1. Who manages the data
This website is used for the activities of DIM Association, the data controller for the processing described here. References to DIM Centre and SNSPA describe the community’s academic origins and do not identify this website’s administrator.
For questions about this policy, personal data or exercising your rights, contact us at the address below.
Data protection contact: [email protected].
2. What data we process
The technical infrastructure may process your IP address, browser, operating system, access date and time, requested page and error or security logs.
The contact form collects your name, email and message. It also sends the selected language, form identifier and version, and confirmation of consent. The IMFS connector associates the enquiry with technical visitor and session identifiers and sends the page URL and referring page, where available, when initialising the session.
By email or telephone, we process the information you choose to provide. Do not include sensitive data or information about others that is unnecessary for your enquiry.
3. The contact form and data flow
Your name, email, message and consent checkbox are required for online submission. Pressing “Send message” transmits these data through the IMFS web connector to the CRM used to manage DIM enquiries. Authorised DIM Association personnel use them to assess your message and respond.
When configured, loading the connector separately initiates a technical session, including before a message is submitted. The associated storage is described in the Cookie Policy. The form also contains a technical anti-spam field, which must remain empty.
Agreement to handle your message does not constitute a newsletter subscription or marketing consent. If you prefer not to use the form, you can email us directly.
4. Purposes and legal bases
Form data is used to respond to your enquiry on the basis of consent given through the checkbox, under Article 6(1)(a) GDPR. Depending on the enquiry, steps necessary to enter into a contract with you may rely on Article 6(1)(b), and legal obligations on Article 6(1)(c).
Website delivery and security, abuse prevention and incident investigation serve the legitimate interest in maintaining functional and secure services, under Article 6(1)(f). This basis does not replace consent where it is required to store or access information on your device.
The form does not automatically enrol you in marketing. The website does not provide a solely automated decision-making mechanism producing legal or similarly significant effects on you.
6. Recipients and transfers
Data is accessible to authorised DIM Association personnel and providers involved in hosting, maintenance, communications and enquiry management. The form uses the IMFS connector and CRM through hosting.imfs.ro. Data may be disclosed to authorities where legally required.
Google Fonts receives technical connection data to load fonts. Embedded video playback involves YouTube/Google. External links are also subject to the relevant services’ privacy information.
Contractual roles, actual processing locations and safeguards for any transfers outside the European Economic Area must be assessed for the services used. You can request information on recipients and applicable safeguards. A .ro domain alone does not establish that all processing occurs exclusively in Romania or the EEA.
7. Retention criteria
Messages and enquiries: the primary criterion is resolving the request and completing the necessary correspondence. Subsequent retention needs a separate justification in a contractual relationship, legal obligation or the establishment, exercise or defence of a legal claim. These exceptions do not justify retaining all messages indefinitely.
Consent evidence and rights requests: these may require retention separately from the original message, limited to demonstrating consent, resolving the request and meeting relevant obligations.
Newsletter: your email address is retained on the subscriber list while your subscription remains active; after unsubscribing, the address is marked as suppressed to prevent further mailings and to retain evidence of withdrawal.
Technical logs and server sessions: the criteria are troubleshooting, abuse prevention and incident investigation. A specific incident may justify retaining relevant data during the investigation and related obligations. Actual periods, log rotation and backups depend on service configuration; this page does not certify automatic deletion after a specified number of days.
Browser storage has the durations described in the Cookie Policy. Clearing it does not automatically delete messages in the CRM. Contact us about the period applicable to a specific enquiry or to request erasure.
Data protection contact: [email protected].
9. Your rights and consent withdrawal
Subject to the GDPR’s conditions, you can request access, rectification, erasure, restriction of processing, object to processing based on legitimate interests and, where applicable, request data portability.
You can withdraw consent at any time by email, without affecting the lawfulness of earlier processing. If we can no longer use the data needed to respond, we may be unable to continue handling your enquiry. Another applicable basis or legal obligation may require certain information to be retained.
Email us to exercise your rights. Where there are reasonable doubts about the requester’s identity, proportionate additional information may be requested. We respond without undue delay and, in principle, within one month. Complex or numerous requests may require a further two months, with notice within the first month.
Data protection contact: [email protected].
10. Complaints and updates
You can lodge a complaint with Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP) or the competent authority under the GDPR if you believe the processing of your data infringes the law.
We update this policy when services, data flows or applicable requirements change. The latest update date appears at the beginning.