ACADEMIA URBAN MOWGLI, (hereinafter referred to as ParentED Fest), located in Bucharest, Palisandrului Street, no. 12A, 1st District, with the unique registration code 50058947, collects and processes personal data in accordance with legal provisions regarding the processing of personal data and the free movement of such data.

This Policy only pertains to the personal data that we process through our website www.parentedfest.ro (hereinafter referred to as the “Site” or “Platform”) in the context of your interaction with it by filling out forms available on the platform, creating an account, registering a review, placing an order, subscribing to the newsletter, completing the contact form, or simply browsing the site.

Personal data that may be subject to processing may include: name, surname, ID series and number, personal identification number (CNP), home address, delivery address, email address, fixed and mobile phone number, or other data designated by law as personal data.

We want to assure you that we have taken all necessary measures to ensure the confidentiality of your data, which are processed only by the Operator’s personnel who have been previously trained in personal data processing and authorized in this regard and who adhere to strict confidentiality commitments.

1. DEFINITIONS UNDER REGULATION NO. 2016/679/EU:

• “personal data” – means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
• “processing” – means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction;
• “controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
• “data subject” means the individual whose personal data is being processed;
• “data subject’s consent” means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
• “processor” means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

2. TYPES OF PERSONAL DATA PROCESSED

Your navigation on the Site and interaction with it involves the processing of personal data by the Operator that you voluntarily disclose (e.g., through the order form or contact form, or when subscribing to the newsletter), these being individually collected.

The user is appropriately informed about the processing of personal data when providing their data to the Operator through the site forms, thus ParentED Fest fulfilling its legal obligation to inform the user.

ParentED Fest collects, based on the voluntary provision of the data subject, the following personal data: name, surname, ID series and number, personal identification number (CNP), home address, email address, fixed and mobile phone number, or other legally designated personal data provided to the Operator.

Additionally, the Operator processes marketing and communication data only based on the prior consent of the users, as well as technical data and navigation actions through cookies and similar technologies.

The aforementioned data contribute to the provision of services offered by ParentED Fest, specifically in the online sale of products and services marketed through the platform, as well as in communication with the Operator or the transmission of marketing communications from it, with the prior consent of the User.

If you provide us with personal data that we do not need for the purposes described below, namely for fulfilling the ordered services, for handling complaints, or for providing additional information, we reserve the right to immediately remove them from our database.

The Operator may also involuntarily collect other personal data belonging to you, such as IP address, browser version, time zone settings and location, operating system, and platforms of the devices used to access our sites, etc. This information will not be used to identify individuals and will not be made public except under the conditions stated in this Privacy Policy, supplemented by the Cookie Policy.

3. PURPOSE AND LEGAL BASIS FOR COLLECTING AND PROCESSING PERSONAL DATA

ParentED Fest processes your personal data for the following purposes and based on the following legal grounds:

1. a) processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) of Regulation (EU) No. 679/2016 of the European Parliament and of the Council of 27 April 2016), specifically, to ensure the data subject’s access to the products/services marketed on the platform and to finalize the online sale;
2. b) processing is carried out based on the consent of the data subjects (Art. 6(1)(a) of Regulation (EU) No. 679/2016 of the European Parliament and of the Council of 27 April 2016), in the case of sending commercial and marketing communications or accepting cookies other than those necessary;
3. c) processing is necessary for compliance with a legal obligation (Art. 6(1)(c) of Regulation (EU) No. 679/2016 of the European Parliament and of the Council of 27 April 2016), which ParentED Fest has to inform the consumer/client about the validation, dispatch, invoicing of orders,
4. d) processing is necessary for the purposes of the legitimate interests pursued by the Operator (Art. 6(1)(f) of Regulation (EU) No. 679/2016 of the European Parliament and of the Council of 27 April 2016), to provide accurate and complete information about the products marketed through the online platform, including by adding the review function, to resolve any issues related to the content of the site or the services and products offered by the Operator, and for actions involving interaction with the online platform.

In the case of minors under the age of 16, the processing of personal data can only be carried out legally if and to the extent that consent is given or authorized by the holder of parental responsibility over the child.

4. DURATION OF PERSONAL DATA PROCESSING

Personal data processed through the site are retained for a reasonable period relative to the purpose of data processing, in accordance with legal provisions regarding data archiving. The Operator respects the data archiving deadlines imposed by law.

The data processed as a result of your subscription to the newsletter will be processed only until you withdraw your consent for processing.

5. TRANSFER OF PERSONAL DATA

ParentED Fest undertakes that the data collected will be processed only in accordance with the declared purposes and will not publicly disclose, sell, rent, license, transfer, etc., the database containing information about the data subjects to any third party not involved in fulfilling the declared purposes, except in cases where transfer/access/viewing, etc., is required by authorized bodies in accordance with the regulations in force at the time of the event.

Your data may be disclosed to other companies providing services to us and acting as processors, such as providers of website maintenance services, IT, legal, order delivery, etc.

Additionally, your data may be processed by our partners who provide payment processing services. This data is processed for the purpose of making the payment for your online order.

Providing personal data to the aforementioned partners and service providers will only be done based on a confidentiality commitment from them, which constitutes an addendum to the service provision contract, guaranteeing that all personal data are kept secure and provided in compliance with current legislation.

6. RIGHTS YOU HAVE AS A DATA SUBJECT

Any natural person navigating our site, as a data subject, has the following rights concerning ParentED Fest, as the personal data controller:

• Right of access means the right of the data subject to obtain confirmation from the Controller whether or not personal data concerning them are being processed and, if so, access to the data and information about how the data are being processed;
• Right to rectification refers to the correction, without undue delay, of inaccurate personal data processed or to complete them, if they are incomplete;
• Right to erasure/right to be forgotten means the right of the data subject to request the deletion of their personal data, without undue delay, in cases where one of the following reasons applies: they are no longer necessary for the purposes for which they were collected or processed, withdraws consent and there is no other legal ground for processing, objects to the processing and there are no overriding legitimate grounds, personal data have been unlawfully processed, personal data must be erased for compliance with a legal obligation, personal data have been collected in relation to the offer of information society services;
• Right to restriction of processing can be exercised if the data subject requests the limitation of the processing of their personal data, in which case they will be used strictly for exercising the other legal rights of the data subject, including responding to any requests/complaints from them;
• Right to data portability refers to the right to receive the personal data in a structured, commonly used, and machine-readable format and the right to have these data transmitted directly to another controller, when the processing is based on consent or the performance of a contract and is carried out by automated means, if this is technically feasible;
• Right to object refers to the data subject’s right to object to the processing of personal data when the processing is necessary for the performance of a task carried out in the public interest or when it involves a legitimate interest;
• Right not to be subject to automated individual decision-making, including profiling, refers to the data subject’s right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. However, this right cannot be exercised if the decision is necessary for entering into or performing a contract between the data subject and ParentED Fest, is authorized by applicable law to the Controller, provided that it ensures adequate protection of the data subject’s rights, freedoms, and legitimate interests, or is based on the data subject’s explicit consent obtained in accordance with current legislation;

• Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP). If the data subject considers that the rights mentioned above have been violated, they can contact ANSPDCP by submitting a complaint.

7. FINAL PROVISIONS

The provisions of the Privacy Policy are supplemented by the provisions of the Cookie Policy available on  www.parentedfest.ro.