Skip to content
Get in touchContact
ROEN

Legal

Privacy notice

Last updated: 2 September 2026

This page explains what happens to the details you leave in the form on this site. It is written to Regulation (EU) 2016/679 (GDPR), and it describes this site only - the church has a separate notice covering poartaregelui.ro.

The short version: we hold your details so that we can contact you when the hall is available to hire. We do not sell them, we do not pass them to anyone who is not listed below, and you can have them deleted by sending one email.

1. Who holds your data

The data controller is Asociația Poarta Regelui, Strada Branului 9, Cluj-Napoca 400393, Romania. For anything at all to do with your data - a question, a correction, or a deletion - write to [email protected].

2. What we collect

What you type into the form

Your name, your organisation and your email address are required. Your phone number, your role, the kinds of event you would run here, how many people they are usually for, and the one need you would want solved are optional - they are there because they help us reply usefully and because they tell us what to fit the room out with first.

Alongside them we record the consent you gave, the language you were reading the page in, and when you sent the form. Nothing else is collected. There is no payment on this site, so no card or bank details are ever involved.

What the site sees on its own

Cloudflare, which hosts and protects the site, processes your IP address and ordinary request information (browser type, time of request) in order to keep the site up and to block abuse. Cloudflare Turnstile - the anti-spam check on the form - looks at signals from your browser to decide whether the submission is automated.

When a submission succeeds, we store a one-way fingerprint (a cryptographic hash) of your email address and IP address for a few minutes, so that the same form cannot be sent over and over. It cannot be turned back into your address, and it deletes itself when the few minutes are up.

3. Why we hold it, and on what legal basis

  • To contact you about hiring the hall - the reason you filled the form in. Legal basis: your consent, GDPR Art. 6(1)(a), which is the box you had to tick to send it.
  • To plan what the room needs - what you tell us about your events shapes what we buy first. We use it as evidence, not as a profile of you.
  • To keep the site up and free of spam - Cloudflare, Turnstile and the short-lived fingerprint above. Legal basis: our legitimate interest in a working site, GDPR Art. 6(1)(f).
  • To count visits - Cloudflare Web Analytics, which is aggregate and cookieless and does not identify you (see section 7).

You can withdraw your consent at any time by writing to [email protected]. Withdrawing it stops any further use; it does not make what we did before it unlawful.

4. Who else sees it

Two processors, both acting on our instructions and for no other purpose:

  • Planning Center Online, LLC (United States) - where your details are stored once the form is sent. Your name, email and phone become a contact record; your organisation, your role, the kinds of event you would run, how many people they are for, the one need you described, and the consent you gave are written into the note on the enquiry attached to it. Planning Center privacy policy.
  • Cloudflare, Inc. (United States) - hosting, security, the Turnstile anti-spam check and the cookieless traffic count. Cloudflare privacy policy.

Nobody else. We do not sell your details, and we do not pass them to other venues, agencies or advertisers.

5. Data leaving the EEA

Both processors are established in the United States, so your details are transferred outside the European Economic Area. Those transfers rely on the Standard Contractual Clauses adopted by the European Commission, together with the additional safeguards each provider commits to in its own data-processing terms.

6. How long we keep it

Your details are kept for at most 24 months from the day you send the form, and are deleted sooner if you ask us to or if you tell us you are no longer interested. The anti-spam fingerprint in section 2 expires within minutes. Cloudflare’s own security logs follow its retention periods, not ours.

7. Cookies and measurement

This site sets no cookies of its own. Your language is part of the address you are reading (/ro/ or /en/), not something stored on your device, so there is no consent banner to click through.

Cloudflare Web Analytics counts page views without cookies and without building a profile of you: it reports totals, not people. Cloudflare may set strictly necessary cookies to protect the site against attack, and Turnstile may briefly store a token in your browser to remember that the anti-spam check has already passed. Neither is used for advertising, and there are no advertising or tracking pixels anywhere on this site.

8. Your rights

Under the GDPR you have the right to ask us for:

  • access - a copy of what we hold about you;
  • rectification - correction of anything wrong;
  • erasure - deletion of your details;
  • restriction - that we hold but stop using them;
  • portability - your details in a machine-readable file;
  • objection - to processing we base on legitimate interest;
  • withdrawal of consent - at any time.

Write to [email protected] and we will answer within 30 days. If you are not satisfied with how we handle it, you can complain to the Romanian supervisory authority, ANSPDCP - B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, dataprotection.ro.

9. Children

This page is aimed at organisations looking for a venue, not at children. We do not knowingly collect data from anyone under 16 through this form.

10. No automated decisions

Nothing about you is decided automatically, and we do not profile you. A person reads every enquiry. The only automated step is the anti-spam check, which judges whether a submission came from a machine - not who you are.

11. How it is protected

The form is sent over an encrypted connection (HTTPS) and reaches Planning Center over one too. The keys that let this site write to Planning Center are held by the hosting platform, never in the page you are reading, and never in our published source code. Inside Planning Center, access is limited to the people at the church who deal with venue enquiries.

12. Changes to this notice

If what we do with your data changes, this page changes with it and the date at the top is updated. If the change is significant and we hold your email address, we will tell you directly.

13. Contact

Any question about your data, or a request to delete it: [email protected], or by post to Asociația Poarta Regelui, Strada Branului 9, Cluj-Napoca.