Discover Botoșani
Privacy policy
Last updated: 26 July 2026.
1. General information
The confidentiality of your personal data is one of the principal concerns of the Botoșani County Council, with its seat at Piața Revoluției 1-3, Botoșani, Romania, acting as data controller.
This document informs you about the processing of your personal data in the context of using the Descoperă Botoșani platform — the tourism promotion website for Botoșani County and its companion mobile app (hereinafter "the Platform").
The Platform was produced under the PROMODIGI-T project (code ROMD00410), co-funded by the European Union through the Interreg VI-A NEXT Romania – Republic of Moldova Programme.
⚠️ The Platform serves tourist information purposes only. Do not use it to submit official requests, petitions or documents to the Botoșani County Council — for those, use the institutional channels at www.cjbotosani.ro, which are subject to their own privacy policy.
2. Categories of personal data processed
2.1. If you are a visitor to the Platform, the Botoșani County Council processes the personal data you provide directly, namely through the contact form: your name, e-mail address, subject and message text.
2.2. Using the Platform also involves processing:
- an aggregate view counter for each page — a plain number, not linked to any person and not allowing anyone to be identified;
- a technical device identifier (token), only if you enable notifications in the mobile app. It contains no name, e-mail address or other personal data and is deleted when you uninstall the app or turn notifications off;
- browsing data, exclusively if you explicitly accept the "statistics" category in the cookie banner (see the Cookie policy).
2.3. ⚠️ The Platform does NOT collect: national identification numbers, home addresses, payment details, health data or other special categories of data. There are no public user accounts and no sign-in is required.
2.4. We do not build profiles and take no automated decisions producing legal effects for you.
3. Purposes and legal bases of processing
3.1. Answering messages sent through the contact form. Legal basis: the legitimate interest of the Botoșani County Council in responding to requests addressed through the Platform (Art. 6(1)(f) GDPR). Providing your data for this purpose is voluntary; refusal has no negative consequences for you, but makes a reply impossible.
3.2. The correct operation and security of the Platform, including protecting the contact form against automated submissions. Legal basis: the legitimate interest in keeping the Platform available and preventing abuse.
3.3. Mobile app notifications, if you enable them. Legal basis: your consent, expressed by accepting notifications; you may withdraw it at any time in your phone's settings.
3.4. Traffic statistics, to understand which tourism content is sought out and improve it. Legal basis: your consent only, expressed in the cookie banner. You may withdraw it at any time via the "Cookie settings" link permanently available in the footer of every page.
3.5. Tourism promotion of the county through the published content. This activity involves no processing of visitors' data.
4. How long we process your data
We process personal data for as long as necessary to achieve the purposes above. Specifically:
- contact form messages — a maximum of 12 months, after which they are deleted automatically;
- the device identifier for notifications — until the app is uninstalled or notifications are turned off;
- statistics cookies (if you accept them) — see the durations in the Cookie policy;
- the aggregate view counter — for the lifetime of the Platform, as it is not personal data.
If you withdraw consent for processing based on it, we will cease that processing, without affecting the lawfulness of processing carried out before the withdrawal.
5. Disclosure of personal data
To fulfil the purposes of processing, data may be disclosed to processors supporting the operation of the Platform, or to public authorities where the law so provides. The providers actually involved in the Platform's operation are:
| Provider | Role | When involved |
|---|---|---|
| The hosting provider | technical operation of the servers | always |
| Cloudflare (Turnstile) | protecting the contact form against automated submissions | on the contact page only |
| OpenStreetMap Foundation | providing the map (cartographic tiles) | only when you open the map |
| Google (Firebase) | delivering notifications to your phone | only if you enable notifications in the app |
| Google Ireland Limited (Analytics) | traffic statistics | only if you accept the "statistics" category |
⚠️ When you request the map or the contact page, your IP address becomes visible to that provider, because the content is downloaded directly from them. These services are necessary for the functionality you requested and are not used for advertising tracking.
We do not sell or rent personal data. We share no data with social networks and use no advertising cookies.
6. Transfer of personal data
Normally, data does not leave the European Economic Area.
⚠️ There are two exceptions, both under your control:
- if you accept the "statistics" category, browsing data is processed by Google Ireland Limited, which may involve a transfer to the United States under the Standard Contractual Clauses and the EU–US Data Privacy Framework;
- if you enable notifications in the mobile app, the device identifier is processed through Google Firebase infrastructure, under the same conditions.
If you do not accept statistics and do not enable notifications, no transfer outside the European Economic Area takes place.
7. Your rights
Under the conditions laid down by data protection legislation, as a data subject you have:
- the right to information — to receive details of the processing activities, as described in this document;
- the right of access — to obtain confirmation of processing, together with details of how, why and to whom data is processed;
- the right to rectification — to obtain, without undue delay, the correction of inaccurate data and the completion of incomplete data;
- the right to erasure ("right to be forgotten"), in the cases provided by law — among others where the data is no longer necessary, where you withdraw consent and no other basis exists, or where processing was unlawful;
- the right to restriction of processing — among others where you contest the accuracy of the data, for the period of verification;
- the right to data portability — to receive your data in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where the legal conditions are met;
- the right to object — to processing based on legitimate interest or public interest, on grounds relating to your particular situation;
- the right not to be subject to automated individual decision-making, including profiling (the Platform performs no such processing);
- the right to lodge a complaint with the supervisory authority or the competent courts.
Withdrawing consent for statistics cookies takes two clicks, from the "Cookie settings" link in the footer of any page — exactly as easy as giving it.
8. How to contact us
For questions about the processing of your data and to exercise the rights above, please write to the Data Protection Officer of the Botoșani County Council:
protectiadatelor@cjbotosani.ro
For matters concerning the Platform's tourism content: consiliu@cjbotosani.ro.
If you are not satisfied with the reply received, you may complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, dataprotection.ro.
9. Security of processing
The Platform uses an encrypted connection (HTTPS). Access to the administration panel is protected by two-factor authentication, backups are encrypted, and content entered in the panel is filtered against dangerous code.
10. Changes to this policy
Any substantial change will be published on this page, with the date at the top updated. Where the change concerns processing based on consent, we will ask for your consent again.