Privacy Policy

Last updated: 28 October 2026

This policy explains what personal data we collect through carpathiainvestingclub.org, why we collect it, how long we keep it and what rights you have. We apply it in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian data protection law. The Romanian version of this policy prevails in case of any discrepancy.

1. Who we are

The controller of your personal data is Carpathia Investing Club – Clubul de Investiții Carpathia, tax ID (CUI) 44693928, correspondence address Aleea Retezat nr. 2, 400680 Cluj-Napoca, Cluj County, Romania. The club also runs the financial education project Financiaria (financiaria.ro), which has its own privacy policy.

For any question about your data, write to us at invest@carpathiainvestingclub.org or call +40 741 079 704.

2. What data we collect and why

Situation Data collected Purpose Legal basis (Art. 6 GDPR)
Contact form name, email address, subject, message to reply to your message our legitimate interest in answering enquiries (Art. 6(1)(f))
Enrolment in the mentoring programmes (“Roadmap”) and requests to become a club member, sent through the contact form name, email address, subject, message to review your request and contact you with details and next steps steps taken at your request before entering into a contract (Art. 6(1)(b))
Newsletter subscription email address, your consent and your email confirmation of the subscription to send you news about club meetings and activities your consent (Art. 6(1)(a)), which you can withdraw at any time by using the unsubscribe link in every newsletter, replying to an email or writing to invest@carpathiainvestingclub.org
Comments on articles name, email address, website (optional), the comment, IP address and browser to publish the comment and filter spam our legitimate interest in moderating discussions on the site (Art. 6(1)(f))
Site security IP address, date and time of access, login attempts to protect the site against attacks and abuse our legitimate interest in keeping the site secure (Art. 6(1)(f))

We do not use your data for automated decision-making and we do not create profiles with legal effects on you. We do not sell your personal data.

3. Cookies and external content

We use cookies that are strictly necessary for the site to work. YouTube videos load only after you give your consent, because YouTube may set its own cookies. The fonts used to display text are hosted on our own server, so your browser does not download them from Google. You can find the details and change your choice at any time in the Cookie Policy.

4. Who we share data with

To operate, the site uses providers that may access data on our behalf, as processors:

  • the site’s web hosting provider, whose servers store the site, comments and security logs;
  • our email provider, through which we receive form messages;
  • Mailjet SAS (France, European Union), the service we use for the newsletter: the subscription form on the site is displayed by Mailjet, and Mailjet stores subscribers’ addresses and sends the subscription confirmation email and the newsletter;
  • Google Ireland Limited, only after your consent, for YouTube;
  • Automattic, for the Gravatar service, which may receive an anonymised string created from your email address when you leave a comment.

We may share data with public authorities only when the law requires us to.

5. Transfers outside the European Union

Some providers, such as Google or Automattic, may also process data outside the European Economic Area, including in the United States. In these cases, transfers rely on the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

6. How long we keep data

  • contact form messages and enrolment requests: 2 years from the last correspondence;
  • newsletter data: until you unsubscribe;
  • comments: for as long as they are published on the site;
  • security logs: no longer than 90 days.

After these periods, the data is deleted or anonymised.

7. Your rights

Regarding your personal data, you have the right:

  • to find out what data we hold about you and receive a copy (right of access);
  • to have inaccurate data corrected (right to rectification);
  • to have your data erased (right to erasure);
  • to request restriction of processing;
  • to receive your data in a structured format or have it sent to another controller (right to data portability);
  • to object to processing based on our legitimate interest (right to object);
  • to withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise these rights, write to us at invest@carpathiainvestingclub.org. We reply within one month of receiving your request.

If you are unhappy with how we process your data, you can lodge a complaint with the Romanian supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, www.dataprotection.ro.

8. Data security

The site uses an encrypted connection (HTTPS), protection against attacks (firewall) and administrative access only for authorised people. However, no system is completely secure, so please do not send sensitive data through the forms, such as passwords, bank details or personal identification numbers.

9. Minors

Our services are intended for people over 16. We do not knowingly collect data from children under this age. If you find out that a minor has sent us data, write to us and we will delete it.

10. Changes to this policy

We may update this policy when our services or the law change. The date of the last update appears at the top of the page.

Scroll to top