Notice
Privacy Policy
What information we process through thehumanshift.org and at the conference, for what purpose, who else has access to it and how you can step in at any time.
In short
- Creative Leadership Studio, SRL operates the website, sells tickets and issues invoices. Human 4 Human Consulting, SRL may send you its own communications only if you subscribed to communications from both companies.
- You receive the newsletter only with your consent, given through a separate, unselected-by-default choice. Buying a ticket is not marketing consent.
- The conference will be photographed and filmed. If you do not wish to appear in promotional materials, email us before the event or tell the on-site team.
- You can unsubscribe at any time, and information used for the newsletter is removed within one month.
- 1. Who processes your data
- 2. Information, purposes and legal bases
- 3. Newsletter and changes of platform
- 4. Photography and video
- 5. Recipients, providers and transfers
- 6. How long information is kept
- 7. Your rights
1. Who processes your data
Creative Leadership Studio, SRL operates thehumanshift.org, organises The Human Shift 2026, sells tickets and issues invoices. Registered address: Str. Salcamilor, 13 Bl. PC139, Scara C Etaj 3, Ap. 7, Oradea, Bihor, Romania; tax identification number (CUI) 54403940; Trade Register registration number ROONRC.J2026021988002. Contact: eduard@h4human.com.
Human 4 Human Consulting, SRL organises other events and may send its own communications to people who subscribed to communications from both companies. It may also use conference photographs and video to promote its activities, subject to the conditions below. Registered address: Str. Barcaului, 8, Biharia, Bihor, Romania; tax number provided: RO35858091; Trade Register registration number J5/652/24.03.2016. Contact: eduard@h4human.com.
Creative Leadership Studio, SRL manages information for the website, tickets and invoicing. The two companies use information for their own communications and activities to the extent selected by the individual. You may send questions or requests concerning either company to the contact address above. Their actual responsibilities for a shared recipient list will be reflected in their internal data-protection arrangements.
2. Information, purposes and legal bases
Newsletter signup
Information: name, email address, evidence of the signup choice, and information about email opens and link clicks.
Purpose: sending and evaluating the communications you agreed to.
Basis: consent, GDPR Article 6(1)(a).
Ordering and attendance
Information: name, email address, order and ticket details, payment confirmation and, where relevant, ticket transfer information.
Purpose: processing the order, providing access and sending essential event information.
Basis: performance of a contract, Article 6(1)(b).
Invoicing
Information: billing details provided, including purchaser-company and contact-person details where applicable.
Purpose: issuing and retaining accounting and tax records.
Basis: legal obligation, Article 6(1)(c).
Payment
Information: transaction identifiers and status information provided through the payment process; Stripe is used for payment processing. Creative Leadership Studio, SRL does not store the complete card number.
Purpose: managing payments and any refunds.
Basis: contract performance and applicable legal obligations.
Correspondence
Information: email address and message content.
Purpose: responding to enquiries.
Basis: the legitimate interest in responding, Article 6(1)(f), or contract performance, where applicable.
Website operation and protection
Information: technical information, including server logs and cookie-associated data.
Purpose: delivering and securing the website.
Basis: legitimate interests, Article 6(1)(f); consent for optional technologies where required by law.
Photography and filming
Information: attendees’ images and, where applicable, voices.
Purpose: documenting and promoting the event and the companies’ activities.
Basis: for general event imagery, the intended basis is legitimate interests, Article 6(1)(f), subject to a documented assessment and the safeguards below.
Information needed to place an order must be provided in order to buy a ticket. Newsletter signup is optional and is not a condition of purchase. Essential ticket, invoice and event-change messages are not newsletters.
4. Photography and video
The conference will be photographed and filmed. General event imagery may appear on websites, social media, in emails and in other promotional materials of Creative Leadership Studio, SRL or Human 4 Human Consulting, SRL. Attendees will be informed before buying a ticket and at the event. Before relying on legitimate interests for general imagery, we will assess the effect on individuals and put appropriate safeguards in place.
We will seek separate permission before using an interview, testimonial or other material individually presenting a person as recommending or endorsing either company. Buying a ticket is not blanket consent for every promotional use of a person’s image.
If you do not wish to appear in promotional materials, email eduard@h4human.com before the event or tell the on-site team. We will take reasonable steps to respect your request. You may object to processing based on legitimate interests; we will assess the objection under GDPR. Material passed on by third parties may not remain entirely within our control.
5. Recipients, providers and transfers
The website is hosted by ROMARG.ro. The installed plugins reported by the administrator are CookieAdmin, CookieAdmin Pro, FormLayer, FormLayer Pro, SiteSEO, SiteSEO Pro, FluentSMTP, Loginizer and Loginizer Pro. Listing a plugin does not mean it tracks every visitor.
Depending on the operation, information may be accessed by hosting and technical providers, Wix or a future newsletter provider, Stripe for payments, people helping organise the event, accounting providers, each of the two companies for the communications you selected, and authorities when disclosure is required by law. Imagery posted on websites and social media may be available to the public and the respective platforms.
Some providers may process information outside the European Economic Area depending on the services and configurations used. Where a transfer requires GDPR safeguards, we will use a relevant transfer mechanism and can provide information about it on request. Consult providers’ own notices for processing they conduct for their own purposes.
6. How long information is kept
Information used to send newsletters is kept while you are subscribed and removed within one month of unsubscribing, except for minimal records necessary to honour your choice and demonstrate consent.
Order information is kept as needed to administer tickets, the event, refunds, requests and disputes; if included in accounting or tax records, the applicable statutory period for those records applies. Invoices and supporting financial records are kept for the period applicable to each category under Romanian law; depending on the document, this may be between 5 and 10 years.
Stripe retains information under its own policies and obligations; periods for API logs, webhook events and transactions do not constitute a single deletion deadline for all payment data. Correspondence, technical logs and photo/video material are retained while needed for their stated purposes, with continued need reviewed and subject to applicable requests, disputes and legal obligations.
7. Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability, and object to processing. You may withdraw consent at any time without affecting earlier lawful processing. Contact: eduard@h4human.com. We normally respond within one month under GDPR rules. You may complain to Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.
We will update this policy if our practices change. If the Romanian and English versions differ, the Romanian version prevails, without limiting statutory rights.