Privacy Policy

1. Who are we?

We, namely Electricity Project SRL, with the unique identification number 50360413, registered under J12/3193/2024, headquartered in Bonțida no. 156, Cluj County, legally represented by Mihai Alin Păun, have taken the necessary technical and organizational measures to protect your personal data against loss or alteration, as well as to eliminate the risks of unauthorized access.

Thus, the processing of personal data is in accordance with the legal provisions regarding the protection of personal data and the EU Regulation 2016/679 (hereafter GDPR).

Our contact details are listed below:

Bonțida, numărul 156,
comuna Bonțida, jud. Cluj,
400371, Romania

Email: contact@electriccastle.ro

2. What personal data we process about you?

When we talk about personal data, we refer to information that can clearly identify a living individual, such as the name and address from the identity card, residence address, phone number, email address. Identification must be made exclusively based on this information or in conjunction with other data in our possession.

If you choose to use our website or benefit from our services through the Electric Castle application, we may collect the following personal information about you: name, phone number, email address, postal address, IP address, banking details, date of birth, nationality, image (by collecting photos) – with the exception of minors, whose image we do not process, data uploaded on social media accounts, if you have connected with them. In certain cases (people with disabilities and their companions), we also process medical data, but exclusively for ensuring free access at the Festival.

In all cases, the details we request from you via the website are necessary to provide you with optimal service, depending on the purpose for which you have provided them to us (e.g., festival access, camping area access, participation as a volunteer, etc.), and if you refuse to provide them, you may not be able to fully benefit from our services.

At the festival, there will be photographers and accredited journalists present to capture the best moments, so we may also process data consisting of your image and voice through photographs or recordings. These photos/recordings will be processed exclusively for journalistic or artistic purposes, namely for publication on our social media accounts (Facebook, Instagram, TikTok, etc.). We will not use your image and voice for commercial purposes without your prior consent, nor to create profiles in your name.

In the case of live moments such as the 'Kiss Cam', the images are displayed only in real time on the festival screens and are not stored or further processed by the organizers.

3. How do we collect personal data?

We collect information about you in three ways:

1. Directly - when you register on the electriccastle.ro website (WEB) or through the Electric Castle application (APP); when you subscribe to the newsletter; when you purchase tickets to our event, from the WEB/APP, when you personalize your access ticket to the event; when you contact us, when you apply for press accreditation or fill out our form to become an EC Ambassador; when you fill out declarations (e.g., volunteer, access for people with disabilities, etc.), when you provide us with data to deliver your Lifetime Pass ticket. Therefore, it is very important to remember that, if other people use your computer/mobile device, you must log out at the end of your browsing session. Otherwise, any person with access to your devices will automatically have access to all the information you have provided us.
2. Automatically - when you use our services on the WEB/APP, we collect information through cookies and by logging your activity. For more information on the use of cookies, please consult the information on the site. In addition, if you have previously provided us with personal information, we may automatically associate that information with other information we collect from your user account whenever you log in so that we can identify you across multiple devices and browsers, giving you the same browsing experience regardless of the environment you connect to.
3. From third parties - we may also obtain information about you from third parties that operate data through cookies.

Please note that your data will be stored for a reasonable period of time, relative to the purpose for which we collected that data. For example, data processed for the purpose of participating in a contest will be stored exclusively for the duration and validation of the contest, unless there are legal obligations that require their retention. Also, the data in your profile from the WEB/APP will be stored until you opt for account deletion. Medical data will be stored for a period not exceeding 30 days from the end of the festival edition for which you have communicated them to us.

Also, certain personal data are not stored by us, such as the bank data processed at the time of ticket purchase, these being stored by third parties (the payment processor), and the photos uploaded at the time of personalizing the ticket, these being stored by the partner which provides us with the necessary infrastructure regarding RFID wristbands for access to the festival.

* When you fill out our registration form to be notified about the next ticket sale round, we collect the following personal data: first name, last name, email address, and phone number. This information is used to send you notifications about ticket sales, special offers, and other updates related to Electric Castle. Your data may be shared with third-party email and SMS marketing service providers who are obligated to protect it and use it exclusively for the purposes specified by us. You can unsubscribe from these communications at any time by following the instructions in the messages received or by contacting us directly.

4. How do we use your personal data?

When you interact with us, we will collect personal data and use it for various purposes, such as:

• informing users about the status of their account including validation, dispatch, and billing of orders, resolving cancellations or problems of any nature related to an order, to the services or goods purchased, identity verification for access to the festival (including the processing of uploaded images at the time of ticket personalization),
• sending Newsletters and/or periodic alerts, using electronic mail (email, SMS) managing the WEB/APP, to allow you to use our services, including sending you online tickets, subscribing you to Newsletters, informing you about purchases made or other administrative announcements, contacting us, etc.,
• according to the purpose mentioned at the time you directly provided us with the data (e.g., applying to become an EC Ambassador, obtaining press accreditation, registering for promotional campaigns and EC contests, etc.).
• We also use your personal data to analyze and evaluate your personal interests and preferences, to personalize your experiences on the site and to improve our services and offer you services suitable to your interests and preferences.

The basis for the processing of personal data is art. 6 para. (1) lit. a) (eg: the data provided for subscribing to the Newsletter), lit. b) (eg: the data provided for providing access to the festival), lit. c) (eg: communication of data to the authorities at their request, fulfillment of fiscal obligations), letter f) (eg: in order to defend the subscriber's rights from a legal point of view).

5. To whom do we transfer your data?

We guarantee that your data will not be sold or rented to other individuals or legal entities, so that they can be used by other companies, without your consent. However, we may communicate your data to third parties to ensure that you can benefit from our high-quality services, such as to other users if you choose to use the ticket exchange platform, to service providers that ensure the operation of the WEB/APP or the online payment system, marketing agencies, authorities or public institutions in order to fulfill legal obligations, etc.

Your data will not be transferred outside the European Economic Area.

6. Cookies

A cookie is a small-sized text file that stores Internet settings. Most websites use cookie technology. Cookies are downloaded by your internet browser the first time you visit a website. The next time you visit this website from the same device, the cookie and the information in it are either sent back to the website where it was generated (primary cookies) or to another website to which it belongs (cookies processed by third parties). Thus, the WEB/APP can detect that it has already been opened using this browser and, in some cases, will then vary the content displayed.

When you access our services through the WEB or APP, we may use cookies, for the purpose of simplifying the browsing experience, allowing, for example, access to users who have previously registered, access to promotions and contests exclusively reserved for registered users, without needing to register at each visit. We also use cookies to measure audience parameters, traffic, and the number of accesses.

Cookies included on this website that do not require consent

Mandatory cookies, known as "strictly necessary" cookies, allow functionalities without which the use of the website for the intended purpose would be impossible. These cookies are used exclusively by this website and are therefore known as "primary cookies". They are saved only on your device during browsing. An example regarding the need to use strictly necessary cookies is ensuring that what you see on the screen corresponds to the volume of data that your Internet connection can handle. Moreover, such a cookie is used to store your consent regarding the use of cookies on our site.

Your consent is not required for the use of strictly necessary cookies.

Primary cookies that require consent

Cookies that are not legally essential for using the WEB/APP still perform important functions. Without these cookies, functionalities that allow easy use of our services, such as authentication or accessing your personal account, would no longer be available.

Use on this website of cookies processed by third parties that require consent

This WEB/APP integrates content belonging to third-party service providers. These third-party service providers may place cookies while you visit the WEB or use the APP, thereby obtaining information about this fact. If you need more information on how these third-party service providers use cookies, please access their websites. If you do not want to accept any cookies at all, then you can configure this directly in your browser.

7. What are your rights?

In accordance with applicable legal provisions, you have a series of rights that are quite complex and include exceptions, which is why it is recommended to consult the relevant legislation as well as directives issued by competent authorities to obtain complete explanations regarding these rights. However, you can find a summary of your rights below:

7.1. The right to access data

You have the right to obtain confirmation that your personal data is or is not being processed by us. In addition, you have the right to obtain more detailed information regarding the personal data stored and regarding their processing by us and, in certain circumstances, you have the right to obtain a copy of this personal data.

7.2. The right to rectify data

You have the right to request the rectification of incorrect personal data and, taking into account the purpose for which they are processed, to request the completion of missing personal data.

7.3. The right to erase data

In certain cases, you have the right to the erasure of your personal data without unjustified delays. These circumstances include: i) when personal data are no longer necessary in relation to the purposes for which they were collected or processed; ii) when you withdraw your consent for consent-based processing; iii) when processing is for direct marketing purposes (including newsletters) and; iv) when personal data have been processed in non-compliance with the law. However, there are certain general exceptions to the right to data erasure. These general exceptions include cases where processing is necessary: i) for exercising the right to freedom of expression and information; ii) for fulfilling legal obligations, or; iii) for establishing, exercising or defense of legal claims.

7.4. The right to restriction of processing

In certain cases, you have the right to restrict the processing of your personal data. Where processing has been restricted, we may continue to store your personal data. Otherwise, we will process them only when: i) we have your consent; ii) they are necessary for the establishment, exercise or defense of legal claims; iii) they are necessary for the protection of the rights of another natural or legal person, or; iv) for important reasons of public interest.

7.5. The right to data portability

To the extent that the legal basis for processing is your consent and this processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format. However, this right does not apply where its exercise would adversely affect the rights and freedoms of others.

7.6. The right to object

You have the right to object to the processing of your personal data for reasons related to your individual situation, but only to the extent that the legal basis for processing is that the processing is necessary: i) for the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or ii) for the purposes of the legitimate interests pursued by us or by a third party. In such a case, we will cease processing personal data, except where we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, and defense of legal claims.

7.7. The right to withdraw consent

To the extent that the legal basis for data processing derives from your consent, you have the right to withdraw it at any time.

If you withdraw your consent, we will cease processing your personal data, except in cases and to the extent that continued processing is allowed or required under current data protection regulations or other laws and regulations applicable in this context.

If you refrain from providing the necessary consents or subsequently withdraw from these consents, this may result in you being unable to benefit from some of the services we provide.

7.8. The right to complaint to data protection supervisory authority

You have the right to lodge a complaint with a local data protection supervisory authority at any time. The data protection supervisory authority in Romania is:

Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal
Bld. General Gheorghe Magheru 28-30,
010336, Bucuresti,
Romania
Tel: 031 805 9211
www.dataprotection.ro

8. What happens if I am not of legal age?

We care about the privacy and safety of minors on the Internet and at the festival, which is why we invite you to read the sections regarding minors' access to the festival in the Regulation, which can be accessed here.

If you are not yet 16 years old, you will need to use the WEB/APP services only under the supervision of a parent/legal guardian.

For account validation, we will also need a statement signed by the parent/legal guardian giving their consent for you to use our WEB/APP services.

We strongly recommend not to declare an age other than your own in order to protect your identity online.

9. Processing the data of other persons

If you choose to provide us with personal data of other persons, such as when purchasing tickets on behalf of others, you assume responsibility for the way you have obtained these data and that you have a legal basis for processing them, including the consent of the person concerned. We cannot be held responsible for violating the rights of those persons.

10. Updating the data privacy policy

We reserve the right, at our discretion, to add, modify, or remove portions of this Privacy Policy in the future to ensure that the information provided offers relevant and adequate information regarding our processing of your personal data.

You can always find the updated version of our Privacy Policy on this web page.