Privacy policy

This personal data processing policy describes the personal data processing practices for the website www.riseproject , the Rise Project mobile application, as well as the associated social media pages (e.g. Facebook, Instagram, Telegram, Twitter, Tik Tok ), as well as other activities of the RISE Project referred to as the “RISE Project”.

These personal data are managed by the Rise Project Association based in Bucharest, Sector 3, Calea Victoriei 21-23, et 5, established by the decision of the District Court 3 File 438/300/2012 and registered as a legal person without patrimonial purpose by certificate no. . 08/08.03.2012, Fiscal Code 30063132, e-mail contact@riseproject, as operator, referred to throughout this policy as RISE Project.

This document is intended to inform you about what type of personal data we process as an operator – how we collect it from you, how and where we might use this data, how we understand to protect this data, who has access to them and how the collected information can be corrected in a timely manner.

1. Personal data and journalistic materials of the RISE Project

In the materials created by RISE Project and published on riseproject or on social media accounts, personal data can also be processed that are used for its journalistic purpose for the purpose of artistic expression in the context of the derogation established by art. 7 of law 190/2018 and art. 85 EU Regulation 679/2016 (GDPR) and which are personal data that have been openly made public by the data subject or that are closely related to the data subject’s public status or the public nature of the facts in which it is involved.

We always pursue the public interest in what we investigate and publish, following high quality journalistic standards. If, however, you believe that by mistake your personal data has been included in an investigation and it needs to be corrected, contact us according to Art. 4 of this policy.  

As such, the processing of personal data for journalistic purposes is not the subject of the information below. 

2. Purposes of processing

RISE Project processes personal data only for specified purposes as specified below.

The main purpose of collecting personal data is to inform Internet users about RISE Project materials, association activities and interaction with interested users through contact addresses, newsletters and/or social networks or with those users who decide to support our activity.

In certain specific projects RISE Project will be able to collect personal data directly from users, especially in the case of online or offline registration for participation in a specific project, event or training. This data is used to facilitate your participation in the selected event, but also to be informed after the event or to be invited to similar events or projects.

Pictures and videos taken during public events are used to promote the event on the Internet and in the media.

RISE Project can also organize various public meetings, where public persons are invited – both as speakers and as participants. Their personal data, necessary for inviting them, are generally collected from public sources (business cards, social media, Internet), and the information about the processing of the data is given at the first communication with them.

The legal grounds for processing this data are:

• consent (art. 6 (1) of the GDPR) for the data used to subscribe to the newsletter, messages sent through the contact form, interactions (subscriptions, comments, shares, questions, etc.) for visitors to our pages in social networks where we are active;
• contract (art. 6 (1) b GDPR) for the data collected as a result of the execution of a contract to which the data subject is a party (including for the installation of the application) or to take steps at the request of the data subject before the conclusion of a contract – usually those related to participation in a project, event or training; 
• legal obligation (art. 6 (1) c GDPR) – for data collected in the case of donations or as a result of legal obligations for invoicing, reimbursement or other obligations related to the transparency and documentation of expenses from European or national public funds. 
• the legitimate interest (art. 6 (1) f GDPR) for the data used for the security of the site itself, the information related to the updates of the application and the data used for the statistics of the own site, as well as contacting public persons for invitation to the organized events, as and for pictures and videos taken during the events. 

2. What personal data we collect and for what purpose

RISE Project collects information from its users in four ways: directly from the user, indirectly from public sources, technical traffic data on our site and through cookies.

2.1. Personal data collected directly

Given our primary informational purpose, RISE Project collects extremely little personal data directly from the site. RISE Project collects personal data directly on the riseproject website only if you decide to subscribe to our newsletter, comment on an article or contact us directly via our contact email address. RISE Project may collect an email address at the time of application installation, used solely for purposes related to the functionality of the application.

Personal data can also be collected on the social networks of RISE Project.ro, if you subscribe to our pages, if you leave us a comment or write us a message. All of this is collected with your consent through the actions you take. With regard to social media accounts, this data is collected together with the respective social networks, with which we are associated operators. The functionality of accounts on these networks is limited by the respective platforms, so we recommend that you read the privacy policies of these sites for more details. This data is used exclusively for the purposes indicated by you – from publishing the comment, to replying to you to the message sent.

This data is kept until the consent obtained for the newsletter is revoked through the social network or until you ask us to delete this information.

If you decide to help us with a donation, we may also process the donated amount, bank account (in the case of bank donations), postal address (optional) or other personal data in the cases necessary to fulfill legal obligations in these cases. In this case, we will have to keep the data related to the donations for the entire period provided by the applicable legislation, especially the financial accounting one. All payments are processed by Patreon or Paypal, so banking information is sent directly to them and is not processed by RISE Project. Their personal data processing policies are available on their websites.

RISE Project can receive requests and information from various natural persons with aspects related to the journalistic activity of the association, usually by e-mail or telephone from any person. This data is generally first and last name and e-mail addresses as well as any other information that the respective individuals think is useful for the respective cases and is sent with their consent.

This data is not sent through anonymous channels and may be used in our articles, according to current journalistic practice, with the consent of the individual. This data is not shared with other third parties, unless the person contacting us expressly indicates this. 

We also collect personal data when registering online or offline to participate in an event, training or project, according to the registration form for each individual event. We may also use this data to inform you on the same subject and after that event has ended, unless you do not wish us to do so. In certain cases of events, projects or trainings, your data is also necessary for the legal obligations of invoicing, reimbursement or other obligations related to the transparency and documentation of expenses from European or national public funds. These data are kept according to the legal obligations in force or in the case of contracts – for the duration imposed by the financier or in the absence of these durations – for the duration of the contract plus three years after its completion.

A good part of the RISE Project events are public events, and the pictures and videos taken during these public events are used to promote the event on the Internet and in the mass media. If you appear in a picture and would like us not to use it, please contact the photographer who took the picture or the RISE Project team at the venue entrance immediately and the picture will not be used publicly.

2.2. Personal data collected indirectly from public sources

RISE Project organizes various public meetings, where public persons are invited – both as speakers and as participants. Their personal data, necessary to invite them, are generally collected from public sources (e.g. business cards, social media, Internet), and information about the processing of data is made at the first communication with them. For this purpose we usually collect at most first name, first name, email address, and in some cases the phone number or social media contact. If you do not confirm attendance at the event, the data is not kept by us.

2.3. Technical website traffic data

When you visit a website, regardless of the device used, we automatically disclose certain information about you through your browser, such as your IP address, the time of your visit, where you entered our websites, the pages you visited. RISE Project.ro can process this information for a certain period of time. RISE Project.ro uses external traffic analysis services from Google Analytics.

This data is used exclusively by RISE Project.ro to improve our website and services, but also to ensure the security of our website.

Under no circumstances does RISE Project use traffic data to identify individuals behind IP addresses. We use this data exclusively as statistical data.

This data is kept for a period of 12 months.

2.4. Cookies

RISE Project may use cookies to facilitate the storage and operation of the site, but also to optimize our sites.

Regarding the RISE Project.ro external services that place cookies (third party) when browsing the RISE Project.ro sites, their purpose is to analyze traffic or links to our social media accounts, according to the details above down:

Also, some articles have integrated content usually hosted on other servers (embedded); by integrating them into the respective article, it is possible to place cookies specific to the respective platforms, either by integrating the content or upon its activation (e.g. Scribd, Issue or DocumentCloud for content; Youtube for video; Time.Graphics, Flourish for graphics).

Most browsers are set to accept cookies automatically. However, if you do not prefer this, you can either reset your browser, or notify you whenever you receive a cookie, or even refuse to accept cookies.

Users who do not wish to use any cookies can use their preferred browser settings to delete or block them or use plugins that do the same (such as uBlock, Ghostery or Privacy Badger).

3. Your rights 

According to the GDPR, you have the right to access the data, to rectify the data, to delete it or to restrict the processing, as well as the right to object to the processing.

We do not collect personal data through automated systems, so the right to data portability cannot be exercised. We also do not make automated decision-making processes, including through profiling.

For data collected through consent, you have the right to withdraw consent at any time.

In the case of pictures or videos taken at RISE Project events, if you appear in a picture and would like us not to use it, please contact the photographer who took the picture or the RISE Project team immediately upon entering the venue and the picture will not be used publicly or will be deleted, as appropriate.

To exercise these rights, you can send a request by email to contact@riseproject regarding the personal data collected by us. For personal data collected by social networks, we recommend that you contact these operators directly, through account settings we only have access to an extremely limited set of personal data.

You also have the right to file a complaint with a supervisory authority or file an action in court.

4. Recipients

During the processing of personal data, RISE Project may also use other companies (certain authorized persons) to achieve the aforementioned purposes, such as website hosting (Quirium), IT service providers (Quickdata and Droids You Are Looking For), newsletter management (Mailchimp).

These authorized persons are obliged to use this data safely and exclusively for the purposes specified by the RISE Project. They only have access to the personal data strictly necessary to provide the service established by RISE Project and cannot use the personal data for their own purposes.

All authorized persons are in Romania and in the European Union or in any other legal space that offers an adequate level of personal data protection according to European Union standards (art. 45 GDPR) or other adequate guarantees, including standard data protection clauses (art. 46 (2) GDPR).

In the case of donations, personal data through Patreon and Paypal are processed directly by these companies as operators, and banking information is transmitted directly to them and RISE Project does not have access to them.

As we have already stated, with regard to social network accounts, this data is collected together with the respective social networks, with which we are associated operators, but which probably also collect more personal data. The functionality of accounts on these networks for us is limited by the respective platforms, so we recommend that you read the privacy policies of these sites for more details.

In certain cases of events, projects or trainings, your data is also necessary for the legal obligations of invoicing, reimbursement or other obligations related to the transparency and documentation of expenses from European or national public funds. This data may be shared with the respective funder, which is distinctly mentioned when the data is collected.

5. Final provisions 

This policy regarding the processing of personal data was adopted on 01.03.2022, following that in the future, whenever we modify it, we will publish the new version on the front page of the RISE Project.ro website and send an information in this meaning, if applicable.