Privacy Policy
The official website of the ELSA Sibiu Local Group
Last updated: 03.10.2025
1. General information
The Young Lawyers Association, hereinafter referred to as "ELSA Sibiu", with its registered office at Str. Banatului, no. 6, room 5, Mun. Sibiu, Sibiu County, collects, uses, stores, and protects personal data in accordance with Law No. 129/2018 amending and supplementing Law No. 102/2005 on the establishment, organization, and functioning of the National Supervisory Authority for Personal Data Processing, as well as repealing Law No. 677/2001 on the protection of individuals with regard to the processing of personal data and the free movement of such data, and based on European Directive (EU) 2016/679. By using our website [elsasibiu.org] and filling in the available forms, you express your consent to the processing of data in accordance with this policy.
2. ELSA Sibiu
ELSA Sibiu is a branch of the European Law Students' Association, hereinafter referred to as "ELSA Romania," which aims to contribute to legal education, stimulate mutual understanding, and promote social responsibility among law students and young lawyers. It is an international, non-governmental, apolitical, and non-profit organization established in 1996. , apolitical, and non-profit organization founded in 1996.
Contact details:
●Name:
●Email:
3. Data collected
We may collect the following categories of personal data:
●Identification data: first name, last name, faculty, year of study;
●Contact details: email, phone number;
●Participation data: events you have registered for, preferences, feedback;
●Technical data: IP address, browser type, information about website usage;
●Documents (where applicable): CVs, cover letters, portfolios, certificates, and other documents required for registration and participation in various events and projects organized by the Local Group.
4. Purpose of data collection
Personal data is collected for the following legitimate purposes:
●Organizing and promoting ELSA Sibiu events (conferences, workshops, competitions, obtaining internships);
●Communicating with ELSA participants and members;
●Sending newsletters and relevant information (only with explicit consent);
●Statistics and internal analysis to improve activities;
●Managing applications for ELSA programs (e.g., PD, S&C, AA, Marketing, etc.).
5. Legal basis for processing
Data processing is carried out on the following legal bases in accordance with Article 6(1) of
the GDPR:
●The explicit consent of the data subject;
●The performance of a contract or pre-contractual measures (e.g., registration for
events);
●Compliance with the legal obligations of the organization;
●ELSA's legitimate interest in promoting its educational activities.
6. Access to data
Only the following parties will have access to the collected data:
●Members of the ELSA Sibiu Local Group involved in organizing events;
●Partners or sponsors, in the situations expressly provided for;
●Service providers (e.g., Google for Analytics)
●All partners, collaborators, or sponsors are required to comply with confidentiality and data
protection legislation.
7. Storage duration
Personal data will only be stored for as long as necessary to fulfill the purposes for which it was collected or as long as required by law.
Examples:
●Event participation data: max. 1 year;
●Application data: max. 1 year;
●Newsletter contact data: until consent is withdrawn.
8. User rights
In accordance with the Law and the Directive, you have the right to obtain from the
controller, upon request and free of charge:
a) Right of access
Users have the right to request information about their personal data that we collect, the
purpose of processing, the recipients of this data, and the period for which it will be stored.
b) Right to rectification
Users may request the correction or completion of their personal data if it is incorrect or
incomplete.
c) Right to be removed ("right to be forgotten")
Users may request the erasure of personal data under certain conditions, for example:
●if the data is no longer necessary for the purposes for which it was collected;
●if the user withdraws their consent;
●if the data has been processed unlawfully.
d) Right to restriction of processingUsers may request the restriction of the processing of their personal data in certain situations, such as when they contest the accuracy of the data.
e) Right to data portability
Users have the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
f) Right to object
Users may object, on grounds relating to their particular situation, to the processing of their personal data. This right applies in particular to processing for direct marketing purposes.
g) Right not to be subject to an automated decision
Users have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
h) Right to lodge a complaint
Users have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) (www.dataprotection.ro) or with a competent supervisory authority in the EU. To exercise these rights, you can contact us at: elsa.sibiu@ro.elsa.org
9. Data security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, or disclosure. Data will be secured through virtual storage in databases protected by the G Suite package (e.g., Google Drive).
10. Changes to the privacy policy
ELSA Sibiu reserves the right to periodically modify this document. Any updates will be published on the website with the date of the last revision. It is the user's responsibility to consult this page periodically to stay informed of any
changes.