GDPR
Last Updated: January 14, 2026
This GDPR Agreement describes how your personal data is collected, used, and protected during the HackTech Airport Chapter (the “Event”). By registering, you enter into a multi-party agreement regarding data processing between you, the organizers, and the venue authorities.
1. DATA CONTROLLERS
Your personal data is jointly processed and controlled by:
- Association “MAKE IT IN ORADEA” (MITO): Responsible for event organization, communication, and participant management.
Headquarters: Romania, Bihor county, Oradea, 35, Emanuil Gojdu Square, Oradea Citadel, building I, ground floor
Fiscal no. 43347357
Email: chat@britghtlabs.build
- ORADEA INTERNATIONAL AIRPORT (Regia Autonomă Aeroportul Oradea): Responsible for security clearance, physical access, and safety protocols within the airport infrastructure.
2. MANDATORY SECURITY DATA COLLECTION (CRITICAL)
⚠️ IDENTIFICATION REQUIREMENT: Because this event takes place within a high-security international transport hub, all participants are subject to mandatory background checks.
We will collect a digital copy of your National ID or Passport. > * Purpose: This data is shared directly with the Airport Security Department and the Romanian Border Police to verify your identity and grant you access to restricted “Airside” zones.
- Necessity: Providing this data is a strict requirement for entry. Failure to provide a legible copy of your ID will result in the immediate cancellation of your registration without a refund, as access to the venue will be legally denied.
3. CONTENT CREATION & MEDIA CONSENT
The Event is a documented public tech competition. By registering, you agree to the following regarding media production:
- Production: The organizers and official partners will record photographs, aftermovies, and video/audio testimonials during the event.
- Publicity: You grant the organizers an irrevocable right to use your image and voice in promotional materials.
- Sharing: This content (including your image) will be shared on Social Media platforms (LinkedIn, Facebook, Instagram, YouTube) and with the Official Partners and Sponsors of the event for post-event reporting and marketing.
4. DATA CATEGORIES AND USAGE
We process your data for the following purposes:
- Identity Data (Name, ID Copy, CNP/Passport No): For security screening and printing official airport badges.
- Contact Data (Email, Phone): For technical briefs, emergency updates, and logistical information.
- Professional Data (GitHub/LinkedIn, Skills): To facilitate team matchmaking and mentor support.
- Health Data (Allergies/Dietary): To ensure your safety during on-site catering.
5. DATA SHARING & THIRD PARTIES
Your data will only be shared with:
- Airport Authorities & Police: Solely for security clearance.
- Official Event Partners: Limited to media content (photos/videos) and, where explicit consent is given, your professional profile for recruitment purposes.
- Ticketing/IT Providers: For the technical management of your registration.
6. DATA RETENTION
- ID/Passport Copies: These sensitive files are stored in an encrypted environment and will be permanently deleted from the organizers’ servers within 30 days after the event.
- General Data: Contact and professional info are kept for 3 years for legal and administrative purposes.
- Media Content: Photos and videos are kept indefinitely as part of the event’s historical archive.
7. LEGAL GROUND FOR PROCESSING
In accordance with GDPR Art. 6, we process your data based on:
- Art. 6 (1) (a) Consent: For the collection of media (photos/videos) and marketing communications.
- Art. 6 (1) (b) Contract: Necessary for the performance of the contract (your registration and participation in the Event).
- Art. 6 (1) (c) Legal Obligation: Specifically regarding aviation security laws and mandatory identity verification for airport access.
- Art. 6 (1) (f) Legitimate Interest: For the administration, security of the computer systems, and safety of the Event platform.
8. RIGHTS OF THE DATA SUBJECT
As a data subject, you hold the following rights under GDPR:
- Right to be Informed: To know how your data is used (as detailed in this policy).
- Right of Access: To obtain confirmation and a copy of the data we process.
- Right to Rectification: To have inaccurate or incomplete data corrected.
- Right to Restrict Processing: To limit how we use your data in specific circumstances.
- Right to Object: To object to processing based on legitimate interests or for direct marketing.
- Right to Lodge a Complaint: With the National Supervisory Authority for Personal Data Processing (ANSPDCP).
9. FINAL PROVISIONS
MITO and Oradea Airport reserve the right to modify or update this Privacy Policy at any time. Any significant changes that affect your rights will be signaled via visible indications on the platform or via email.
Regardless of the extent of changes, the responsibility to check the content of the policy to stay up to date lies entirely with the user. Accessing the Event platform or completing the registration represents your full acceptance of these terms.