service and the Privacy Policy.

3.3. Your personal data may be transmitted to public authorities only in the case of a request made under the law.

We will also transmit your personal data whenever the law compels us to do so.

 3.4. Transmitting your personal data to accountants or auditors, lawyers or other such external counselors of the operator, whenever it is necessary to achieve / protect a legitimate or legitimate interest of the operator, is NOT a processing of personal data.

4. How long do we keep the data

We will keep your personal data for a reasonable amount of time, based on the purpose for which we process the data.

Certain data may be retained for longer if they are necessary to investigate frauds or other antisocial facts.

5. Cookies

5.1. Cookie Usage Policy

This policy refers to cookies and site used by the operator.

5.2. What are Cookies?

The cookie is a small file of letters and numbers that will be stored on your computer, mobile terminal, tablet, or other device of a user from which it accesses the Internet.

The cookie is installed through a browser-based web browser request (examples: Internet Explorer, Chrome) and is completely "passive" in the sense that it does not contain software (or viruses or spyware) and can not access the information from the user's hard drive.

 5.3. What are Cookies used for?

These files make it possible to recognize the terminal used for browsing the Internet and present the content in a relevant way, adapted to the user's preferences. Cookies provide the user with a pleasant browsing experience and support the operator's efforts to provide user-friendly services (examples: online privacy preferences, relevant advertising preferences). They are also used in the preparation of aggregated anonymous statistics (user's personal identification being excluded), which helps operators understand how a user benefits from their web pages, allowing them to improve their structure and content.

5.4. What Cookies Do We Use?

We use two types of cookies: per session and fixes.

5.5. How are the cookies used by the site?

A visit to the site can place the following types of Cookies:

- site performance,

- visitor analysis (device geolocation),

- registration,

- advertising (marketing).

5.6. Do I have personal data cookies?

Cookies themselves do not require personal data to be used and, in most cases, do not personally identify Internet users. Personal data collected through the use of Cookies can only be used to facilitate certain user functionalities. Thus, data is encrypted in a way that makes unauthorized persons unaffected access to them.

5.7. Delete cookies

Generally, an app used to access web pages allows you to save your Cookies to the terminal by default. These settings can be changed so that the automatic cookie administration is blocked by the web browser or the user is informed each time Cookies are sent to his or her terminal. Detailed information about the possibilities and ways of managing cookies can be found in the web browser settings area.

Restricting the use of Cookies may affect certain features of the web page.

5.8. Why are Cookies Important for the Internet?

Cookies are the central focus of the Internet's efficient operation, helping to generate a friendly browsing experience and tailored to the preferences and interests of each user.

Denying or disabling cookies can make some sites unusable.

Refusing or disabling cookies does not mean you will not get online advertising, but only that the page / pages will no longer take into account your preferences and interests, highlighted by your browsing behavior.

Examples of Uses of Cookies (which do not require authentication of a user through an account):

- retaining passwords,

- adapting content, offers and services, according to user preferences and interests,

- limiting the frequency of serving ads or the number of impressions of an ad for a particular user on a particular website,

- providing more relevant advertising for the user,

- Measuring and optimizing Analytics elements such as confirming a certain level of traffic on a particular website, what type of content is viewed, and how a user reaches the site (examples: through search engines, directly from other websites -hate). Websites run these analyzes of their use to be improved for the benefit of users.

5.9. Security and confidentiality issues

Cookies are NOT Viruses!

Cookies use plain text formats. They are not made up of pieces of code, so they can not be executed nor can they auto-run. Consequently, they can not duplicate or replicate on other networks to run or replicate again. They can not perform these functions, they can not be viruses.

Cookies can, however, be used for negative purposes. Because it stores information about user preferences and browsing history on one or more other websites, cookies can be used as a form of spyware. Many anti-spyware products observe this aspect and consistently mark Cookies to be deleted in anti-virus / anti-spyware scanning and deletion procedures.

In general, browsers have built-in privacy settings that provide different levels of Cookie acceptance, shelf life, and automatic deletion after the user visits a particular website.

5.10. Other security issues related to Cookies

Because identity protection is extremely important and is the right of every Internet user, it is advisable to know what problems can create Cookies. Because they transmit constant information in both ways between the browser and the website, if an attacker or an unauthorized person interferes with the data transmission path, the information contained in the Cookies can be intercepted.

Although very rare, this can happen if the browser connects to the server using an unencrypted network (example: an unsecured WiFi network).

Other Cookie-based attacks involve bad cookie settings on the servers. If a website does not require the browser to use only encrypted channels, attackers can use this vulnerability to fool the browsers to send information through insecure channels. Attackers then use the information for purposes of unauthorized access to certain websites. It is very important to be careful in choosing the most appropriate method of protecting personal information.

5.11. Tips for safe and responsible navigation. Useful Links

Because of their flexibility, most of the largest and most visited websites use Cookies, which means they are almost inevitable. Disabling cookies will not allow the user to access the most popular and used websites, such as Youtube, Gmail and more.

Here are three tips that can help you navigate worry-free by accepting Cookies.

(a) Customize your cookie browser settings to reflect a comfortable level of Cookie security for you.

 If you do not mind Cookies and you are the only person using your computer, you can set expiration dates to store your browsing history and personal access data.

If you share your computer access, you can consider setting your browser to delete individual browsing data each time you close your browser. This is a way to access websites that place Cookies and delete any visitor information when the session is closed.

(b) Install and update (constantly update) anti-spyware applications.

Many of the applications for detecting and preventing spyware include detecting attacks on websites. This prevents the browser from accessing websites that could exploit browser vulnerabilities or download dangerous software.

(c) Make sure your browser is always up-to-date. Many of the cookies-based attacks are exploited by exploiting the weaknesses of older browsers.

Cookies are everywhere and can not be avoided if you want to enjoy access to the main websites on the Internet, whether we are talking about Romania or abroad.

With a clear understanding of how they work and the benefits they bring, you can take the necessary security measures so you can safely browse the Internet.

Disabling and refusing to receive cookies can make some websites unfeasible or difficult to visit and use. Also, refusing to accept cookies does not mean you will not receive / see online advertising.

Browser setting is possible because these Cookies are no longer supported, or you can set your browser to accept cookies from a specific website.

 All modern browsers offer the ability to change cookie settings. These settings are usually found in the "Options" or "Preferences" menu of your browser.

To find out more, you can use the browser's "Help" option (examples: Chrome, Internet Explorer, Firefox, Opera, Safari, Safari Mac).

For third-party cookie settings, you can also check the AllAboutCookies or YourOnlineChoices websites.

6. Your Rights

6.1. Right to withdrawal of consent

In the future, if you will be consenting to data processing for the purpose of transmitting business communications, you will be able to withdraw your consent at any time by sending an email to info@artmania.ro / by ticking it in an e-mail already received, of the unsubscribe option.

6.2. Right of access

You have the right at any time to obtain confirmation that your personal data is processed and information on the specific nature of such processing (purpose, categories of personal data actually processed, data recipients and / or third parties who have access to dates, period for which data is retained, and your specific rights.)

6.3. Right of Intervention (upon deletion)

You have the right to get from the operator:

a) blocking, deleting, or transforming into anonymous data data whose processing is not or no longer complies with the law,
b) notifying (free of charge to you) to third parties to whom data of any unlawful or unrelated or inaccurate transaction has been disclosed to be blocked, deleted or transformed into anonymous data (if this the notification does not prove to be impossible and does not involve a disproportionate effort for the operator in relation to the legitimate interest which might be harmed),
c) blocking or deleting incomplete or inaccurate data,
d) deleting data no longer required for the purpose (s) for which they were collected,
e) deleting the data on which you have withdrawn your consent for processing,
f) deleting the data on which you have, for legitimate and legitimate reasons, related to your particular situation, the opposition to processing (the opposition to the processing of your personal data for direct or indirect marketing purposes should never be justified) .
6.4. Right to rectification

You have the right to obtain from your operator the rectification and updating of personal data that is incomplete and / or inaccurate.

6.5. Right to request restriction

You have the right to require the operator that certain personal data be marked as restricted during the settlement of complaints / requests regarding the accuracy, timeliness and legality of the data processing, and when, although the purpose for which they were collected will be fulfilled, the operator is required to retain them for the exercise or establishment of a right before the judicial authorities.

6.6. Right to data portability

You have the right to transfer your personal data to another operator if the processing is based on your consent or the execution of a contract and is done by automatic means.

7. Complaint

If you believe that legitimate rights and / or interests in the processing of your personal data have been violated, you may address

a) with complaint to the National Authority for Personal Data Processing and Surveillance (Bucharest, 28-30 General Gheorghe Magheru Boulevard, Sector 1, anspdcp @ ro), or
b) to a request addressed to another competent authority.