Data protection policy

Privacy Policy

Last updated: 18.08.2026

At PROJECT BAG, we respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Romanian legislation.

This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have regarding your personal information.

1. Data Controller

The controller of your personal data is:

Project Bag Association
Address: Sâncrăieni, Felszeg Street no. 787, Harghita County, Romania
E-mail: info@projectbag.org
Website: projectbag.org (PROJECT BAG)

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Full name
  • E-mail address
  • Phone number
  • Billing information
  • Company details (if applicable)
  • Reservation or event participation details
  • Payment-related information
  • IP address and technical website usage data
  • Information submitted through contact forms

We only collect data that is necessary for providing our services, communicating with users, and complying with legal obligations.

3. How We Use Your Data

We process personal data for the following purposes:

  • Managing event registrations and reservations
  • Providing purchased services
  • Processing payments
  • Issuing invoices
  • Responding to inquiries and support requests
  • Sending important administrative communications
  • Improving website functionality and user experience
  • Complying with legal and tax obligations
  • Ensuring website security and fraud prevention

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Your consent
  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests related to operating and securing our services

5. Payment Processing

Online payments are processed through authorized payment processors such as Netopia Payments. Payment card information is handled exclusively by the payment processor through secure encrypted SSL connections. (PROJECT BAG)

We do not store your full card details on our servers.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, and reporting obligations.

Certain financial and invoicing records may be retained for the period required by Romanian law.

7. Data Sharing

We do not sell or rent your personal data.

Your information may be shared only with:

  • Payment processors
  • IT and hosting providers
  • Accounting or legal service providers
  • Public authorities when legally required

All third parties are required to protect your data and process it lawfully.

8. International Transfers

As a rule, your data is processed within the European Economic Area (EEA). If data is transferred outside the EEA, appropriate GDPR safeguards will be implemented.

9. Your Rights Under GDPR

Under GDPR, you have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at:
info@projectbag.org

10. Cookies and Technical Data

Our website may use cookies and similar technologies to improve functionality, analyze traffic, and enhance user experience.

You can control or disable cookies through your browser settings.

11. Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

Despite our efforts, no method of transmission or storage is completely secure.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be published on this page together with the updated revision date.

14. Contact

If you have questions regarding this Privacy Policy or the processing of your personal data, please contact:

Project Bag Association
E-mail: info@projectbag.org
Website: PROJECT BAG Contact Page (PROJECT BAG)