INFORMATION NOTE REGARDING THE PROCESSING OF PERSONAL DATA ON THE OCCASION OF THE EVENTS ORGANIZED BY ANDRATWERK.COM

1. 1. The identity and contact details of the Operator/Operators
1.1. Personal data will be processed by Societatea DADA DANCEFIT S.R.L., with headquarters in Apahida, str. Eroii Pascu no. 77, registered at the Cluj Trade Registry under no. J12/1153/2021., having CIF: 43868835, Cluj County. Phone: +40 741991817, email: contact@andratwerk.com.

1. 2. Purposes of processing/processing
2.1. Personal data (referred to in this information note as "personal data") representing the image, behavior and, in certain cases, the name and voice of the natural person (referred to in this information note and the "data subject") will be processed by Operator by taking photos and/or videos (in the initial form or in an adapted, modified, transformed, or supplemented form of the filmed/photographed material) on the occasion of each event and using them on any media channels for the purpose of publicizing the event, but also of the Operator's partners (media partners, sponsors, contractual partners) who support the Operator in the implementation and organization of each event, as well as for any compatible, related and related purposes (including the monitoring/security of persons, spaces and private assets; such monitoring is can also be done by the contractual partners of the Operator for space security reasons owned/administered by the respective contractual partner).
2.2. Personal data may also be processed in any cases where the processing is necessary for the purposes of the legitimate interests pursued by the operator or a third party, in the event that such legitimate interests exist, unless the interests or rights prevail and the fundamental freedoms of the data subject, which require the protection of personal data.
3. The legal bases of the processing
The legal bases of the processing are/can be, as the case may be, Article 6 paragraph (1) letter (a) and letter (f) of Regulation (EU) 2016/679 (referred to in this information note as the "Regulation" or "GDPR "), namely:" ...(a) the data subject has given his consent ... for one or more specific purposes; (f) the processing is necessary for the purposes of the legitimate interests pursued by the operator or a third party.."
1. 4. Recipients or categories of recipients of personal data.
The recipients to whom the personal data regarding the subject will (may) be disclosed and transmitted are: i) the Operator's partners, located in the locations where the events take place (including the administrators/owners of the locations) who wish to use the images and/or audio materials -videos recorded during events for the purpose of own promotion campaigns; ii) the Operator's partners who own/administer/intermediate the sale of media advertising spaces where the events are wanted to be publicized (including Facebook/Instagram/Tiktok) as we want to share with those interested, but also with our community of fans on Facebook, Instagram, Tiktok, Youtube as well as on our website www.andratwerk.com images from the events; iii) agents of the Operator who provide services and process data on behalf of the Operator (such as production services, photography, marketing agencies, and/or other services necessary for the creation and use of photo/audio/video materials); iv) public authorities or other entities that provide public services (Police, Gendarmerie, courts of law or arbitration, bailiffs, etc.), if necessary according to law or public order, at their request. Inevitably, the photos and/or videos taken by our photographer/cameraman or those of our partners could capture you as well. Through access to Andratwerk.com events (regardless of whether this access is based on an entry ticket, an invitation , based on a contract concluded with the Operator or one of its partners, freely or without authorization, you agree that the images/audio-video materials that capture you and you are posted on our Facebook, Instagram, Tiktok accounts ,Youtube as well as on our website www.andratwerk.com, as well as on the social media channels and websites of our partners who support us for the purpose of implementing and organizing events; at the same time, you agree that the Operator has the right to use/ exploit/distribute/sell the photo and audio-video materials made during each event, for commercial or non-commercial purposes, even if these materials contain your personal data al).
5. The transfer of personal data to a third country or international organization
No personal data is transferred to a third country, with the exception of the use/transmission on media channels that could be considered a transfer to a third country or international organization (e.g. Youtube). The following third countries ensure, at the date of this information notice, an adequate level of protection: Andorra, Argentina, Canada (commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and US) . If the transfer will take place in other third countries than those previously mentioned, there is a risk that the personal data will be processed without an adequate level of protection, that they will be taken over and processed by any person, that there will no longer be a control over their processing and the data subject will no longer be able to fully exercise their rights according to this information notice and/or the Regulation.
1. 6. The period for which the personal data will be stored/The criteria used to establish this period.
Personal data will be stored for the entire period in which the event is mediatized, as well as for the entire period in which the archive/archives in which the mediatization of the event is located is/are maintained, if it is necessary and mandatory to a maximum fixed term is established according to the legal regulations in force, for a maximum period of 20 years, whichever comes first, but not less than the period stipulated by the legal regulations in force.
1. 7. The obligation to provide personal data and what are the possible consequences of not complying with this obligation.
Providing/allowing the collection of personal data does not represent a contractual obligation or a legal obligation or an obligation necessary for the conclusion of a contract, unless the personal data was (also) collected on other grounds.
The refusal to provide/allow the collection of personal data may lead (as well as the consequences of not complying with the obligation to provide/allow the collection) to the failure to take/publish/broadcast photos and videos with this personal data.
1. 8. The data subject's right of access
The data subject has the right to obtain from the operator a confirmation that personal data concerning him or her is being processed or not and, if so, access to the respective data and information according to this information notice and/or the Regulation. Upon request, the Operator will provide a copy of the personal data that is the subject of processing. For any other copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs.
9. The right to rectification
The data subject has the right to obtain from the operator, without undue delay, the rectification of inaccurate personal data concerning him.
10. The right to data deletion ("the right to be forgotten")
10.1. The data subject has the right to obtain from the operator the deletion of personal data concerning him without undue delay, and the operator has the obligation to delete personal data without undue delay if one of the following reasons applies: (a ) the personal data are no longer necessary to fulfill the purposes for which they were collected or processed; (b) the data subject withdraws the consent on the basis of which the processing takes place, if the processing takes place on the basis of the consent given by the data subject to the processing of his personal data for one or more specific purposes, and there is no other basis legal for processing; (c) the data subject objects to the processing, for reasons related to the particular situation in which he is, according to the Regulation, and there are no legitimate reasons that prevail with regard to the processing or the data subject objects to the processing of personal data for marketing purposes directly, and there is no other legal basis for processing; (d) personal data have been processed illegally; (e) personal data must be deleted to comply with a legal obligation incumbent on the operator under Union law or the internal law to which the operator is subject; (f) personal data were collected in connection with the provision of information society services to a child, according to the Regulation;
10.2. Point 10.1. it does not apply to the extent that the processing is necessary: ​​(a) for the exercise of the right to free expression and information; (b) for complying with a legal obligation that provides for the processing under Union law or the internal law that applies to the operator or for the performance of a task performed in the public interest or in the exercise of an official authority with which the operator is vested; (c) for reasons of public interest in the field of public health, in accordance with the Regulation; (d) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, in accordance with the Regulation, to the extent that the right mentioned in point 10.1. is likely to make impossible or seriously affect the achievement of the objectives of the respective processing; or (e) for the establishment, exercise or defense of a legal right.
1. 11. The right to restrict processing
The data subject has the right to obtain from the operator the restriction of processing if one of the following cases applies: (a) the data subject disputes the accuracy of the data, for a period that allows the operator to verify the accuracy of the data; (b) the processing is unlawful and the data subject opposes the deletion of personal data, requesting instead the restriction of their use; (c) the operator no longer needs the personal data for the purpose of processing, but the data subject requests them for establishing, exercising or defending a right in court; or (d) the data subject objected to the processing for reasons related to the particular situation in which he is, according to the Regulation, for the time interval in which it is verified whether the legitimate rights of the operator prevail over those of the data subject.
1. 12. Notification obligation regarding the rectification or deletion of personal data or restriction of processing
The operator communicates to each recipient to whom personal data has been disclosed any rectification or deletion of personal data or restriction of processing carried out in accordance with point 9, point 10.1. and point 11, unless this proves impossible or involves disproportionate efforts. The operator shall inform the data subject of the respective recipients if the data subject so requests.
13. The right to data portability
The data subject has the right to receive the personal data concerning him and which he has provided to the operator in a structured, commonly used and machine-readable format and has the right to transmit this data to another operator, without obstacles on the part of the operator to whom the personal data were provided, if: (a) the processing is based on consent or a contract; and (b) the processing is carried out by automated means.
14. The right to opposition
At any time, the data subject has the right to object, for reasons related to the particular situation in which he is, to the processing for the purposes of the legitimate interests pursued by the operator or a third party of the personal data concerning him. If personal data are processed for scientific or historical research purposes or for statistical purposes in accordance with the Regulation, the data subject, for reasons related to his particular situation, has the right to object to the processing of personal data that concern, unless the processing is necessary for the performance of a task for reasons of public interest.
1. 15. Automated individual decision-making, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling.
1. 16. The right to file a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedies, any data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State in which he has his habitual residence, place of work or where the alleged violation occurred, if it considers that the processing of personal data concerning it violates the Regulation.
17. The right to an effective judicial remedy against a supervisory authority
Without prejudice to any other administrative or non-judicial remedies, every natural or legal person has the right to exercise an effective judicial remedy against a legally binding decision of a supervisory authority affecting him.
1. 18. The right to an effective judicial remedy against an operator or a person authorized by the operator
Each data subject has the right to exercise an effective judicial remedy if he considers that the rights he enjoys under the Regulation have been violated as a result of the processing of his personal data without complying with the Regulation.
1. 19. Representation of the persons concerned
The data subject has the right to mandate a non-profit body, organization or association, which is active in the field of protection of the rights and freedoms of data subjects with regard to the protection of their personal data, to submit the complaint on his behalf, to exercise on its behalf the rights mentioned in articles 16, 17 and 18, as well as to exercise the right to receive compensation on its behalf.
1. 20. Right to indemnification and liability
Any person who has suffered material or moral damage as a result of a violation of the Regulation has the right to obtain compensation from the operator or from the person authorized by the operator for the damage suffered.
1. 21. Miscellaneous clauses
21.1. Any requests and/or requests sent by the data subject to the Operator for the exercise of any of the rights can be made in writing, by registered letter sent to the operator's headquarters and/or by email to the operator's email and/or by any other means provided by the legal regulations in force.
21.2. The terms used in the content of this information note will also have the meaning defined in the Regulation if the context does not expressly indicate otherwise.
21.3. No provision of this information note is intended, cannot be considered and cannot be interpreted in the sense that Dada DANCEFIT S.R.L. grant any guarantee and/or representation and/or assume any obligation and/or give any declaration for and/or in the name and/or on behalf of any of the operators mentioned in art 1.2.