Skip to content
ro en
Legal [ Data protection ]

Privacy policy

Last updated: 12 October 2026.

Who are we?

In accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the applicable national legislation, the association Institute for Risk Analysis and Strategic Resilience (IARS), as data controller, informs you about the purposes and methods of processing personal data.

This privacy policy sets out how we handle your personal information when you write to us through the contact form, book a conversation, send a membership application or subscribe to the newsletter.

The website iars.ro is owned and managed by the association Institute for Risk Analysis and Strategic Resilience (hereinafter "IARS" or "we"), with its registered office in Bucharest, Str. George Călinescu 23, email [email protected], telephone +40 733 531 862.

When we use the term "privacy", we refer to this page, the Privacy policy.

As data controller under Regulation (EU) 2016/679, the IARS association is required to manage securely, and only for the stated purposes, the personal data you provide to us through the website.

What personal data do we collect and why?

The IARS website stores only the data you send us through its forms:

  • through the contact form: your first and last name, email address, the organisation you belong to (optional), the chosen topic and your message;
  • when booking a conversation: your first and last name, email address, organisation (optional), the chosen day and time and, if you add one, a note on the subject of the conversation;
  • through the membership application: your first and last name, email address, organisation, membership category, areas of interest, motivation, how you wish to be involved and, if you provide it, a link to your CV;
  • when subscribing to the newsletter: your email address and the language in which you wish to receive the messages.

The purpose of collecting personal data is:

  • to answer the requests sent through the contact form;
  • to book online conversations, according to the schedule shown on the website;
  • to set up, confirm and send the calendar invitations for the booked conversations;
  • to assess membership applications and communicate our answer;
  • to send the institute's newsletter to those who subscribed: news about IARS activities, publications and events.

In accordance with Article 6(1)(a) of Regulation (EU) 2016/679, personal data is collected on the basis of your consent, given by ticking the consent box when submitting each form: when filling in the contact form, when booking a conversation, when applying for membership of the IARS association and when subscribing to the newsletter. For the newsletter, consent is confirmed through a link sent to the address you provided; without that confirmation, the address is not used.

Providing your data is voluntary. Without it, however, we cannot answer you, book the conversation or assess the membership application.

To protect the website against abuse and to show the home page in the right language, visitors' IP addresses are used automatically, on the basis of our legitimate interest in keeping the website secure and easy to use (Article 6(1)(f) of Regulation (EU) 2016/679): for the limits against abuse and, through the Cloudflare network, to determine the country from which the home page is visited. We do not keep IP addresses in our database.

How long do we keep your data?

Data sent through the contact form, through the booking of a conversation and through the membership application is kept for 1 year from submission and is then deleted automatically. Accepted membership applications are the exception: members' data is kept for as long as the person is a member.

The email address of newsletter subscribers is kept for as long as you are subscribed. An unconfirmed subscription request is deleted after 7 days, and after unsubscribing the address is deleted within 30 days.

Contact forms

The contact form makes communication easier between us, the association Institute for Risk Analysis and Strategic Resilience (IARS), and our community.

You can communicate with us in writing, by filling in the contact form, or through an online conversation: you choose a slot (day and time) in the calendar shown on the website, and we send you the calendar invitation with the access link on the Google Meet platform.

We collect your email address, your first and last name and, optionally, the organisation you belong to so that we can answer the requests you send us through the forms on the page https://iars.ro/en/contact.

Personal data is kept in the database for 1 year from submission, and you may request its portability or deletion at any time.

Cookies

The website does not set statistics or marketing cookies without your consent, given in the consent bar shown on your first visit.

Our own audience statistics are collected first-party, only with your consent, without cookies and without storing IP addresses.

Also only with your consent, the website may use Google Analytics 4, a service of Google Ireland Limited, for statistics, and Meta Pixel, a service of Meta Platforms Ireland Limited, to measure the effectiveness of the institute's communication on Facebook and Instagram. Consent can be withdrawn at any time from "Cookie settings", in the footer of every page.

More information about cookies is available in the Cookie policy.

Embedded content from other websites

The pages of this website may include content embedded from other websites, for example the videos hosted on YouTube in the exercise archives. Embedded content from other websites behaves exactly as if you were visiting that website.

These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with the embedded content, including when you have an account and are signed in to that website. This is why, on iars.ro, YouTube videos do not load with the page, but only after you press play.

Who do we share your data with?

The data may be disclosed to:

  • public authorities that have access to personal data under the law;
  • companies, consultants or professionals responsible for installing, maintaining, updating and managing the equipment and software we use to provide our services;
  • public and/or private entities, natural and/or legal persons (law firms, administrative and tax authorities, judicial offices, chambers of commerce, labour chambers and offices, etc.), where disclosure is necessary for the proper fulfilment of contractual obligations and of obligations arising from the law.

The providers through which the website operates process the data only on our behalf, under contracts that impose confidentiality and security obligations on them: the data is stored on servers in the European Union (Amsterdam, the Netherlands), at the hosting provider Railway; confirmation messages, calendar invitations and the newsletter are sent through the Resend service, from the European Union (Ireland); the institute's email correspondence is managed through Google services (Gmail, Google Calendar, Google Meet); the website's traffic passes through the Cloudflare network, which protects the website and manages the domain name and email routing.

Some of these providers, as well as Google and Meta for the tools described in the "Cookies" section, may transfer data outside the European Economic Area, including to the United States of America. Such transfers take place only with the safeguards provided by Regulation (EU) 2016/679: the European Commission's adequacy decision on the EU-US Data Privacy Framework, for certified companies, or the standard contractual clauses approved by the European Commission.

We do not sell or rent your data and we do not provide it for marketing, statistical or research purposes. The only exception is the statistics and marketing tools described in the "Cookies" section, which work only with your consent.

What rights do you have over your data?

If you have sent us data through the website, whether you wrote to us, booked a conversation, subscribed to the newsletter or joined the association Institute for Risk Analysis and Strategic Resilience (IARS) as a member, you may ask to receive an export file of the personal data we hold about you, including all the data you have provided to us. You may also ask us to erase or rectify the personal data we hold about you, and you have the right of access to the data, the right to request restriction of processing, the right to object, the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro) and the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Erasure does not cover the data we are required to keep for administrative, legal or security purposes.

We do not take decisions based solely on automated processing of data, including profiling.

How can you exercise your rights?

The rights above can be exercised by written request addressed to the data controller, at the following contact details:

  • telephone: +40 733 531 862;
  • email: [email protected];
  • postal address: Str. George Călinescu 23, Bucharest, Romania.

We answer within one month of receiving the request.

We reserve the right to update this page, and we will show the date of the update at the top of the page.

We use cookies and similar technologies to measure how the site is used (statistics) and to evaluate the institute's communication on Meta platforms (marketing). None of this starts without your consent; you can change it at any time from "Cookie settings". Details in the Cookie policy.