Privacy Policy

1. Who processes your data

Creative Leadership Studio, SRL operates thehumanshift.org, organises The Human Shift 2026, sells tickets and issues invoices. Registered address: Str. Salcamilor, 13 Bl. PC139, Scara C Etaj 3, Ap. 7, Oradea, Bihor, Romania; tax identification number (CUI) 54403940; Trade Register registration number ROONRC.J2026021988002. Contact: eduard@h4human.com.

Human 4 Human Consulting, SRL organises other events and may send its own communications to people who subscribed to communications from both companies. It may also use conference photographs and video to promote its activities, subject to the conditions below. Registered address: Str. Barcaului, 8, Biharia, Bihor, Romania; tax number provided: RO35858091; Trade Register registration number J5/652/24.03.2016. Contact: eduard@h4human.com.

Creative Leadership Studio, SRL manages information for the website, tickets and invoicing. The two companies use information for their own communications and activities to the extent selected by the individual. You may send questions or requests concerning either company to the contact address above. Their actual responsibilities for a shared recipient list will be reflected in their internal data-protection arrangements.

2. Information, purposes and legal bases

Newsletter signup

Information: name, email address, evidence of the signup choice, and information about email opens and link clicks.
Purpose: sending and evaluating the communications you agreed to.
Basis: consent, GDPR Article 6(1)(a).

Ordering and attendance

Information: name, email address, order and ticket details, payment confirmation and, where relevant, ticket transfer information.
Purpose: processing the order, providing access and sending essential event information.
Basis: performance of a contract, Article 6(1)(b).

Invoicing

Information: billing details provided, including purchaser-company and contact-person details where applicable.
Purpose: issuing and retaining accounting and tax records.
Basis: legal obligation, Article 6(1)(c).

Payment

Information: transaction identifiers and status information provided through the payment process; Stripe is used for payment processing. Creative Leadership Studio, SRL does not store the complete card number.
Purpose: managing payments and any refunds.
Basis: contract performance and applicable legal obligations.

Correspondence

Information: email address and message content.
Purpose: responding to enquiries.
Basis: the legitimate interest in responding, Article 6(1)(f), or contract performance, where applicable.

Website operation and protection

Information: technical information, including server logs and cookie-associated data.
Purpose: delivering and securing the website.
Basis: legitimate interests, Article 6(1)(f); consent for optional technologies where required by law.

Photography and filming

Information: attendees’ images and, where applicable, voices.
Purpose: documenting and promoting the event and the companies’ activities.
Basis: for general event imagery, the intended basis is legitimate interests, Article 6(1)(f), subject to a documented assessment and the safeguards below.

Information needed to place an order must be provided in order to buy a ticket. Newsletter signup is optional and is not a condition of purchase. Essential ticket, invoice and event-change messages are not newsletters.

3. Newsletter and changes of platform

If you give consent using a separate, unselected-by-default choice, you may receive by email news, perspectives and information about The Human Shift, other events and the activities of Creative Leadership Studio, SRL and Human 4 Human Consulting, SRL. The opt-in must name both companies and describe these subjects. Buying a ticket alone is not marketing consent.

Currently the newsletter is managed through Wix; email opens and link clicks are tracked. The sending provider may change in the future, for example to another newsletter platform. The subscribed list may be migrated to the new provider for the same communications to which subscribers agreed, while protecting the information and preserving unsubscribe choices. Changing a provider does not broaden the original consent. If the sender, categories of messages or other essential aspects of the consent change, we will seek fresh consent where required.

A native LinkedIn page or newsletter differs from an email-sending service: we will not automatically subscribe people to a LinkedIn newsletter using our email list. We may, within the scope of the email consent, invite subscribers to subscribe themselves on LinkedIn. If we propose using LinkedIn or another platform to import email addresses for additional purposes, we will assess that use separately and update this notice before doing so.

You can withdraw consent at any time using the unsubscribe link in marketing messages or by emailing eduard@h4human.com. Withdrawal does not affect earlier lawful processing. We remove data used to send the newsletter within one month of unsubscribing, except for minimal information justifiably kept to honour the opt-out or demonstrate consent.

4. Photography and video

The conference will be photographed and filmed. General event imagery may appear on websites, social media, in emails and in other promotional materials of Creative Leadership Studio, SRL or Human 4 Human Consulting, SRL. Attendees will be informed before buying a ticket and at the event. Before relying on legitimate interests for general imagery, we will assess the effect on individuals and put appropriate safeguards in place.

We will seek separate permission before using an interview, testimonial or other material individually presenting a person as recommending or endorsing either company. Buying a ticket is not blanket consent for every promotional use of a person’s image.

If you do not wish to appear in promotional materials, email eduard@h4human.com before the event or tell the on-site team. We will take reasonable steps to respect your request. You may object to processing based on legitimate interests; we will assess the objection under GDPR. Material passed on by third parties may not remain entirely within our control.

5. Recipients, providers and transfers

The website is hosted by ROMARG.ro. The installed plugins reported by the administrator are CookieAdmin, CookieAdmin Pro, FormLayer, FormLayer Pro, SiteSEO, SiteSEO Pro, FluentSMTP, Loginizer and Loginizer Pro. Listing a plugin does not mean it tracks every visitor.

Depending on the operation, information may be accessed by hosting and technical providers, Wix or a future newsletter provider, Stripe for payments, people helping organise the event, accounting providers, each of the two companies for the communications you selected, and authorities when disclosure is required by law. Imagery posted on websites and social media may be available to the public and the respective platforms.

Some providers may process information outside the European Economic Area depending on the services and configurations used. Where a transfer requires GDPR safeguards, we will use a relevant transfer mechanism and can provide information about it on request. Consult providers’ own notices for processing they conduct for their own purposes.

6. How long information is kept

Information used to send newsletters is kept while you are subscribed and removed within one month of unsubscribing, except for minimal records necessary to honour your choice and demonstrate consent.

Order information is kept as needed to administer tickets, the event, refunds, requests and disputes; if included in accounting or tax records, the applicable statutory period for those records applies. Invoices and supporting financial records are kept for the period applicable to each category under Romanian law; depending on the document, this may be between 5 and 10 years.

Stripe retains information under its own policies and obligations; periods for API logs, webhook events and transactions do not constitute a single deletion deadline for all payment data. Correspondence, technical logs and photo/video material are retained while needed for their stated purposes, with continued need reviewed and subject to applicable requests, disputes and legal obligations.

7. Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability, and object to processing. You may withdraw consent at any time without affecting earlier lawful processing. Contact: eduard@h4human.com. We normally respond within one month under GDPR rules. You may complain to Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.

We will update this policy if our practices change. If the Romanian and English versions differ, the Romanian version prevails, without limiting statutory rights.