Privacy policy

1. Who we are

The controller of your data is International Association of Youth BECOME, organiser of the International Panflute Masterclass, held at the ASTRA National Museum in Sibiu, Romania.

Contact for anything in this policy: info@panflutemasterclass.ro · +4(0) 745 176.170.

2. What we collect

Only what you type in yourself:

• Registration (checkout): full name, email address, phone number, billing address; company name and VAT ID if you register through a company; any notes you add.
• Account (optional): the same details plus a password, stored only as a cryptographic hash — we cannot read it.
• Contact form: name, email, phone and your message.
• Reviews: the name and comment you submit.
• Technical: IP address and timestamp, kept with each submission as anti-spam and security evidence.

We do not receive or store card data. Card payments happen on the payment processor's own page, which sends us back only the result of the transaction.

3. Why we process it

• To perform the contract — registering you for the masterclass, confirming your place, issuing the invoice, contacting you about the programme.
• To meet legal obligations — accounting and invoicing rules require us to keep transaction records.
• Legitimate interest — keeping the site secure and free of automated abuse.
• Consent — analytics cookies, if you accept them in the banner. You can withdraw consent at any time from the cookie policy.

4. Who else sees it

Only the processors we need in order to run the registration:

• the hosting provider, on servers located in the European Union;
• the payment processor, for card payments;
• the email provider that delivers the confirmations;
• the accountant and, where required, the tax authorities.

We never sell your data and we do not transfer it outside the European Economic Area.

5. How long we keep it

• Registration and invoicing data — for the period required by accounting law.
• Account data — until you ask us to delete the account.
• Contact messages — up to 2 years from the last exchange.
• Anti-spam technical logs — up to 12 months.

6. Your rights

Under the GDPR you may ask for: access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, without affecting what was lawful before.

Write to info@panflutemasterclass.ro — we answer within 30 days. If you believe we handle your data unlawfully, you may complain to the Romanian supervisory authority, ANSPDCP (B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest).

7. Minors

Participants under 18 are registered by a parent or guardian, who also signs the declaration required by the Regulations. We process a minor's data only on that basis.

8. Changes

If this policy changes, the new version is published on this page. Registrations already made are governed by the version in force at the time.