Privacy Policy

1. Preamble

We consider the right to the protection of personal data a fundamental commitment, and we therefore dedicate all necessary resources and efforts to processing your data in full compliance with Regulation (EU) 2016/679 (the “General Data Protection Regulation”, or “GDPR”), as well as with any other legislation applicable in Romania. Since transparency is one of the essential principles of this legal framework, we have prepared this document to inform you how we collect, use, transfer and protect your personal data when you interact with us, including through our website.

We reserve the right to update and periodically amend this Privacy Policy in order to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such change, we will publish the amended version on our website, which is why we kindly ask you to check the content of this Policy periodically.

2. Who we are and how to contact us

The controller is the NATIONAL MUSEUM OF THE UNION IN ALBA IULIA, located in Alba Iulia, Str. Mihai Viteazu, Nr. 12-14, 510010, Alba County, Romania, fiscal registration code 4331457. The journal is edited at Museikon, Str. Unirii, Nr. 3, Alba Iulia. Under data protection legislation, we act as controller when we process your personal data.

We are always open to hearing your views and to providing any additional information you may need regarding the processing of your data. Please contact our Data Protection Officer at informatica@mnuai.ro — marked: for the attention of the Data Protection Officer (DPO).

3. What categories of personal data we process

As a rule, we collect your personal data directly from you, so that you remain in control of the type of information you provide. For example, we receive information from you when:

• you subscribe to our newsletter — you provide your e-mail address, first and last name;
• you contact the editorial office or submit an article — you provide your name, affiliation, institutional address and e-mail address, as described in the instructions for authors;
• you create an account on our platform, where such a service is made available — you provide your e-mail address, first and last name.

We may also collect and subsequently process certain information about your behaviour while visiting our website, in order to improve your online experience. Our website may use Google analytics scripts which in turn serve cookies to analyse traffic; information about the way you use our website (which websites you arrived from, which pages you visited, the duration of your visit, etc.) is sent to Google so that we can analyse it with the purpose of improving our services. We may store and collect information in the form of cookies and similar technologies, in accordance with the Cookie Policy.

We do not collect and do not otherwise process sensitive data, included by the GDPR in special categories of personal data.

4. Purposes and grounds of processing

a. To provide services for your benefit — creating and administering an account on our online platform, handling requests and correspondence, and providing support, including answering your questions about our publications and services. Processing your data for these purposes is in most cases necessary for the conclusion and performance of a contract between us and you. Certain processing operations under these purposes are also required by applicable legislation, including fiscal and accounting legislation.

b. To improve our services — we may collect and use certain information regarding your behaviour, and we may invite you to complete satisfaction surveys or carry out, directly or with partners, studies and market research. We base these activities on our legitimate interest in carrying out our activity, always making sure that your fundamental rights and freedoms are not affected.

c. For marketing — we may send you messages (e-mail, SMS, push notifications, etc.) containing general and thematic information about our publications and events. In most cases we base our marketing communications on your prior consent. You may change your mind and withdraw your consent at any time, by using the unsubscribe link displayed in the messages you receive from us, or by contacting us using our contact details.

d. To defend our legitimate interests — there may be situations in which we use or transmit information to protect our rights and activity, such as measures to protect the website and its users against cyber-attacks, measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities, and measures to manage various other risks.

5. How long we keep your personal data

As a general rule, we store your personal data for as long as you hold an account on our platform. You may ask us at any time to delete certain information or to close your account permanently, with the mention that such data cannot subsequently be recovered.

6. To whom we transmit your personal data

Where applicable, we may transmit or grant access to certain of your personal data to the following categories of recipients: entities within the same group as ours; courier service providers and payment/banking service providers — where we sell products online. If we are under a legal obligation, or where necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities. We establish technical and procedural measures to protect and ensure the confidentiality, integrity and accessibility of the personal data processed, and we prevent unauthorised use or access in accordance with the legislation in force.

7. Countries to which we transfer your data

At present, we store and process your personal data on the territory of Romania. Transfers to service providers and other third parties are always protected by contractual commitments and, where appropriate, by other safeguards, such as the standard contractual clauses issued by the European Commission or certification schemes.

8. How we protect the security of your data

We are committed to ensuring the security of personal data by implementing appropriate technical and organisational measures, in line with data security standards on our servers. Your personal data is transmitted using state-of-the-art encryption algorithms and stored on secure servers, while also ensuring data redundancy.

Despite the measures taken to protect your personal data, we draw your attention to the fact that transmitting information over the Internet in general, or through other public networks, is not completely secure: there is a risk that data may be seen and used by unauthorised third parties. We cannot be held responsible for such vulnerabilities of systems that are not under our control.

9. Your rights

The GDPR grants you a number of rights in relation to your personal data. You may request access to your data, the correction of any errors in our files and/or object to the processing of your personal data. You may also exercise your right to complain to the competent supervisory authority or to bring the matter before the courts. Where applicable, you may also benefit from the right to request the erasure of your personal data, the right to restriction of processing and the right to data portability.

• Access — you may ask us to confirm whether we process your personal data, to provide you with a copy of that data, and to give you further information about it: what data we hold, what we use it for, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can make a complaint, and where we obtained your data from.
• Rectification — you may ask us to rectify or complete inaccurate or incomplete personal data. We may seek to verify the accuracy of the data before rectifying it.
• Erasure — you may ask us to permanently delete your personal data or your account, without any prior explanation. Please note that the data cannot subsequently be recovered.
• Data portability — you may ask us to provide your personal data in a structured, commonly used and machine-readable format, or to have it transmitted directly to another controller.
• Objection — you may object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms override that interest. You may also object at any time, without giving reasons, to the processing of your data for direct marketing purposes (including profiling), in which case we will cease such processing as soon as possible.

You may also lodge a complaint with the Romanian supervisory authority, ANSPDCP.

10. Cookies and analytics

This website uses essential cookies (strictly necessary for the site to function, e.g. remembering your cookie choice) and, only with your consent, anonymous analytics cookies provided by Google Analytics 4 (property G-E8KPW5F37H), which help us understand how the journal is read.

We use Google Consent Mode: until you press “Accept analytics”, no analytics cookie is written and no identifiers are sent. IP addresses are anonymised. You can change or withdraw your choice at any time using the Cookie settings link in the footer; withdrawing consent also deletes the analytics cookies from your browser.