Legal
Privacy Policy
Who is responsible
The controller for personal data processed through this website is European Smart Cities Association, Integral Business Center, Bulevardul Pipera nr. 1-IA, 077190 Voluntari, Ilfov County, Romania.
For any privacy matter, write to [email protected] with the subject line Privacy.
What this website collects
When you browse
This website sets no advertising cookies, no tracking cookies and no third-party cookies. It loads no fonts, scripts, images or stylesheets from third-party servers.
Standard server logs may record the IP address, the requested address, the time of the request and the user agent, for the purpose of operating and securing the service. The legal basis is the legitimate interest of ESCA in operating a secure service.
When you submit a form
Forms on this website collect the information shown on the form itself: typically a name, a work email address, an organisation and the substance of the enquiry. Some forms allow documents to be attached.
The information is used to respond to the submission and to carry out the process it relates to, such as assessing a city challenge or handling a membership request. The legal basis is the consent you give when submitting the form, and, where a relationship exists, the performance of that relationship.
Analytics
This website defines a set of analytics events so that ESCA can understand which parts of the platform are used. No analytics vendor is connected at present, and no analytics data leaves your browser. If an analytics service is introduced, this policy will be updated before it is enabled, and any service used will be one that does not require consent because it collects no personal data.
DEMO / REPLACE WITH VERIFIED DATA
What ESCA does not do
- Sell or rent personal data.
- Share enquiry information with members, suppliers or partners without explicit agreement.
- Use information submitted for one purpose to market unrelated services.
- Build profiles of visitors or take automated decisions with legal effect.
How long information is kept
Enquiries are kept for as long as needed to handle them and to maintain a record of the exchange, normally not more than three years from the last contact. Membership and contractual records are kept for the period required by Romanian accounting and association law.
Who else may see it
Service providers used to operate this website, such as the hosting provider and any email or CRM system used to handle submissions, may process personal data on behalf of ESCA under a data processing agreement. A current list of processors is available on request.
Where a city challenge or project is published at the request of an authority, the content published is the content the authority has confirmed. Named individuals are not published without their agreement.
Your rights
Under the General Data Protection Regulation you have the right to:
- ask what personal data ESCA holds about you and receive a copy;
- have inaccurate data corrected;
- have data erased where there is no overriding reason to keep it;
- restrict or object to processing;
- receive data you provided in a portable format;
- withdraw consent at any time, without affecting processing already carried out;
- lodge a complaint with a supervisory authority.
To exercise any of these, write to [email protected] with the subject line Privacy. ESCA responds within one month.
The competent supervisory authority for ESCA is the Romanian National Supervisory Authority for Personal Data Processing. You may also complain to the supervisory authority in the country where you live or work.
International transfers
ESCA aims to keep processing within the European Economic Area. Where a processor operates outside it, an appropriate transfer mechanism is put in place and is disclosed in the processor list.
Changes
This policy is updated when processing changes. The date at the top of this page shows when it was last revised, and material changes are noted here rather than made silently.