Partidul Acțiunea Dreapta Română / de confirmat
1. Who we are
This policy describes how personal data is processed through the aliantadreapta.ro website. The data controller is Partidul Acțiunea Dreapta Română / de confirmat, which operates the public identity Alianța Dreaptă.
2. Applicable framework
Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR), the applicable national implementing legislation and, where relevant, the rules applicable to political parties and their financing.
3. Principles
- lawfulness, fairness and transparency;
- purpose limitation and data minimization;
- accuracy and storage limitation;
- integrity, confidentiality and accountability.
4. Categories of data processed through the website
4.1. Data provided directly
The participation form may collect first and last name, email address, telephone number, city/county, field of activity, information about civic involvement, ways of getting involved, topics of interest, the choice regarding updates and information voluntarily entered in free-text fields. Some answers may reveal political opinions and may constitute special categories of personal data.
4.2. Technical data
For website security and operation, the site may process the IP address in a limited or masked form, technical information about the browser/device, security logs and strictly necessary cookies. The website is configured without external traffic analytics or marketing tools.
5. Purposes of processing
- managing participation requests and communication with interested persons;
- internal organization of activities and working groups;
- website administration, abuse prevention and infrastructure security;
- sending updates only to persons who have explicitly selected this option;
- compliance with the controller’s applicable legal obligations.
6. Legal basis
Data submitted through the form is processed on the basis of the data subject’s consent under Article 6(1)(a) GDPR. Where answers may reveal political opinions, processing is based on the explicit consent provided for in Article 9(2)(a). For the technical security of the website, there may also be a legitimate interest in preventing fraud, abuse and security incidents, while certain processing may be necessary to comply with legal obligations.
7. How data is processed and stored
The website uses PHP 8.1+ and MySQL/MariaDB on hosting infrastructure administered for aliantadreapta.ro. Submissions are stored in the database and are accessible only to authorized users through the administration panel. Internal notifications regarding submissions may be sent to administrative addresses configured in the system.
8. Who has access to the data
Access is granted only to authorized persons who need the information to administer the form and related activities, strictly necessary technical service providers, and public authorities where there is a legal obligation.
9. International transfers
The website currently does not enable external traffic analytics or marketing services. If providers involving transfers outside the European Economic Area are added in the future, this policy and the cookie consent mechanism will be updated before those services are enabled.
10. Retention periods
Data is retained only for as long as necessary for the stated purposes, applicable legal obligations and the defense of the controller’s rights, in accordance with internal procedures and applicable legal requirements.
11. Digital tools and AI
If automated or AI tools are used for internal organization, they must not be used for solely automated decisions producing legal effects or for political or psychological profiling or “social scoring” assessments. Any such use will be documented and subject to human oversight.
12. Data subject rights
Under the GDPR, data subjects may request access to their data, rectification, erasure, restriction of processing and data portability, and may object to processing where applicable. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal. Data subjects may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.
13. Minors
The website is not intended to intentionally collect data from minors. If such data is identified, it will be handled in accordance with applicable law.
14. Data security
Measures include access control, secure password storage, CSRF protection, automated submission rate limiting, audit logs, backups and periodic updates.
15. Changes
This policy may be updated when the services, infrastructure, purposes or legal obligations change. The current version is published on the website.