1. Data Controller
The data controller for personal data is Transilvania Times (transilvaniatimes.com). For any request relating to your personal data, you can contact us at the email address indicated in the Contact section.
2. Data We Collect
We collect the following categories of data:
- Navigation data: IP address, browser type, pages visited, session duration — collected automatically through technical cookies.
- Newsletter data: the email address you voluntarily provide when subscribing.
- Contact data: name, email, subject and message when you use the contact form.
- Analytics data: anonymised site-usage statistics, collected only with your explicit consent.
3. Legal Basis
- Consent (Art. 6(1)(a) GDPR): for analytics cookies and the newsletter.
- Legitimate interest (Art. 6(1)(f) GDPR): for platform security and fraud prevention.
- Performance of a contract (Art. 6(1)(b) GDPR): for managing user accounts.
4. Cookies
We use three categories of cookies:
- Essential cookies: required for the site to function (authentication, session). These cannot be disabled.
- Analytics cookies: Google Analytics — collected only with your consent. Can be disabled via the cookie banner.
- Advertising cookies: Google AdSense — collected only with your consent.
You may withdraw consent at any time via the cookie banner. See our Cookie Policy for details.
5. Data Retention
- Analytics data: 26 months (Google Analytics policy).
- Newsletter email addresses: until you unsubscribe.
- Contact messages: maximum 12 months.
- User accounts: for the duration of the account.
6. Third-Party Processors
- Supabase Inc. (USA) — database and authentication. DPA available at supabase.com/privacy.
- Netlify Inc. (USA) — hosting. DPA available at netlify.com/gdpr-ccpa.
- Google LLC — Analytics and AdSense. DPA available at policies.google.com.
- Resend Inc. — newsletter email delivery. DPA available at resend.com/legal/privacy-policy.
- OpenAI Inc. / HuggingFace Inc. — AI content generation. Personal data is not transmitted to these services.
7. Your Rights
Under the GDPR, you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data ("the right to be forgotten").
- Restriction — limit the processing of your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.
To exercise your rights, contact us via the contact form. You also have the right to lodge a complaint with ANSPDCP (the Romanian National Supervisory Authority for Personal Data Processing) at www.dataprotection.ro.
8. AI-Generated Content
Some articles published on Transilvania Times are partially generated or processed (fact checks) with the help of artificial intelligence. AI-assisted articles are labelled with the AI journalist persona name. Users' personal data is not transmitted to AI systems.
9. DPO Contact
For any data protection enquiries, use our contact form with the subject "GDPR".