1. Identity of the controller
The data controller is Partidul Acțiunea Dreapta Română / de confirmat, which operates the public identity Alianța Dreaptă.
2. Categories of data processed
The form may collect: first and last name, email address, telephone number, city/county, field of activity, information about civic involvement, availability and ways of getting involved, topics of interest, the choice regarding updates and comments submitted voluntarily. In the context of participation in the activity of a political organization, some answers may reveal political opinions and may constitute special categories of personal data.
3. Purposes of processing
- registering and administering the participation request;
- contacting the person regarding activities, consultations and opportunities to get involved, if they have chosen to receive communications;
- internal organization of teams and areas of expertise;
- technical security and abuse prevention;
- compliance with the controller’s applicable legal obligations.
4. Legal basis
The processing of data supplied through the form is based on consent under Article 6(1)(a) GDPR and, for data that may reveal political opinions, on the explicit consent provided for in Article 9(2)(a). Other legal bases provided by law may also apply to website security and compliance with certain legal obligations.
5. Automated processing and AI tools
Digital tools may be used exclusively for administrative and organizational activities, with human review. No solely automated decisions producing legal effects, psychological or ideological profiling, or “loyalty” scoring systems are intended.
6. No “social scoring” assessments
No mechanisms are used to assign scores to individuals based on opinions, reputation, influence, social behavior or presumed political orientation.
7. Recipients of the data
The data may be accessed by authorized personnel of the controller, technical administrators necessary for the operation of the website, and competent authorities where there is a legal obligation. Access is limited according to each person’s responsibilities.
8. Infrastructure
The form is processed through a PHP/MySQL application hosted for aliantadreapta.ro. In the current configuration, no external traffic analytics or marketing tools are enabled.
9. Retention period
Data is retained only for as long as necessary for the stated purposes, applicable legal obligations and the defense of the controller’s rights, in accordance with internal procedures and applicable legal requirements.
10. Rights of the data subject
Under the GDPR, you may request access to your data, rectification, erasure, restriction of processing, data portability, objection where applicable, and withdrawal of consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.
11. Data security
The application includes CSRF protection, anti-spam mechanisms, submission rate limiting, access control, secure password storage, logging of administrative actions and backup options.
12. Updating this notice
This notice is updated when the controller, purposes, infrastructure or legal requirements change. The current version is permanently published on the website.