Draft for organizer review. The controller’s legal identity and registered address must be completed before publication; this document is not a substitute for legal advice.
Updated: 11 October 2026
1. Controller and scope
This policy describes personal data processing on the Transilvania Dance Open website under Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation, including Law no. 190/2018. Contact the TDO team at stepupdancecluj@gmail.com. The controller’s full legal name, registered address and identification details have not yet been supplied and must be added before this policy is published.
2. Data processed
Enquiries may include your name, email, dance school (optional), subject and message. Technical providers may process your IP address, browser/device details and security logs. Do not send health information, identity documents or sensitive data, or unnecessary information about children. This website does not collect competition registrations or payments.
3. Purposes and legal bases
We handle enquiries and correspondence based on our legitimate interest in communicating with people interested in the competition (GDPR Article 6(1)(f)). Where your enquiry concerns steps towards a contract with you, Article 6(1)(b) applies. Security and abuse prevention rely on legitimate interests; applicable legal obligations rely on Article 6(1)(c). Messages are not used for marketing. We do not profile you or make solely automated decisions with legal effects.
4. Form and direct communication
Form submission is available only after Cloudflare Turnstile anti-spam protection is activated. When active, messages are saved privately in Lovable Cloud for the organizers. Automatic email notification is not yet active. Email and WhatsApp communication takes place within those services. Providing data is voluntary; we cannot respond without contact information.
5. Recipients and external services
Access is limited to authorized organizers and providers needed for hosting, security and communication: Lovable Cloud, Cloudflare Turnstile and, when you choose to contact us that way, email or WhatsApp services. Facebook and Instagram links do not embed social feeds. Registration takes place separately on SmartDance under that platform’s policies. Data is not sold.
6. Transfers and security
Global providers may process data outside the European Economic Area. Before relevant processing is activated, the organizer must verify recipients, agreements and applicable safeguards, such as an adequacy decision or standard contractual clauses, where required. Form protection includes validation, anti-bot verification and private message access. No online transmission can be guaranteed entirely risk-free.
7. Retention
Data should be kept only as long as needed to handle enquiries and meet legal obligations or defend legal claims. Specific periods for correspondence, logs and backups and the deletion procedure must be confirmed before the form is activated; no automatic deletion period has yet been verified. Cookie choices are stored in your browser for up to 180 days.
8. Your rights
Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction, objection and, where applicable, portability. You may withdraw consent for consent-based processing without affecting prior lawful processing. Send requests to stepupdancecluj@gmail.com; GDPR deadlines apply, normally one month, with a reasoned extension where permitted. You may complain to the Romanian supervisory authority ANSPDCP, www.dataprotection.ro, 28–30 Gheorghe Magheru Boulevard, Sector 1, Bucharest, or seek a judicial remedy.
9. Children and updates
For enquiries involving a child’s data, we recommend contact by a parent, legal representative or authorized school representative. This form does not ask minors for registrations or sensitive data. The policy will be updated when services or purposes change; the current revision date appears on this page.
Personal data contact: stepupdancecluj@gmail.com · 0744 188 335