Privacy policy

We explain what personal data we collect through the site's forms, for what purposes and on what legal basis we use it, who we share it with, how long we keep it, and what rights you have.

Last updated: 15 June 2026

This document is informational and may be updated as our services and practices evolve.

Data controller

The controller of personal data (also referred to as the operator) is the company that runs the Aleria Events brand.

For any data protection question, or to exercise your rights, you can write to us at contact@aleria-events.ro. Full identification details are also available in the Legal Notice.

Controller
01 CODE S.R.L.
Fiscal code (CUI)
RO47254471
Trade Register number
J2022007141126
Registered office
Cluj-Napoca, Strada Parâng nr. 1, bl. A, sc. 1, et. IX, ap. 33
Brand operated
Aleria Events

Who this policy applies to

This policy applies to visitors of the public website and to people who contact us through the site's forms: the booking request, the custom quote request, and the contact form.

The data is provided directly by you, by filling in the forms or through our contact channels.

Fields marked as required are needed to analyze and respond to your request, while additional notes or messages are provided voluntarily.

If you do not provide the required data, we may not be able to respond to or process the request.

What personal data we collect

Depending on the form you fill in, we may collect:

  • first and last name;
  • email address;
  • phone number;
  • preferred language for communication, where collected;
  • event date and time;
  • event city, location and address;
  • the selected product or products of interest;
  • the event type and details;
  • your message or notes.

Confirmations, internal notes and anti-spam

For bookings we also keep the confirmations you tick, such as accepting the terms and confirming that you will designate the two adults who will supervise use.

After a request is submitted, our team may add internal operational notes related to it. These notes are used only internally, in the admin dashboard.

The forms also include an invisible technical anti-spam field (a “honeypot”). It is not intended for human users and is used only to reject automated submissions.

What we do not collect

Through this site we do not collect:

  • national ID number (CNP) or other national identifiers;
  • card or payment data;
  • passwords for any user accounts;
  • newsletter preferences;
  • analytics identifiers or marketing pixels;
  • sensitive data such as health data.

Purposes and legal bases

We process data for the following purposes and on the following legal bases:

  • Booking and quote requests — to check availability, prepare the offer or booking, and communicate about your request (basis: taking steps prior to a possible engagement, at your request);
  • Contact messages — to reply to you (basis: our legitimate interest in answering enquiries, or steps you requested);
  • Operational administration — for internal notes, request history, organization in the admin dashboard, and reports on completed bookings (basis: legitimate interest in running the business and keeping records);
  • Security and anti-spam — to protect the forms and prevent abuse (basis: legitimate interest);
  • Legal and accounting obligations — to keep certain data where required (basis: legal obligation, only where applicable).

Who has access to the data

We use service providers only where necessary to run the site and handle requests. We do not sell your data, do not make it available to advertisers, and do not use it for third-party marketing.

Data may be accessed or processed by:

  • the Aleria Events team / the operator, who handles the requests;
  • Supabase, the infrastructure provider for the database, storage, and admin-area authentication;
  • Resend, the provider through which we receive email notifications about new requests;
  • public authorities or professional advisers, for example an accountant or lawyer, only where required by law or necessary.

International transfers

Some technical providers may process data outside Romania or the European Economic Area, depending on their infrastructure and contractual setup.

Where such a transfer takes place, we aim for the processing to rely on appropriate safeguards, such as contractual protections or the provider's safeguards.

How long we keep the data

We keep active requests for as long as necessary to handle them and to communicate with you.

Booking, quote, and contact records may be kept afterward for operational history, dispute prevention, internal reporting, and business administration.

Completed bookings may remain in reports and history, including when they are moved to the internal trash.

Records may be deleted by the administrator when no longer needed, except where retention is required for legal, accounting, or legitimate-defense reasons.

You can request deletion or correction of your data, subject to these legal exceptions.

Your rights

Under data protection law, you have the following rights:

  • the right to access your data;
  • the right to rectification;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to object;
  • the right to data portability, where applicable;
  • the right to withdraw consent, where processing is based on consent.

Exercising your rights and complaints

To exercise your rights, you can write to us at contact@aleria-events.ro. We will respond within the legal timeframe, generally within one month.

You also have the right to lodge a complaint with the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).

Profiling and automated decisions

We do not use personal data for automated decisions that produce legal effects or that significantly affect you.

At the moment we do not use profiling for marketing or tracking purposes.

Security

We apply reasonable technical and organizational measures to protect the data: protected access to the admin area, limited access to the data, and providers that offer security measures.

No system, however, can be guaranteed to be completely secure.

Children

Our services may be used for events that children attend, but the forms must be completed by adults. For bookings, we ask you to confirm that you will designate at least two adults aged 18 or over who will continuously supervise use.

We do not intentionally collect data directly from children.

Cookies

The cookie banner stores your choice about cookies locally in your browser. At the moment the public site does not use analytics tools, marketing pixels, third-party tracking cookies, or reCAPTCHA/CAPTCHA scripts.

For details about cookies and similar technologies, see Cookie policy.

External links and third-party platforms

The site includes links to our Facebook, Instagram and TikTok profiles, a WhatsApp link for contact, and a link to the ANPC/SAL platform.

These are simple links that you open yourself. They are not embedded widgets, external scripts, tracking pixels or iframes.

If you open one of these links and move to an external platform, that platform may process data under its own privacy and cookie rules, which are outside our control.

Updates to this policy

We may update this policy when the services, providers, legal requirements, analytics or marketing tools, or data processing practices change.

The date of the last update is shown at the top of this page.