Ashihara · Pitești
Privacy policy
How we process data on the club website — transparently, proportionately and only for sports activity.
GDPR
Last updated: 5 August 2026 · ASOCIAȚIA CLUB SPORTIV ASHIHARA KARATE PITEȘTI
Data controller
The controller is ASOCIAȚIA CLUB SPORTIV ASHIHARA KARATE PITEȘTI, CUI 27889585, registered office: Str. Petrochimiștilor nr. 39, Bl. C, Sc. A, Ap. 32, Pitești, Argeș. For training and public contact we use Complexul John (Pitești) and the details on the Contact page.
What data we collect
You can browse without an account. We collect data only when you send it via public forms:
- Contact form: name, email, phone (optional), subject, message.
- Trial-class form: child’s name, age (optional), parent’s name, phone, email (optional), centre, program of interest, message.
- Minimal technical data for security and operation (e.g. essential session / CSRF cookies). We do not collect special categories of data (health, biometrics, etc.) through the website.
Purposes and legal bases
We process data to:
- Answer messages and schedule a trial class — consent and/or the club’s legitimate interest in responding.
- Communicate about training, schedule and locations — same basis, limited to your request.
- Keep the site secure and working — legitimate interest. We do not sell data or use it for aggressive marketing without consent.
Retention
We keep messages and trial requests only as long as needed to handle them (usually until the conversation or enrolment is complete). You may ask for earlier deletion within legal limits. Essential technical logs are kept for short periods for security.
Who may receive data
Access is limited to club people who handle enrolments and communication. Technical providers (hosting, email) may process data as processors only to run the site. We do not transfer data outside the EU without adequate safeguards, if ever required.
Cookies
We use essential cookies for session, language and CSRF protection. Analytics or marketing cookies run only if you accept them in the banner.
Security
We apply reasonable measures: HTTPS, anti-abuse on forms, restricted access to messages. No internet transmission is risk-free; please do not send unnecessary sensitive data through public forms.
Your rights
Under the GDPR you may request:
- Access to your data and a copy of it.
- Rectification if it is inaccurate.
- Erasure or restriction, where the law allows.
- Objection to certain processing and, where applicable, portability.
- A complaint to ANSPDCP if you believe your rights were infringed.
Minors
Trial forms may include children’s data sent by a parent/guardian. The parent is responsible for accuracy and required consent. We do not create minor accounts on the site.
Changes
We may update this policy. The version published here, with the date above, applies. Continuing to use the site after an update means you have noted the new version.