Privacy Policy
TechHub Bucharest

 

Last updated: 13.2.2019

 

Your privacy is one of our fundamental commitments, and therefore, we take utmost care to process your personal data in accordance with the principles set forth in the applicable legislation, including without limitation the General Data Protection Regulation no. 679/2016 (“GDPR”). We recognize the importance of maintaining the confidentiality, integrity and security of your personal information ("Personal Data") and have written this privacy policy (“Policy”) to explain how your Personal Data is collected, stored, used and disclosed by TechHub Bucharest S.R.L., a company incorporated under the Romanian law, having its headquarters in Bucharest, Str. Nicolae Filipescu, nr. 39-41, Et. 1, Sector 2, Tax Code RO 31245426, registered with the Trade Registry under no. J40/2017/2013 ("TechHub Bucharest", "us"), as a data controller, with respect to (i) your access and use of our website available at the URL bucharest.techhub.com („Site”), and to (ii) the provision of our services, irrespective whether they are provided online or offline.

Each time we are required by the applicable law or, otherwise, want to use this legal basis, we will request your free, informed, specific and unequivocal consent for the processing of your Personal Data. By expressing your consent, you agree that we can collect, use, reveal, process and transfer your Personal Data in accordance with this Policy.

We reserve the right to amend the provisions of this Policy from time to time. If we make changes to this Policy, we will make the updated version available on the Site and we will update the "Last updated” date. We will also inform you on the changes that have occurred, to ensure that you are aware of how we use your Personal Data. Any amendments to this Policy will apply on the date that they are made, with the exception of changes which require your prior consent, and which will apply as of the moment when you express such consent.

1. APPLICABILITY

This Policy shall apply to the processing operations performed only by TechHub Bucharest, as a data controller.

For the avoidance of doubt, the Policy shall not apply in relation to any other processing operation performed by any other natural or legal person, including any other TechHub entity or affiliate or other third party organizing an event in the TechHub Bucharest premises.

2. CATEGORIES OF PERSONAL DATA, PURPOSES OF PROCESSING, AND LEGAL GROUNDS

A) ATTENDING THE TECHHUB BUCHAREST EVENTS (AS SPEAKERS OR PARTICIPANTS)

TechHub Bucharest hosts many events throughout the year that can be attended by any person who register as a participant. These events include meetups, office hours, workshops, hackathons, conferences.

2.1 Registration as participants to the TechHub Bucharest events

On our Site you can register as a participant to an event organized by TechHub Bucharest. When you do so, we process the following Personal Data: first name, last name, e-mail address, team, role and any other personal data indicated in the LinkedIn profile and CV. We might also use your Personal Data in order to communicate event changes, such as time schedule.

When you register to a such event, we might also require you to provide information about the company you represent. In this case, the information we collect does not necessarily represents Personal Data. However, in case the information might identified a natural personal and, as a result, might be qualified as Personal Data, this Policy becomes applicable.

Purpose of processing

Legal ground

The purpose of this processing operations is to perform the event registration and to understand the participants profiles to better tailor our products and services to meet their needs.

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 para. 1, let. b GDPR);
  • Our legitimate interest in performing the events logistic and in defining the type of participants to our events in order to develop and grow our business (art. 6 para. 1, let. f GDPR);
  1.  

 

2.2 Registration as a presenter (speaker) at TechHub Bucharest events

If you are a presenter at one of our events, we will collect your first name, last name, e-mail address, function, company and any other personal data indicated in the LinkedIn profile.

Purpose of processing

Legal ground

The purpose of this processing is so we can facilitate the event and provide you with an acceptable service.

  • Your consent (art. 6 para. 1, let. a GDPR);
  1.  

 

2.3 Taking photos during the TechHub Bucharest events

During our events, we will take pictures of the audience and speakers. Further, some of the pictures could be published on the social media platforms in order to promote our events. In this context, we will use the following Personal Data: image.

Further, if you agree, we will also tag you on the social media platform, in which case we will use your first name and last name.

Purpose of processing

Legal ground

Taking pictures of the TechHub event audience for promoting our events.

  • Your consent (art. 6 para. a, let. f GDPR);

Publishing the pictures on the social media platforms for promoting our events.

  • Your consent (art. 6 para. a, let. f GDPR);

Tagging you in the pictures published on the social media platforms for promoting our events.

  • Your consent (art. 6 para. a, let. f GDPR);

If you for any reason do not wish to be included in any photo, please inform us at privacy.bucharest@techhub.com.

 

2.4 Recording the TechHub Bucharest events

During our events, we will record the presentations held by our speakers. Sometimes, we might publish the presentation on social media platforms. In this context, we will use the following Personal Data: image, voice, first name, last name, function, company and any other personal data indicated in the LinkedIn profile.

Further, if you agree, we will also tag you on the social media platforms, in which case we will use your first name and last name.

Purpose of processing

Legal ground

Recording the presentations held during our events for promoting our events.

  • Your consent (art. 6 para. a, let. f GDPR);

Publishing the presentations on the social media platforms for promoting our events.

  • Your consent (art. 6 para. a, let. f GDPR);

Tagging you on the social media platforms for promoting our events.

  • Your consent (art. 6 para. a, let. f GDPR);

If you for any reason do not wish to be included in any footage, please inform us at privacy.bucharest@techhub.com.

 

2.5 Live streaming the TechHub Bucharest events

During our events, we might stream on Facebook the presentations held by our speakers. In this context, we will use the following Personal Data: image, voice, first name, last name, function, company and any other personal data indicated in the LinkedIn profile.

Further, if you agree, we will also tag you on the social media platform, in which case we will use your first name and last name.

Purpose of processing

Legal ground

Live streaming on Facebook the presentations held during our events for promoting our events.

  • Your consent (art. 6 para. a, let. f GDPR);

Tagging you on Facebook for promoting our events.

  • Your consent (art. 6 para. a, let. f GDPR);

If you for any reason do not wish to be included in any footage, please inform us at privacy.bucharest@techhub.com.

 

B) TECHHUB BUCHAREST MEMBERS AND RESIDENTS

 

2.6 Conclusion of a membership contract (coworking and residents)

You have the possibility to apply for a TechHub Bucharest membership. In this case, we will conclude a membership contract with you, and, for this purpose, we will use the following Personal Data: first name, last name, e-mail address, phone number, address, personal identification number, series and number of your identification card and bank details (IBAN).

Purpose of processing

Legal ground

The purpose of this processing is to conclude the membership contract.

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 para. 1, let. b GDPR);
  1.  

 

2.7 Residents added to a membership contract

Every TechHub Bucharest member which concluded a resident membership contract has the possibility to add persons which will be residents. In this case, we will process the following Personal Data of the residents: first name, last name, e-mail address.

Purpose of processing

Legal ground

The purpose of this processing is to add residents to the membership contract.

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 para. 1, let. b GDPR);
  • Our legitimate interest in providing our services to our members and residents (art. 6 para. 1, let. f GDPR);

The source of this Personal Data is the contact person designated in the membership contract.

 

2.8 Notices

During the provision of our services, we will use your first name, last name, your job position, your email address and your phone number to notify you of any issues related to the performance of the contract between you and TechHub Bucharest. We will also notify you in connection with certain activities or information that might be of interest for our members.

Purpose of processing

Legal ground

The purpose of this processing is to carry out contractual notices in accordance with the membership contract, including (i) notifying you about changes to our services, or contractual terms, (ii) sharing community and facilities updates and (ii) sharing, suggesting or recommending opportunities or services offered under your membership that may be of value to you.

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 para. 1, let. b GDPR);
  • Your consent  in relation to the newsletter (art. 6 para. a, let. f GDPR);
  1.  

 

2.9 Booking a meeting room

Every TechHub Bucharest member and resident (i.e. an individual who is part of a TechHub Bucharest member’s team) is granted access to a meeting room booking system. In order to create the member’s account, we need the following Personal Data: first name, last name, e-mail address.

Purpose of processing

Legal ground

The purpose of this processing is to grant each member and resident access to a meeting room booking system.

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 para. 1, let. b GDPR);
  • Our legitimate interest in providing our services to our members (art. 6 para. 1, let. f GDPR);
  1.  

 

2.10 Access code

Every TechHub Bucharest member and resident (i.e. an individual who is part of a TechHub Bucharest member’s team) is granted a personal access code for entering the TechHub Bucharest premises. In order to grant the access code, we have to create an account on the access platform, and, in this context, we need the following Personal Data: first name, last name, e-mail address.

Purpose of processing

Legal ground

The purpose of this processing is to grant each member and resident access to a personal access code for entering the TechHub Bucharest premises in order to ensure the security and safety of our premises.

  • Our legitimate interest in securing the TechHub Bucharest premises (art. 6 para. 1, let. f GDPR);

 

C) TECHHUB BUCHAREST CONTRACTOR (SUPPLIERS) OR PROSPECTIVE CUSTOMERS

 

2.11 Prospecting customers by TechHub Bucharest

In the context of prospecting our customers, we may use the following personal data: name, surname, telephone number, email address, company, function, position, LinkedIn account.

Purpose of processing

Legal ground

In this situation, we will use your personal data only to contact you in connection with providing our services.

  • Our legitimate interest in promoting our services and contracting new customers (article. 6 para. 1, let. f of GDPR);
  • Your Consent (article. 6 para. 1, let. a of GDPR);
  1.  

2.12 Concluding and/or executing a contract with TechHub Bucharest

TechHub Bucharest processes the following personal data: Name and surname, address, personal phone number, e-mail, date and place of birth, nationality, other data included in the identity card; Contact details from the workplace, office location and address, service telephone number, service e-mail, function, power of attorney.

Purpose of processing

Legal ground

The processing of personal data is necessary for the drafting, execution and termination of the contract established with you or the company you represent.

  • The legal basis for this processing is to execute a contract or to act at your request before the conclusion of a contract. (article. 6 para. 1, let. b of GDPR);

 

 

D) OTHER PROCESSING OPERATIONS

 

2.13 Contact

You can contact us in different ways: by email, by phone, through feedback or support form. In this case, we will process the following Personal Data: first name, last name, email, phone number and any other information you voluntarily provide when you contact us.

Purpose of processing

Legal ground

In this situation, we will use your Personal Data only to contact you in connection with the requested offer or in connection with the resolution of the problem.

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 para. 1, let. b GDPR);
  • Our legitimate interest in ensuring communication with our customers and providing the necessary support for the use of the Site (art. 6 para. 1, let. f GDPR);
  1.  

 

2.14 Feedback

In certain situations, we will ask for your feedback. In this case, we will process the following Personal Data: first name, last name, company name, and any other information included in the feedback form.

Purpose of processing

Legal ground

In this situation, we will use your Personal Data to contact you for further details regarding the offered feedback [•]

  • Your consent (art. 6 para. 1, let. a GDPR).
  1.  

 

2.15 Marketing messages

You can opt in to receive marketing messages (e.g., newsletter) via e-mail. In this case, we will process your first name, last name, e-mail address.

Purpose of processing

Legal ground

If you opt to receive such marketing messages, we will use your email address to send you marketing messages (newsletter) about our activities.

  • Your consent (art. 6 para. 1, let. a GDPR).

You can revoke your prior consent at all times and without any costs, with altering consequences for the future.

 

2.16  Invoicing 

During the membership contract, we will issue monthly invoices for the payment of the membership subscription. In this case, we will process your first name, last name, address, series and number of your identification card and bank details (IBAN).

 

Purpose of processing

Legal ground

The purpose of this processing is to issue the invoices related to your subscription.

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 para. 1, let. b GDPR);
  • Processing is necessary for compliance with a legal obligation to which the controller is subject (art. 6 para. 1, let. c GDPR);

 

3. PROCESSING PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST

When we process on the lawful basis of legitimate interest, we apply the following test to determine whether it is appropriate:

The purpose test – is there a legitimate interest behind the processing?

Necessity test – is the processing necessary for that purpose?

Balancing test – is the legitimate interest overridden, or not, by the individual’s interests, rights or freedoms?

For more information on how we process the Personal Data on the lawful basis of legitimate interest, please contact us at privacy.bucharest@techhub.com.

4. FAILURE TO PROVIDE PERSONAL DATA

You may refuse to provide certain Personal Data (indicated above) but, in such a case, you may not be able to benefit from certain services and features, including, but not limited to, the conclusion of a membership contract or contacting you to solve your problem and to provide support.

5. AUTOMATIC PROCESSING OF PERSONAL DATA

Your Personal Data will not be processed for taking decisions based solely on automatic processing that would result in legal effects concerning you or could similarly significantly affect you.

6. RETENTION PERIOD

The retention period of your Personal Data depends on the purpose of processing the respective Personal Data. As a rule, we will retain your Personal Data as following:

Processing/Activity

Retention period

Registration to TechHub Bucharest events

3 years

Being a speaker at a TechHub Bucharest event

3 years

Taking photos during the TechHub Bucharest events

3 years

Recording the TechHub Bucharest events

3 years

Live streaming the TechHub

Bucharest events

3 years

Membership processing operations

For the duration of the membership contract and for a period of 3 years afterwards.

The invoices will be stored for 10 years.

The Personal Data of the residents will be stored as long as they are added to the membership contract and for a period of 3 years afterwards.

Prospecting customers

1 year

Contractors

For the duration of the contract and for a period of 3 years afterwards.

Contacting us

1 year

Feedback

1 year

Marketing messages

As long as you do not revoke your consent.

We may also keep your Personal Data for longer periods of time so that we have accurate records of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings.

7. TRANSFER OF PERSONAL DATA

Your Personal Data is filed and stored on the servers of our contractual partners that are helping us to provide our services to you.

We may transfer Personal Data, as far as necessary, to the following categories of recipients:

  • contractual partners;
  • subcontractors;
  • companies offering courier services;
  • companies offering IT services;
  • marketing companies;
  • public authorities, courts of law or arbitral tribunals, and authorities competent to investigate criminal offence.

These recipients can be located in the European Union and/or in the European Economic Area. Where recipients are located outside the European Union and the European Economic Area, including in countries not recognized as ensuring an adequate level of protection, the transfer of Personal Data shall be carried out only if there are appropriate guarantees, in accordance with applicable law. In this respect, we rely on several guarantees, such as the Privacy Shield certificate or the standard contractual clauses issued by the European Commission. You may receive from us a list of recipients from third countries, as well as a copy of the agreed provisions that ensure an adequate level of protection of Personal Data. For any request to this effect, please contact us at the contact details mentioned below.

8. SECURITY

The security of your Personal Data is important to us. Your Personal Data will therefore be processed by applying reasonable technical and organizational measures to protect Personal Data, such as limiting access to Personal Data, encryption or anonymization of Personal Data, storage on secure environments. However, despite our efforts, we cannot always guarantee the effectiveness of the security measures implemented, and therefore we cannot guarantee the security of Personal Data at any time.

9.RIGHTS IN CONNECTION WITH THE PROCESSING OF YOUR PERSONAL DATA

9.1 Your rights

You have the following rights in connection with the processing of your Personal Data:

Access right: You have the right to obtain from us confirmation that your Personal Data is processed by us, as well as information on the specific processing, such as: the purposes of processing, categories of processed Personal Data, recipients of Personal Data, the period for which Personal Data is stored, if we transfer the Personal Data abroad and how we protect it, your rights, the right to lodge a complaint before the supervisory authority, the source of your Personal Data.

Right to rectification: You have the possibility to request rectification of your Personal Data, provided that the applicable legal requirements are met. In the event of errors, after notification, we will immediately correct your Personal Data.

Right to erasure: In certain cases, you have the possibility to request the deletion of Personal Data, namely when: (i) the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) you withdraw consent on which the processing is based according and where there is no other legal ground for the processing; (iii) you exercise the right to object to the processing; (iv) the Personal Data have been unlawfully processed. We are not obliged to comply with your request when the processing is necessary (among others) for compliance with a legal obligation or for the establishment, exercise or defense of legal claims. There are also other circumstances in which we are not obliged to comply with this request for the deletion of Personal Data.

Restriction of processing: You may request us to restrict the processing of your Personal Data in the following circumstances: (i) you contest the accuracy of the Personal Data, for a period enabling us to verify the accuracy of the Personal Data; (ii) the processing is unlawful and the you oppose to the erasure of the Personal Data and request the restriction of their use instead; (iii) we no longer need the Personal Data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims; (iv) you have objected to processing, pending the verification whether our legitimate grounds override yours. However, we can continue to process your Personal Data (i) when you consent; (ii) for the establishment, exercise or defense of legal claims or (iii) for the protection of the rights of another natural or legal person.

Right to data portability: Insofar the Personal Data is processed based on your consent or on the execution of the agreement and the processing is carried out by automated means, you have the right to have your data Personal Data provided to you in a structured format, which is currently used and can be read automatically and you have the right to request us to transfer this Personal Data to another controller. This right shall not adversely affect the rights and freedoms of others.

Right to opposition: In certain situations, such as when we process your Personal Data on the basis of a legitimate interest, you have the right to object to the processing of your Personal Data by us. In the event of unjustified objection, TechHub Bucharest is entitled to continue processing Personal Data.

Objection to direct marketing: You can also object to the processing of your Personal Data for the purpose of sending marketing messages.

Revocation of consent: Insofar you consented to the processing of your Personal Data, you can at all times revoke your consent, without affecting the lawfulness of processing based on consent before its withdrawal.

Right not to be subject to any automatic individual decisions: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Such right cannot be exercised when the decision: (i) is necessary for entering into, or performance of, a contract between you and us; (ii) is authorized by law which lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or (iii) is based on your explicit consent.

Right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with The National Supervisory Authority for Personal Data Processing (“DPA”) in relation to any breach of your rights regarding the processing of your Personal Data. The contact details of the DPA are: 28-30 Gheorghe Magheru Boulevard, District 1, Postal Code 010336, Bucharest, Romania; e-mail: anspdcp@dataprotection.ro

 

9.2 How to exercise your rights

To learn more about the manner in which you may exercise the aforementioned rights, please contact us at privacy.bucharest@techhub.com.

Identity verification: We take utmost care of the confidentiality of all Personal Data and we reserve the right to verify your identity if you make a request in relation to your Personal Data.

Fees: As a rule, you can exercise your rights free of charge. However, we reserve the right to request a reasonable fee if your claims are manifestly unfounded or excessive, in particular because of their repetitive nature.

Response Time: We make every effort to respond to your request within one month of receiving the request. This period may be extended by two further months where necessary, taking into account the complexity and number of the requests, in which case we will inform you of any such extension and of the reasons for the delay.

10. CONTACT

If you have any questions or concerns about this Policy or its implementation, you may contact us at privacy.bucharest@techhub.com.

Copyright © TechHub Europe Ltd,