This Privacy Policy explains which personal data Asociația Clusterul de Excelență în Securitate Cibernetică (CYSCOE) processes when you visit cyscoe.ro, write to us, subscribe to our updates or apply for membership, why we process it, how long we keep it and what rights you have.
We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”), Law no. 190/2018 on measures implementing the GDPR and Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, as amended. This policy should be read together with our Cookie Policy, GDPR Policy and Terms of Service.
Asociația Clusterul de Excelență în Securitate Cibernetică (CYSCOE)
Registered office: Bd. Mareșal Alexandru Averescu nr. 8-10, et. 1, cam. 104, sector 1, 011455 București, Romania
Email:
CYSCOE is a Romanian non-profit, non-governmental association established under Government Ordinance no. 26/2000. We have not appointed a Data Protection Officer, as the conditions of Article 37 GDPR are not met. For any question about your personal data, write to .
When you access cyscoe.ro, the web server and our security services automatically record technical data: IP address, date and time of the request, page requested, referring page, browser and operating system, and security events (for example blocked or suspicious requests).
If you accept statistics cookies in the cookie banner, we use Google Analytics 4 to understand, in aggregated form, how the website is used (pages visited, visit duration, approximate location at country or city level, device type). Before consent, no statistics cookies are set. Google Consent Mode is active: while consent is refused, Google receives only cookieless signals that do not identify you and are not used for advertising.
When you use the contact form or write to us, we process your name, email address, telephone number (optional), the content of your message and any other information you choose to provide.
If you subscribe to our newsletter, we process your name and email address to send you news about CYSCOE activities, projects and events.
Organisations that wish to join CYSCOE complete a membership form and sign a non-disclosure agreement. In this context we process the identification and contact data of the organisation’s representatives, their role, and the information provided in the application.
CYSCOE takes part in conferences, workshops and European projects. When we publish news about these activities, articles may include the names, roles and photographs of speakers and participants.
Some pages include YouTube videos or a Google Maps map. These are blocked until you accept the corresponding cookie category, and you can also load them individually. Once loaded, the provider (Google) may collect data according to its own policies.
We do not sell personal data and we do not use it for advertising. Data may be accessed by the following categories of recipients, only to the extent necessary:
Service providers act as processors on our behalf, under contractual terms that include data protection obligations, or, where applicable, as independent controllers under their own terms.
Some providers (Google, Cloudflare, Defiant) are part of groups based in the United States. Where data is transferred to the United States, the transfer relies on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, for certified companies, or on the Standard Contractual Clauses adopted by the European Commission.
As a cybersecurity organisation, we apply technical and organisational measures proportionate to the risk: encrypted connections (HTTPS), a web application firewall, limitation of abusive requests, restricted administrative access, updated software and cookie consent management. No system is completely risk-free; if a personal data breach occurs that is likely to create a risk for you, we will notify the supervisory authority and, where required, the persons concerned, in accordance with Articles 33 and 34 GDPR.
Under the GDPR, you have the right to:
To exercise these rights, write to . We will answer within one month, which may be extended by two further months for complex requests, in which case we will inform you. We may ask for information to confirm your identity.
You also have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, 010336 București, , www.dataprotection.ro.
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you. The website is addressed to organisations and professionals and is not intended for children under 16; we do not knowingly collect their data.
We review this policy whenever the processing carried out through the website changes, and at least once a year. The current version is always published on this page, with its update date. The Romanian version of this policy prevails in case of any discrepancy between language versions.
