Privacy Policy

Last updated: 25.09.2026

This Privacy Policy explains how Asociația Youth Vision for Society collects, uses, stores, and protects the personal data of individuals who access the website deschidem-mantuleasa.yvs.ro, complete forms available on the website, participate in activities within the Deschidem Mântuleasa project, or interact with us in connection with this programme.

Protecting personal data is important to us. We aim to process only the data that is necessary, in a transparent, proportionate, and secure manner, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable legislation.

1. Who we are

The data controller is:

Asociația Youth Vision for Society
Registered office: Sector 1, Bucharest
Tax identification code: 32526489
E-mail: office@yvs.ro
Website: https://deschidem-mantuleasa.yvs.ro

For questions regarding the processing of personal data or the exercise of rights provided by data protection legislation, you can contact us at office@yvs.ro.

2. About the Deschidem Mântuleasa website

The website deschidem-mantuleasa.yvs.ro is dedicated to the Deschidem Mântuleasa programme, an initiative of Asociația Youth Vision for Society. The programme explores the Mântuleasa neighbourhood and adjacent historic areas as spaces for research, urban education, contemporary creation, and community activation, including through the Mântuleasa Lab component.

Through the website, we publish information about the project, annual editions, activities, events, tours, workshops, open calls, results, documentation materials, and resources associated with the programme.

The website may include its own forms for registrations, open calls, event participation, submitting requests, or collecting feedback. The fields and information requested vary depending on the purpose of each form and are limited to what is necessary for the relevant activity.

3. What personal data we may process

Depending on how you interact with the website and the project, we may process the following categories of data:

3.1. Technical data generated when accessing the website

When you visit the website, certain technical data may be generated automatically, such as IP address, browser type, device type, operating system, pages accessed, date and time of access, security information, and other similar technical data.

This data may be used for the operation, security, administration, and technical diagnostics of the website.

3.2. Data collected through cookies and Google Analytics

The website uses or may use strictly necessary cookies for its operation and for remembering cookie preferences. We also use Google Analytics for statistics regarding how the website is used.

Google Analytics cookies are set only after consent has been given for the analytics/statistics category. Until then, Google Analytics runs in restricted mode (Google Consent Mode): it does not set cookies or store identifiers and only sends anonymous technical signals without cookies. The resulting information is used to understand, at an aggregate level, how the website is used and to improve its structure and content.

Further details are available in the Cookie Policy published on the website.

3.3. Data submitted through website forms

Depending on the form and the activity for which it is used, we may request some of the following information:

  • first and last name;
  • e-mail address;
  • telephone number, when necessary for logistical coordination or rapid communication;
  • age or age category, when the activity has relevant participation criteria;
  • organisation, institution, university/faculty, profession, or area of interest, where relevant to the activity;
  • logistical preferences, participation options, answers to selection or motivation questions;
  • feedback, observations, or other information you choose to submit through the form.

We will not request data that is not necessary for the purpose of the form. Where certain fields are mandatory, this will be indicated in the form or in the information associated with the activity.

3.4. Data concerning participation in activities and events

For the organisation of tours, workshops, community meetings, educational activities, open calls, and other Deschidem Mântuleasa activities, we may process the data provided at registration, information regarding actual participation, and, where necessary, subsequent communications related to the activity.

In the case of minors, we aim to collect as little data as possible and, where necessary, to manage registration and communication through a parent or legal representative. Specific participation conditions will be communicated for each relevant activity.

3.5. Photographs and video materials

During public Deschidem Mântuleasa events and activities, photographs and video materials may be produced for the documentation, archiving, promotion, and reporting of the project and the activities of Asociația Youth Vision for Society.

These materials may be published on the website, on the social media channels of Asociația Youth Vision for Society or of the project, in reports, editorial materials, press releases, presentations for partners or funders, and other materials related to the project.

As a general rule, we aim to use wide shots, atmosphere images, or images that do not portray individuals in an intrusive manner. In the case of minors, we take particular care to protect their identity and image.

If an identifiable person appears in material published by us and wishes to have it removed or anonymised, they may contact us at office@yvs.ro. The request will be assessed depending on the context and the applicable legal basis.

3.6. Data submitted directly by e-mail or through other channels

If you contact us by e-mail, telephone, social media, or other channels, we may process the information you voluntarily provide, such as your name, contact details, organisation, position, and the content of the message.

4. Purposes for which we process data

  • operation, administration, maintenance, and security of the website;
  • statistical analysis of traffic and improvement of website content, based on consent for Google Analytics;
  • management of forms and registrations for activities, events, tours, workshops, and open calls;
  • selection and coordination of participants, where the activity involves a selection process;
  • logistical and organisational communication with participants;
  • documentation, archiving, promotion, and reporting of the Deschidem Mântuleasa project;
  • communication with residents, participants, partners, volunteers, collaborators, funders, and other interested persons;
  • compliance with legal, contractual, financial-accounting, or reporting obligations;
  • handling requests and protecting the association’s rights and legitimate interests.

5. Legal bases for processing

We process personal data only where there is an applicable legal basis. Depending on the situation, this may include:

  • consent, for example for activating analytics/statistics cookies or in situations where we expressly request the data subject’s agreement;
  • performance of a contract or taking steps at the request of the data subject prior to entering into a contract, where the activity involves a contractual relationship;
  • compliance with a legal obligation, including financial-accounting, archiving, reporting, or other obligations provided by law;
  • the legitimate interests of Asociația Youth Vision for Society, for example for website administration and security, managing communications, organising activities, documenting the project, protecting the association’s rights, or keeping necessary records, while respecting the rights and freedoms of data subjects.

6. Google Analytics

The website uses Google Analytics, a web analytics service provided by Google, to understand how visitors interact with the website.

Google Analytics may use cookies and similar technologies to collect technical and statistical information, such as pages viewed, duration of the visit, device type, browser, traffic source, and interactions with the website.

Asociația Youth Vision for Society does not use Google Analytics for the purpose of directly identifying visitors. Google Analytics cookies are set only after the user gives consent for analytics/statistics cookies through the consent management mechanism available on the website. Until then, Google Analytics runs in restricted mode (Google Consent Mode): it does not set cookies or store identifiers and only sends anonymous technical signals without cookies.

7. Who may have access to the data

Depending on the situation, personal data may be accessed by:

  • members of the Asociația Youth Vision for Society team who need the information to organise the project;
  • collaborators or volunteers involved in certain activities, only to the extent necessary for their role;
  • technical providers involved in hosting, maintenance, security, e-mail, website administration, or form management;
  • Google, in connection with the use of Google Analytics;
  • project partners, only where access to certain data is necessary for organising a joint activity and there is an appropriate legal basis;
  • funders, auditors, public authorities, or other institutions, where there are legal, contractual, or reporting obligations.

We do not sell personal data and do not disclose it to third parties for commercial purposes unrelated to the project.

8. Hosting and technical administration of the website

The website is administered by Asociația Youth Vision for Society and may be hosted and maintained with the support of technical providers or collaborators. They may have limited access to technical data, logs, backups, or other information necessary for the operation, maintenance, and security of the website.

Technical access is limited to what is necessary for providing the services and administering the infrastructure.

9. Data transfers outside the European Economic Area

Some services used by the website, particularly Google Analytics, may involve data processing by international providers and, in certain situations, transfers of data outside the European Economic Area.

In such cases, transfers are carried out under the conditions provided by applicable legislation, through mechanisms such as adequacy decisions, standard contractual clauses, or other safeguards recognised by data protection law.

10. How long we retain data

We retain data only for as long as necessary for the purposes for which it was collected or for as long as legal, contractual, or reporting obligations apply.

  • technical data and security logs are retained for the period necessary to administer and secure the website;
  • data from registration or open-call forms is retained for the duration of the activity and afterwards, where necessary, for reporting, evaluation, audit, or fulfilment of obligations towards funders;
  • data of persons who are not selected in an open call will not be retained longer than justified by completion of the process and any reporting obligations, unless another legal basis applies;
  • correspondence may be retained for the period necessary to resolve the request and, where applicable, to protect the association’s rights and legitimate interests;
  • financial-accounting documents and supporting documents are retained in accordance with the applicable statutory retention periods;
  • photo and video materials may be retained in the project and organisational archive for as long as they remain relevant for documenting activities, while respecting the rights of data subjects.

When data is no longer necessary, it will be deleted, anonymised, or archived under appropriate conditions, depending on the nature of the data and the applicable obligations.

11. How we protect data

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or accidental destruction. These measures may include access controls, secure passwords and accounts, technical updates, backups, and internal rules governing access to data.

No information system can be guaranteed to be completely risk-free. In the event of a security incident that may affect the rights and freedoms of data subjects, we will act in accordance with applicable legal obligations.

12. Your rights

Under the conditions provided by data protection legislation, you may have the following rights:

  • the right of access to personal data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure of data, under the conditions provided by law;
  • the right to restriction of processing;
  • the right to data portability, where applicable;
  • the right to object to certain processing activities;
  • the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
  • the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significant effects, under the conditions provided by law;
  • the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.

To exercise these rights, you can contact us at office@yvs.ro. We may request additional information where necessary to verify the identity of the person making the request.

13. Complaints

If you believe that your data is not being processed appropriately, you may first contact us at office@yvs.ro so that we can review the situation.

You also have the right to contact the National Supervisory Authority for Personal Data Processing (ANSPDCP):

Website: www.dataprotection.ro
E-mail: anspdcp@dataprotection.ro
Address: 28-30 Gheorghe Magheru Blvd., Sector 1, Bucharest, Romania

14. Links to other websites

The website may include links to pages of partners, institutions, funders, social media platforms, forms, or other external resources. Access to these resources is subject to the terms and policies of the respective platforms.

Asociația Youth Vision for Society does not control the privacy policies or practices of external websites and recommends reviewing the information published by each provider before submitting personal data.

15. Updates to this policy

This Privacy Policy may be updated periodically to reflect legislative, technical, or organisational changes or the development of website functionality.

The updated version will be published on deschidem-mantuleasa.yvs.ro, indicating the date of the latest update.

For questions regarding this policy, you can contact us at office@yvs.ro.

Updated: