This policy describes how the Szekler Museum of Ciuc processes the data of visitors to the csikimuzeum.ro website.

1. The controller

Szekler Museum of Ciuc (Muzeul Secuiesc al Ciucului, Csíki Székely Múzeum)
Piața Cetății nr. 2, 530132 Miercurea Ciuc, Harghita County, Romania
E-mail: info@csikimuzeum.ro
Phone: (004) 0266 372 024

2. What data we process

The website does not ask for personal data: there is no registration, user account, newsletter, contact form, purchase or payment. Search terms are not stored.

Cookies. The website uses the following cookies:

• october_session: a session cookie needed for the website to work. It expires after 2 hours of inactivity. It cannot be turned off.
• gdpr_cookie_consent: stores your choice about cookies. If you accept, it is valid for 12 months (in the cookie settings you can choose between 3 and 36 months); if you decline, until you close the browser. It cannot be turned off.
• Google Analytics (_ga, _ga_*): measuring the website traffic, valid for 2 years. Loaded only with your consent.
• Google Maps: the map on the contact page. Loaded only if you consent with the “Load map” button or by accepting cookies; Google may then set its own cookies.

Server logs. The web server of the hosting provider records, for every request, the time, the IP address of the requester, the requested page and the browser type. The hosting provider keeps these logs for a limited time for the operation and security of the website and then deletes them automatically.

3. Purpose and legal basis

• Necessary cookies and server logs: the secure operation of the website, as part of the museum's tasks in the public interest (Article 6(1)(e) GDPR).
• Google Analytics and Google Maps: your consent (Article 6(1)(a) GDPR and Article 4(5) of Romanian Law no. 506/2004), which you can withdraw at any time.

4. Who has access to the data

• The developer and operator of the website, Camelcoding: on behalf of the museum, as a processor, solely for development, bug fixing and maintenance.
• The hosting provider of the website, as a processor.
• Google LLC (United States), for Google Analytics and Google Maps, as an independent controller, under its own privacy policy: policies.google.com/privacy.

We do not pass the data on to other third parties and do not use it for advertising.

5. Transfers outside the European Union

When Google Analytics and Google Maps are used, data may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as ensuring an adequate level of protection.

6. Retention

• Cookies: for the periods given in section 2, or until you delete them in your browser.
• Google Analytics: Google keeps user-level data for at most 14 months.
• Server logs: kept by the hosting provider for a limited time and then deleted automatically.

7. Cookie settings, withdrawing consent

You can change your choice at any time on the cookies page. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. You can also delete or block cookies in your browser settings.

8. Your rights

You may request access to your personal data, its rectification or erasure, or the restriction of its processing, object to the processing, and request data portability. You can send your request free of charge to info@csikimuzeum.ro; we reply within one month at the latest.

9. Complaints

If you believe that the processing of your data infringes the law, you can lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336 București, www.dataprotection.ro. You may also turn to the courts.

10. Changes to this policy

We update this policy as the website changes; the current version is always available on this page.

Last updated: 3 November 2026.