// LEGAL
Privacy Policy
How CyberSecurity Dialogues Romania collects, uses and protects your personal data when you visit this website, register for the congress or contact us.
Last updated: 2 October 2026
01 //
Who we are
CyberSecurity Dialogues Romania is an annual cybersecurity congress held in Sibiu, Romania. The congress and this website are run by its organisers, led by Swiss Webacademy, the founder of the event. The organisers act as the data controller for the personal data described in this policy.
Questions about your data? Write to congress@swissacademy.eu or office@swissacademy.eu, or call +40 725 593 696.
02 //
Data we collect
Registration. When you register for the congress we collect your full name, function / title, company (or private person status), company registration number (CIF / CUI), email address, phone number, country, website (optional), the congress pack you choose and a record of your consent.
Contact form and emails. Your name, email address, subject and message, and anything else you choose to tell us.
Payments. Card payments are made through a secure payment link sent in your confirmation email and are handled by our payment service provider. We do not receive or store your full card number. For bank transfers we receive the payer name, amount and payment reference.
Website usage. Through cookies and similar technologies we collect pseudonymous identifiers, pages viewed, approximate location, browser and device information, and how you arrived at the site.
03 //
Why we use your data
– To register you, confirm your place, issue invoices and manage your participation (performance of a contract or steps taken at your request, Art. 6(1)(b) GDPR).
– To communicate with you about the organisation and running of the congress, as you agreed in the registration form (consent, Art. 6(1)(a) GDPR).
– To keep accounting and tax records (legal obligation, Art. 6(1)(c) GDPR).
– To answer your messages and requests (steps before a contract and legitimate interest, Art. 6(1)(b) and 6(1)(f) GDPR).
– To understand how the website is used, improve it and keep it secure (legitimate interest, Art. 6(1)(f) GDPR).
– To promote the congress with photos and video from the event (legitimate interest, Art. 6(1)(f) GDPR).
04 //
Who receives your data
We do not sell your personal data. We share it only with the parties that help us run the congress and this website, and only as far as necessary:
– Event organisers and partners involved in running the congress, for example for venue access, badges and logistics.
– IT service providers: website hosting, email and form handling, and our payment service provider.
– Google, which provides the analytics service used on this website (Google Analytics through Site Kit).
– Public authorities, when we are legally required to disclose information, for example tax authorities.
We share participant lists with sponsors or other third parties only if you have explicitly agreed to it.
05 //
Transfers outside the EEA
Some of our providers, including Google, may process data outside the European Economic Area, including in the United States. Where this happens we rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
06 //
How long we keep your data
– Registration data: for the duration of the congress and for as long as needed afterwards for follow-up and to meet our legal duties.
– Invoices and accounting records: for the period required by Romanian accounting and tax law.
– Contact messages: for as long as needed to handle your request, then deleted.
– Analytics data: for the retention period set in our analytics account.
– Data processed on the basis of consent: until you withdraw your consent, unless we have another legal reason to keep it.
07 //
Cookies
This website uses a small number of cookies and similar technologies:
Analytics (Google Analytics): the cookies _ga and _ga_* distinguish visitors and measure traffic. They are stored for up to 2 years.
Cookie notice: your browser's local storage remembers that you have acknowledged our cookie notice, so that it does not appear on every page.
You can delete or block cookies in your browser settings at any time, and opt out of Google Analytics with the browser add-on at tools.google.com/dlpage/gaoptout. Blocking cookies does not prevent you from using the website or registering for the congress.
08 //
Photos and recordings at the event
The congress is photographed and filmed to document the event and to promote future editions. If you do not want to appear in photos or video, tell the staff at the registration desk or write to us, and we will respect your request wherever possible. You can object at any time to the use of images in which you can be identified.
09 //
Your rights
Under the GDPR you have the right to:
– access the personal data we hold about you;
– have inaccurate data corrected;
– have your data erased;
– restrict how we use your data;
– receive your data in a portable format;
– object to processing based on legitimate interest;
– withdraw your consent at any time. This does not affect processing carried out before you withdrew it.
To exercise these rights, email congress@swissacademy.eu. We will reply within one month. We do not take decisions about you based solely on automated processing.
If you believe your data is not handled properly, you can lodge a complaint with the Romanian data protection authority (ANSPDCP, www.dataprotection.ro) or with the authority in your own country.
10 //
Security and children
We apply technical and organisational measures to protect your data, including encrypted (HTTPS) connections and restricted access to registration data. The congress is aimed at professionals and this website is not intended for children.
11 //
Changes to this policy
We may update this policy from time to time. The date of the latest version is shown at the top of this page.