Privacy Policy

1. Controller

CYBER SPACE INITIATIVE S.R.L., with registered office at România, Jud. Prahova, Municipiul Ploiești, Strada Mihai Bravu, Nr. 235F, Ap. 96, CUI 50449430, Trade Register no. J2024016830000, EUID ROONRC.J2024016830000, is responsible for the ROCSI website and the processing described here.

2. Data we may process

• Project inquiries: name, email address, optional company/organisation, project description, selected project context and attribution parameters supplied with the inquiry.
• Digital Resilience workshop registration: participant name, email address, selected session, booking/hold state, legal acceptance, optional update preference and payment/confirmation status. Payment-card details are collected on Stripe-hosted Checkout rather than by ROCSI.
• Scheduling: details you choose to provide when using the Cal.com scheduling experience.
• Data-rights requests: name, email address, request category and the details needed to understand the request.
• Security and operations: limited request/network information used by hosting, Cloudflare security controls, Turnstile and server logs. Build anti-abuse logic stores hashed identifiers rather than the raw IP address for rate limiting.
• Browser preferences: the selected light/dark theme is stored locally in your browser. Workshop checkout recovery can temporarily use tab-scoped session storage.

3. Why we use data

• to operate, secure and troubleshoot the website and prevent abuse;
• to assess and respond to project inquiries and take requested pre-contractual steps;
• to administer workshop reservations, payments, access and transactional communications;
• to provide requested scheduling and collaboration interactions;
• to handle data-protection requests and comply with applicable legal obligations;
• to send optional ROCSI updates only where a separate valid choice has been made.

4. Service providers

ROCSI uses specialised providers to run these services, including infrastructure/hosting, Cloudflare, Supabase, Stripe, Resend and Cal.com where relevant. Those providers may process data needed to deliver their service under their own contractual and legal arrangements.

Some providers may process data outside Romania or the European Economic Area. Where applicable, transfer safeguards required by data-protection law should be used by ROCSI and the relevant provider.

5. Retention

ROCSI aims to keep personal data only for as long as it is needed for the purpose for which it was collected, for security and dispute handling, or for applicable accounting, tax and other legal obligations. Different records can therefore have different retention periods.

Temporary browser storage used for workshop checkout recovery is scoped to the browser tab/session rather than being a long-term ROCSI record.

6. Your rights

Depending on the circumstances and applicable law, you may have rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent where processing is based on consent. You may also lodge a complaint with the competent data-protection authority.

Use the dedicated Data rights form linked below so the request reaches ROCSI through a server-side channel without publishing a general contact email address.

7. Security and minimisation

ROCSI limits browser-visible configuration, keeps elevated credentials server-side, uses anti-abuse controls on public forms and avoids collecting information that is not needed for the relevant workflow. No internet service can guarantee absolute security.

8. Changes to this policy

This policy will be updated when the website, its services or its data flows materially change. The date above identifies the version currently published.