Privacy Policy

The controller of your personal data is IALOC SRL, with its registered office at Str. Radu Popescu no. 10, Bl. 32A, Sc. A, Et. 3, Târgoviște, Dâmbovița County, J15/556/2018, tax ID 37066853. For anything about your data, write to hello@foodweek.ro.

Newsletter subscription. We collect your e-mail address (and your name, if you provide it). Purpose: to send you Festival news. Basis: your consent [Art. 6(1)(a) GDPR]. Retention: until you unsubscribe or withdraw consent.

Event ticket purchases. We collect your name, e-mail, phone (if requested) and order details. Card details are entered and processed directly by the payment processor Stripe; we only receive payment confirmation and minimal transaction data. Purpose: to conclude and perform the ticket sale contract and issue tax documents. Basis: performance of a contract [Art. 6(1)(b)] and compliance with legal obligations (tax and accounting) [Art. 6(1)(c)]. Retention: as long as needed to perform the contract, then per statutory retention periods for financial-accounting documents (up to 10 years).

Restaurant bookings. These are made on the ialoc platform; booking data is processed by ialoc as controller, under its own privacy policy. We do not collect this data through the BFW Site.

Usage statistics (analytics). With your consent, we use Google Analytics 4 to understand how the Site is used (pages visited, interactions, device type). IP is anonymised and the modules load only after consent (Consent Mode). Basis: your consent [Art. 6(1)(a)]. See the Cookie Policy.

Cookie preferences. We store your cookie choice so we can honour it on later visits.

Correspondence with us. If you write to us, we keep your message and contact details to reply. Basis: our legitimate interest in handling requests [Art. 6(1)(f)].

We do not sell your data. We may share it with:

• Brevo (Sendinblue), for sending the newsletter;
• Google, for statistics (Google Analytics) and for hosting and delivering the Site, where the provider may process technical data such as IP address from access logs;
• Stripe, for processing ticket payments;
• accounting providers and public authorities, where required by law;
• advisers (for example lawyers) in case of a dispute.

These recipients process data under agreements requiring confidentiality and security.

Some of our providers (for example Google and Stripe) may process data outside the EEA. In such cases the transfer is protected by appropriate safeguards (EU standard contractual clauses or adequacy decisions).

You have the right of access, rectification, erasure, restriction, objection, portability and the right to withdraw consent at any time, without affecting the lawfulness of prior processing. Exercise them by writing to hello@foodweek.ro; we respond within one month (extendable by two months for complex requests).

If you are unhappy with how we process your data, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru no. 28-30, Sector 1, 010336 Bucharest, anspdcp.ro.

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

We do not take automated decisions with legal effects on you and do not profile you for that purpose. The Site is not directed at children under 16; we do not knowingly collect their data.

We may update this policy; the version in force is published on this page, with the update date.