Politica de Confidențialitate
Last updated: Saturday, December 13, 2025
Transylvania Trail respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how personal information is collected, used, and stored when you visit or interact with this website.
The data controller is Rotas Digital SRL, established in Romania, with registered address at Str. Rotasului 14, Sector 1, Bucuresti and contact email info@transylvaniatrail.com.
1. Information Collected
Personal data may be collected when you:
- pre‑register for the event
- subscribe to the newsletter
- contact us through the website
- interact with forms or cookies
The information may include:
- name
- email address
- nationality
- technical data such as IP address, browser type, device information, and usage data (for example, pages visited and time spent on pages), collected mainly through logs and cookies for security and performance purposes.
Providing personal data is voluntary, but some information is necessary to receive updates or respond to your requests.
2. How Information Is Used
Personal data is used to:
- manage pre‑registrations
- send confirmation, verification, and welcome emails
- provide updates related to Transylvania Trail
- improve website performance and user experience
- comply with legal obligations (for example, accounting or record‑keeping once payments are enabled)
Processing is based on:
- your consent (for pre‑registration communications and newsletter/marketing emails)
- our legitimate interests in operating, securing, and improving the website (for technical data, logs, and basic analytics)
- the necessity to perform a contract and to comply with legal obligations (for payment‑related data, once payments are enabled)
Marketing emails are sent only with your explicit consent, and you can withdraw that consent at any time.
3. Email Marketing
Email communication is managed using Klaviyo as an email marketing service provider. By submitting a form, you agree that your data (such as your name, email address, IP address, and cookie‑related identifiers) will be transferred to and processed by Klaviyo in accordance with their data processing agreement and privacy practices.
Klaviyo acts as a data processor on our behalf and stores customer data on servers located in the United States (AWS us‑east‑1 data center in Northern Virginia). Klaviyo may use certain sub‑processors to provide its services; these sub‑processors are bound by data processing agreements and may only use customer data according to Klaviyo’s documented instructions, not for their own or other customers’ benefit.
Klaviyo participates in the EU‑U.S. Data Privacy Framework and related UK and Swiss extensions and otherwise relies on Standard Contractual Clauses or equivalent safeguards for transfers of personal data from the EU/EEA to the United States. Klaviyo does not sell or share our customer lists for third‑party advertising and uses customer personal data only to provide services to us, although it may use aggregated or de‑identified data to improve its services.
You can unsubscribe from marketing emails at any time using the link included in any email, which will not affect the lawfulness of processing before you withdrew consent.
4. Payments and Digital Products (Future Functionality)
When payments are enabled in the future, transactions will be processed securely through Stripe. Transylvania Trail will not store payment details such as complete credit card numbers.
Only the information required to complete the transaction and meet legal obligations (for example, billing details and transaction records) will be processed. This functionality is not yet active; this section will apply once online payments are introduced and the Terms and this Policy are updated accordingly.
5. Cookies and Analytics
This website uses cookies and similar technologies to ensure proper functionality and to analyze performance. Cookies may include:
- essential cookies required for website operation (for example, security and basic functionality)
- functional and performance cookies, as well as analytics and marketing tools such as Google Analytics, Meta Pixel, or Microsoft Clarity, where implemented.
A cookie consent banner is shown when the website loads, allowing you to manage your preferences for non‑essential cookies. Non‑essential cookies (such as analytics and marketing cookies) are used only with your prior consent, which you can give or withdraw via the cookie banner or by adjusting your browser settings.
More detailed information about specific cookies and their duration may be provided within the cookie banner.
6. Data Storage and Security
Reasonable technical and organizational measures are applied to protect personal data from unauthorized access, loss, or misuse. Access to personal data is limited to those who need it for legitimate purposes related to operating the website and services.
Data is stored only for as long as necessary to fulfill its purpose or as required by law. In particular:
- pre‑registration and newsletter data is generally kept until you unsubscribe or for up to 3 years after your last interaction with our emails, unless a longer period is required by law
- technical logs and analytics data are kept for up to 14 months, after which it is deleted or aggregated/anonymised
7. Data Sharing
Personal data is not sold or rented. Data may be shared only with trusted service providers involved in operating the website and services, such as:
- Klaviyo (email marketing), which processes customer data only to provide its services to us and not for its own or other customers’ benefit, and which stores such data on servers in the United States under appropriate transfer safeguards
- hosting providers
- analytics tools
- payment processors (once payments are enabled)
These partners act as processors or independent controllers, as applicable, and are required to comply with data protection regulations and to process data only on the basis of appropriate agreements and legal safeguards, including for any transfers outside the EU.
8. International Data Transfers
Some of the above‑mentioned service providers may be located outside the European Economic Area or may store data on servers in third countries, in particular in the United States (for example, Klaviyo). Where such transfers occur, appropriate safeguards are used, such as the EU‑U.S. Data Privacy Framework, the UK and Swiss extensions, and/or Standard Contractual Clauses or other mechanisms recognised by data protection law, together with additional measures where required.
9. Your Rights
Under the GDPR and applicable data protection law, you have the right to:
- access your personal data
- request correction of inaccurate data
- request deletion of your data (right to erasure)
- restrict or object to certain types of processing
- withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
- request data portability, where applicable
You also have the right to lodge a complaint with a data protection authority. Depending on where the controller is established, this may be, for example, the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or the competent authority in your EU member state of residence.
Requests regarding your rights can be sent to the contact email below.
10. Changes to This Policy
This Privacy Policy may be updated from time to time, for example to reflect changes in legal requirements, website features, or services used. Any changes will be posted on this page, and the “last updated” date may be adjusted accordingly.
11. Contact
For privacy‑related questions, requests about your personal data, or to exercise your rights, please contact: info@transylvaniatrail.com.
povestea incepe in 2026
Prima ediție a oricărei aventuri e specială. Este ca o poveste care așteaptă să fie scrisă. Aceasta e șansa ta să formezi spiritul traseului pentru toți cei care vor veni după tine.