Privacy policy

The controller of the RoAdevăr digital platform (roadevar.ro) is the entity that determines the purposes and means of processing on the site (the “controller” or “RoAdevăr”). The main activity is publishing news, analysis and opinion, and offering accounts to people who read or contribute editorially.

Contact for personal-data requests: contact@roadevar.ro (preferred) and the public means on the contact page. For formal GDPR requests, mention “data subject request” and the email of your account, if any.

This page explains what data we use and why, in practical language. Rights, retention and the supervisory authority are detailed in Data protection (GDPR). Account and content rules: Terms and conditions. Cookies: Cookie policy. Mutual platform–user commitments (ethics, donations, volunteering, image): Rules and commitments.

If wording conflicts on a personal-data point, this policy together with the GDPR page prevails over generic wording elsewhere.

A simple visit may involve ordinary technical data: IP address, device/browser type, preferred language, pages viewed, access time and, where needed, session identifiers via essential cookies. These are needed for display, basic security and anti-abuse measures.

Details of cookies and similar technologies (including analytics) are only in the Cookie policy, so we do not duplicate type lists and consent flows here.

A reader or author account may include: first/last name, email, password (stored hashed), language, optional phone, birth date, gender, address fields, account preferences and messages you send (contact, involvement, subscriptions). When logged in, we associate your actions with the account (e.g. comments, profile updates).

For authors, additional reasonable fields may be required to manage an editorial collaboration. Data you submit in public forms is processed only to reply and, where relevant, to handle the request.

Articles, opinions, comments, images, media or other uploads may contain personal data (including third parties you mention). You must not publish others’ data without a legal basis. RoAdevăr processes that content to display, moderate and archive it as part of a media platform.

Accuracy, ethics and content responsibility are covered in Rules and commitments and Terms; here we only address the personal-data side of published materials.

For certain platform functions (especially when an account gains rights to publish, comment as a verified user or act in contribution roles), we may ask for an image of an ID document (ID card, passport or similar valid document) and a selfie. The goal is responsible identification of the person behind the account, fewer fake accounts and the ability to respond lawfully to authority requests — without making documents public on the site.

We do not require manual national-ID numbers in public forms. Legal bases, automated checks, soft-delete and retention of these files are on the GDPR page — identity verification so rigorous legal detail is not repeated everywhere.

We process data to: (1) provide and secure the site and account; (2) publish and moderate media content; (3) communicate on your request (contact, support, collaboration); (4) verify contributor identity where enabled; (5) comply with legal duties; (6) reasonably improve experience (e.g. language, layout), on legitimate interest or consent as applicable.

We do not sell personal data or provide it to third parties for behavioural advertising as a product. If we use analytics or email tools based on consent, they are marked in the Cookie policy and/or at the collection point.

Under Article 6 GDPR, bases may be: consent (a) — e.g. newsletter, non-essential cookies, certain explicit uploads; performance of the account/service relationship (b); legal obligation (c) — e.g. responses to authorities, accounting archives where applicable; legitimate interest (f) — security, fraud/abuse prevention, editorial integrity, freedom of information, balanced against your rights.

Where we process ID/selfie images for verification, concrete bases and proportionality are explained on GDPR — identity verification.

Data may be accessed by authorised controller staff (newsroom / technical administration) on a need-to-know basis. Technical service providers (hosting, email, maintenance, any payment processors for donations) act as processors (Art. 28 GDPR) under contracts and must not use data for their own marketing.

Data may be disclosed to public authorities only if the law requires it or another clear legal basis allows it. We do not publish your ID document on open site pages.

We apply reasonable technical and organisational measures: access control, private storage for verification documents (outside the public web root), HTTPS on the site, hashed passwords, limited staff access, and normally replacing old documents on a new upload. Measures cannot guarantee zero risk, but aim at a level of security appropriate to the risk under Article 32 GDPR.

Account hygiene (password care, shared devices) remains your responsibility too — see Terms — account.

You have the rights in Articles 15–22 GDPR (access, rectification, erasure, restriction, portability, objection, withdraw consent, complaint to ANSPDCP, automated-decision information). Explanations, Article 17 exceptions, account soft-delete and periods are on Data protection (GDPR) — rights and retention.

To exercise them: contact@roadevar.ro or account settings where self-service actions exist. We respond within GDPR time limits, normally one month.

This policy may be updated when features, law or practices change. The current version is the one published on this page, with the last-updated date below. For substantial changes we reasonably notify registered users (e.g. email or in-platform notice).