Privacy Policy

Last updated: 15 June 2026

This policy explains what personal data RomaniWorld.org ("we") collects, why, on what legal basis, and the rights you have under the EU General Data Protection Regulation (GDPR).

Data controller

RomaniWorld.org. Contact: privacy@romaniworld.org. Full operator details are in the Imprint.

What we collect

  • Account data — name, email, country and password (stored hashed).
  • Profile data — the artist/organiser details you choose to publish.
  • Activity — talent requests, bookings and messages you create.
  • Technical data — IP address and browser information in server logs, for security.
  • Cookies — see the Cookie Policy.

Why we use it & legal basis

  • To provide your account, profile and bookings — performance of a contract (Art. 6(1)(b)).
  • To keep the platform secure and prevent abuse — legitimate interests (Art. 6(1)(f)).
  • Optional cookies, embedded media and any newsletter — your consent (Art. 6(1)(a)), withdrawable at any time.
  • To meet legal obligations where applicable — legal obligation (Art. 6(1)(c)).

Who we share it with

We never sell your data. We use service providers acting on our instructions: our hosting provider, and content-delivery networks (Google Fonts, jsDelivr) and — only with your consent — YouTube, which may receive technical data to deliver content. Some of these may process data outside the EEA under appropriate safeguards (e.g. EU Standard Contractual Clauses).

How long we keep it

We keep account and profile data while your account is active and delete it on request or a reasonable period after closure, unless the law requires longer. Server logs are kept for a short period for security.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing or withdraw consent. To exercise any right, email privacy@romaniworld.org. You may also lodge a complaint with the Hungarian supervisory authority, the NAIH (naih.hu).

Security & children

Passwords are hashed and forms are protected against cross-site request forgery. The platform is not directed at children under 16; we do not knowingly collect their data.

We may update this policy; the date above shows the latest version.