This translation is provided for information only. In the event of any discrepancy, the Romanian-language version prevails — see the Romanian version.
Privacy Policy
Version of September 2026
Data controller
ACSB Events SRL, Sibiu, J32/914/2013, CUI 32366957, e-mail office@acsb.ro, phone +40 721 267 789, is the controller of the personal data collected through this website, within the meaning of Regulation (EU) 2016/679 (GDPR).
What data we collect and why
When you submit a booking request we collect: your name, e-mail address, phone number, billing details (address; for companies, NGOs and institutions: the name, CUI/VAT number, Trade Register number and registered office address — details we may retrieve from the public register of ANAF, the Romanian tax authority, based on the CUI entered), optionally the purpose of the booking, as well as the booking details (space, time slot, price). We do not ask for a personal ID number (CNP). We use this data for:
- reviewing the request, confirming the booking and the related communication (legal basis: performance of a contract or steps taken at your request prior to entering into a contract);
- issuing invoices and fulfilling tax and accounting obligations (legal basis: legal obligation);
- managing the calendar of the spaces, preventing abuse and defending our rights (legal basis: legitimate interest).
We do not use the data for marketing and we do not send newsletters without your express consent. We do not make automated decisions with legal effects on you.
Payments
Online payment is made on the payment page of our processor, Revolut (the Revolut group, through the entity serving merchants in Romania). Card details are entered and processed exclusively on the processor's pages, in accordance with its privacy policy; we receive only the payment confirmation and the order identifier.
Where the data is stored
The website is hosted on Vercel, and the database on Supabase infrastructure in the European Union (Frankfurt). Confirmation e-mails are sent from the address office@acsb.ro, and payments are processed by Revolut. These providers act as processors, under data processing agreements. We do not sell or pass on the data to third parties for other purposes.
How long we keep the data
Booking data is kept for the duration of the contractual relationship and then for as long as required by the legal obligations to archive financial and accounting documents. Requests that are declined or cancelled without payment are kept for a maximum of 2 years, for calendar records and any complaints.
Cookies
The website uses a single technical, strictly necessary cookie, for the booking administration session (visible only to administrators). We do not use tracking, advertising or analytics cookies, so we do not need a consent banner.
Your rights
You have the right to access your data, to rectification, to erasure (within the limits of the legal archiving obligations), to restriction of processing, to object and to data portability, as well as the right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (the Romanian data protection authority, ANSPDCP — dataprotection.ro). For any request, write to us at office@acsb.ro; we reply within 30 days.
See also the Booking Terms and Conditions.