Privacy

Privacy Policy

This policy explains how ViCyber may process personal data through the website, including when you access public pages, contact us, or choose to enable third-party content or optional analytics features.

Last updated: 2026-03-19

Controller and contact details

Within the meaning of Regulation (EU) 2016/679 on the protection of personal data (GDPR), the controller for the processing described on this page is the entity presented on the site under the name ViCyber.

For questions regarding data protection or to exercise the rights provided by applicable legislation, you can contact us at contact@vicyber.ro.

  • Name used on the site: ViCyber
  • Contact address: contact@vicyber.ro

Categories of data processed

The site normally operates without user accounts and without first-party forms that send data to ViCyber’s own infrastructure.

However, when accessing the site, technical data resulting from the use of internet communication protocols and from the operation of the hosting and security infrastructure may be processed. If you choose to open the Google Form dedicated to the KDays campaign, you may also voluntarily submit contact data or information about your interest in sponsorship, participation, or support.

  • technical access data, such as IP address, date and time of the request, requested URL, browser and device identifiers, as well as information regarding security and service diagnostics
  • preferences stored locally in the browser, if you explicitly choose certain options
  • data sent to third-party providers only after consent is given, for external content or optional analytics
  • identification data, contact data, and message content, including the selected role, sponsorship amount, and notes voluntarily submitted through the Google Form of the KDays campaign

Purposes and legal bases of the processing

We process strictly the data necessary to provide the site, ensure security, prevent abusive use, and maintain essential functionalities.

External content is loaded only on the basis of your consent. If analytics are used, they may be managed either through the site settings or at the Cloudflare configuration layer, depending on how the site is published.

  • Art. 6(1)(f) GDPR: legitimate interest regarding the security, integrity, and functioning of the site
  • Art. 6(1)(a) GDPR: consent for loading Google Maps and, where applicable, for analytics tools configured at site level
  • Art. 6(1)(b) and/or (f) GDPR: handling requests voluntarily submitted through the Google KDays form, including interest in participating as a member or volunteer and sponsorship leads
  • where cookies or similar technologies that are not strictly necessary are used, storage or access to information on the terminal is carried out under the conditions of Art. 4(5) of Romanian Law no. 506/2004

Recipients and providers

The data may be accessed, where applicable, by providers that ensure hosting, network-level protection, content delivery, and the optional functionalities activated by you.

  • Cloudflare, for infrastructure, resource delivery, and security measures
  • Google Maps, only after external content is enabled
  • Cloudflare Web Analytics, if it is enabled for the domain and depending on the configuration used for publishing the site
  • Google Forms / Google LLC, if you choose to open and submit the public KDays support form
  • Google Sheets / Google LLC, insofar as form responses are synchronized operationally for follow-up
  • Asociația Universitatea Copiilor and the payment processor used by it, only after the explicit choice of the online donation flow

International transfers

Some providers used by the site may process data outside the European Economic Area, depending on their global architecture.

In such situations, transfers are carried out, where applicable, based on mechanisms recognized by the GDPR, and the relevant details should also be checked in the providers’ documentation.

Storage period

Consent preferences and the selected language are stored locally in the browser until they are changed or deleted by the user.

The storage periods applicable to technical logs or data processed by third-party providers depend on the effective configurations of the services used and on their policies.

Data submitted through the Google Form may be retained both in the Google Forms interface and in the team’s operational Google Sheet for the reasonable period necessary for triage, follow-up, and archiving sponsorship or support relationships.

  • you can delete the locally stored data at any time directly from your browser settings

Rights of the data subject

Under the conditions provided by Art. 12-23 GDPR and, where applicable, Romanian Law no. 190/2018, you have the right of access, rectification, erasure, restriction of processing, data portability, objection, and the right not to be subject to a decision based exclusively on automated processing.

If the processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

  • you can send requests to: contact@vicyber.ro
  • you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

Automated decisions

In its current form, the site does not use automated individual decision-making processes or profiling that would produce legal effects or similarly significant effects on users.