Privacy Policy

Legal Basis

Our legal basis for processing crowd media is Article 6(1)(f) of the GDPR (Legitimate Interests) — specifically, our legitimate interest in promoting our business and documenting our events. Under Article 74 of the Romanian Civil Code, event photography at public gatherings is permitted, and by attending the event you acknowledge this practice.

Use & Retention

Crowd media may be used on our official website, social media channels, and marketing materials. Media is retained for up to 3 years unless a valid objection is received. If you appear in any media and wish to object to its use, contact us at info@oradeabarcrawl.ro with a description of the media so we can review and remove it.

1. Automated Systems & Customer Transparency

We believe in full transparency regarding digital interactions. We utilize automated technologies and AI-assisted software in the following areas:

Platform & User Experience: Our digital platform (built on Base44) utilizes automated algorithms to support site functionality, optimize system performance, structure search listings, and manage event schedules.

Automated Customer Support: When using our online booking channels, WhatsApp, or instant messaging widgets, you may interact with an automated AI assistant. This system helps answer real-time questions about ticket availability, meeting points, schedules, and venue details. Automated interaction points will explicitly state their AI nature upon initiation.

Content Generation: Promotional graphics, digital banners, marketing copy, and website text may be created or adapted using generative AI software tools.

We do not deploy high-risk AI systems, biometric identification tools, or automated profiling mechanisms to dynamically change pricing or exclude individuals from our services.

2. Mandatory Human Review & Editorial Responsibility

Under Article 50(4) of the EU AI Act, all text, itineraries, event details, and visual marketing assets generated or assisted by AI undergo mandatory human editorial review prior to public release.

Accuracy & Safety: A qualified human manager verifies all event schedules, meeting locations, safety rules, and local venue arrangements.

Editorial Control: We hold sole human editorial responsibility for all digital content published on our domain and promotional channels.

3. Internal AI Literacy, Staff Training & Data Safety

To fulfill the requirements of Article 4 of the EU AI Act, our business enforces strict operational policies regarding internal AI literacy, data security, and operational safety:

Data Confidentiality: Employees, hosts, and team members are strictly prohibited from entering sensitive personal data (such as customer payment details, national identification numbers, or confidential business records) into third-party AI models or prompts.

Operational Training: All staff managing customer relations or digital assets receive instruction on identifying AI hallucinations, mitigating algorithmic errors, and applying GDPR principles to automated tools.

4. Vendor Due Diligence & Technical Infrastructure

We rely on specialized third-party software platforms to power our online presence and ticketing workflows. We actively monitor our digital vendor network to maintain ongoing compliance:

Base44 Infrastructure: Our core website and application framework operate on Base44. We regularly review vendor security standards to confirm that integrated AI routines and serverless data handling adhere to European data sovereignty laws.

Ticketing & Payment Processing: Automated webhooks, ticketing channels, and payment gateways operate under strict cryptographic standards and data processing agreements compliant with GDPR and EU AI Act provider obligations.

Third-Party Audits: We ensure external AI API integrations and data subprocessors do not train public machine-learning models on your personal interactions without explicit consent.

5. Your Rights & Human Contact

You have the right to request human intervention for any automated interaction or booking query. If you prefer to speak directly to a team member, or if you have questions regarding our automated data processing practices, please reach out directly:

Email: info@oradeabarcrawl.ro

Subject Line: Data Privacy / AI Inquiry