Privacy policy
Last updated: 28 September 2026
This page explains, in plain language, what personal data the Craiova Events platform (events, christmas, easter, evenimente and targuri.aicraiova.ro) processes, why, and what rights you have.
1. Who is responsible for your data
The data controller is NEWTIME CONCEPT SOLUTIONS S.R.L., Str. Albișoarei nr. 7, Craiova, județul Dolj, România · J16/242/2018 · CUI RO38803627 · contact@aicraiova.ro. For any question or request about your data, write to contact@aicraiova.ro.
The platform works without an account and without an app. We use no advertising cookies, no Google Analytics, no Facebook Pixel and no other advertising trackers. To count visits we use Vercel Web Analytics, which sets no cookies and does not identify you: we only see totals (pages visited, countries, device types).
2. What data we process, why and for how long
| What you use | What data | Why and legal basis | How long |
|---|---|---|---|
| Visiting the site | Page visited, language, country derived from the network, a session identifier. No IP address. | Aggregate statistics and service improvement; legitimate interest (Art. 6(1)(f) GDPR) | The session identifier is deleted after 30 days; only totals remain |
| The EVE and Noel assistants, translations | The text of your question or of the message to translate | The answer you asked for; legitimate interest | Not stored by us |
| Accommodation request to a hotel | Name, email, phone, message, language, IP address | Sending the request to the hotel and its answer; performing the service you asked for (Art. 6(1)(b)) | Deleted automatically 30 days after your departure date |
| Table booking or waiting list at a restaurant | Number of people, order, device identifier, IP address, language, notification subscription | Sending the request to the venue and preventing fake requests; service (b) and legitimate interest (f) | Identifier and IP: 30 days. Notification subscription: 2 days |
| Report to the City Hall | Type of issue, text, photo, GPS location and contact details, only if you send them | Forwarding the report to the competent department of Craiova City Hall. The photo is checked automatically by an AI system (Groq), which only flags it if it looks inappropriate; a person decides | Contact details deleted after 12 months |
| Notifications | The technical notification address of your browser | Event announcements; your consent (Art. 6(1)(a)) | Until you unsubscribe (button on the site) |
| "Find your friends" | Chosen name, GPS location updated while the feature is on, short group messages | The service you started; consent (a). Only group members, who have the group code, can see them | Deleted after 8 hours |
| Feedback | A 1 to 5 rating and an optional comment | Service improvement; consent | Deleted after 24 months |
The retention periods above are applied automatically every day, not just promised.
3. Location, IP address, camera and microphone
Your phone GPS location is used only when you ask for it (map guidance, nearby hotels or sights) and is not stored, except for the "Find your friends" feature you start yourself.
Your IP address is used on the spot by our server to derive your country (for the site language and aggregate statistics) and is not kept, except for requests to hotels and restaurants, where we keep it to prevent abuse, for the periods in the table.
The camera (for camera-based navigation), the microphone (for voice questions to EVE and the voice translator) and the compass start only when you press the button of that feature, with the permission asked by your browser. The camera image is not sent anywhere. Your voice is turned into text by the speech recognition service of your browser or phone (for example Google in Chrome and on Android, Apple on iPhone), under their own terms; only the text of the question reaches us.
4. Who else receives the data
- The hotel or restaurant you send a request to (only the data in that request). The hotel and the restaurant become controllers for their own customers.
- The department of Craiova City Hall you send a report to.
- Technical providers bound by data processing agreements: Vercel Inc. (hosting; the server runs in Dublin, Ireland), Supabase Inc. (database, in Ireland), Groq Inc. (AI assistants and translations; USA), Resend Inc. (emails; USA), Upstash Inc. (abuse protection), Google (maps; USA), browser notification services (Google, Apple, Mozilla).
- We never sell or rent your data.
5. Transfers outside the European Union
Some providers (Groq, Resend, Google) are in the United States. Transfers rely on the European Commission decision on the EU-US Data Privacy Framework, for certified providers, or on the standard contractual clauses approved by the European Commission. We send the AI assistants only the text of your question, without your name or other identifying data.
6. Artificial intelligence
EVE and Noel are artificial intelligence assistants, not people, and say so from the first message (Article 50 of Regulation (EU) 2024/1689). Automatic translations are marked as such. The systems take no decisions with legal effect on you. Conversations are not stored in our database.
7. What we keep on your phone
We use no cookies, except the login cookie of the administrators. In your browser storage (localStorage), on your own phone, we keep only what the site needs to work the way you used it: your chosen language, the accommodation requests and bookings you sent (so you can find them again), your route and the places visited in "My collection", your "Find your friends" group, display preferences (sound, messages already closed) and a device identifier used only against fake bookings.
This data leaves your phone only when you send a request yourself. You can delete it at any time from your browser settings (clear site data).
8. Your rights
- the right of access to your data and to receive a copy;
- the right to rectification and erasure;
- the right to restriction of processing and to data portability;
- the right to object to processing based on legitimate interest;
- the right to withdraw your consent at any time (for example, unsubscribing from notifications), without affecting earlier processing.
Write to contact@aicraiova.ro and we will reply within one month. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro, or with the authority of your own country.
9. Security
Connections are encrypted (HTTPS), the database cannot be read from the browser, photos in reports are kept in private storage and administrator passwords are stored only in hashed form. Only the people who need it to run the platform have access to the data.
10. Changes
If we change how we process data, we update this page and the date at the top.