1. Introduction
This Privacy Policy explains how Asociația MUSIC FOR PEACE ("Data Controller," "we," "us"), as the operator of the Platform echoeslive.eu and coordinator of the ECHOES project, collects, uses, stores, and protects your personal data.
We are committed to protecting your privacy in compliance with Regulation (EU) 2016/679 - the General Data Protection Regulation ("GDPR") - and applicable Romanian data protection legislation.
Data Controller:
Asociația MUSIC FOR PEACE
Int. Gheorghe Pop de Băsești, Nr. 3, Ap. 1, Sector 2, București, România
CUI: 48846382
Email: info@echoeslive.eu
2. Personal Data We Collect
We collect different categories of personal data depending on how you interact with the Platform:
2.1. Browsing the Platform
When you visit the Platform without registering or submitting information, we may collect:
- IP address (anonymised where technically feasible)
- Browser type and version
- Device type and operating system
- Pages visited and time of access
- Referring website
This data is collected through essential and analytics cookies (see Section 8 and the Cookie Policy at https://echoeslive.eu/cookie-settings).
2.2. User Registration
When you create an account, we collect:
- Full name
- Email address
- Country of residence
- Password (stored in encrypted form)
- Organisation or affiliation (optional)
2.3. Newsletter Subscription
When you subscribe to the ECHOES newsletter, we collect:
- Email address
- Name (optional)
2.4. Contact Forms
When you use the contact form, we collect:
- Name
- Email address
- Subject and message content
- Any additional information you voluntarily provide
2.5. Open Call Applications
When you submit an Open Call application, we collect:
- Full name, date of birth, nationality
- Country of residence, contact details (email, phone)
- Artist biography, portfolio links
- Motivation and artistic concept statement
- Unreleased audio work submission
- Any additional materials required by the specific Open Call guidelines
3. Purposes and Legal Basis for Processing
| Purpose | Data categories | Legal basis (GDPR) |
| Platform operation and security | Browsing data | Legitimate interest (Art. 6(1)(f)) |
| User account management | Registration data | Contract performance (Art. 6(1)(b)) |
| Newsletter communications | Email, name | Consent (Art. 6(1)(a)) |
| Responding to enquiries | Contact form data | Legitimate interest (Art. 6(1)(f)) |
| Open Call evaluation and selection | Application data | Contract performance (Art. 6(1)(b)) and consent (Art. 6(1)(a)) |
| Project reporting to the EC | Aggregated/anonymised data | Legal obligation (Art. 6(1)(c)) |
| Communication with selected artists | Contact details | Contract performance (Art. 6(1)(b)) |
4. Data Sharing and Recipients
4.1. Your personal data may be shared with the following categories of recipients, solely for the purposes described above:
- ECHOES consortium partners (REEA, DAC, AthensArts Collective, Viitor Plus & Adoptă un Copac, Asociația Cadrelor Didactice de Etnie Română din Regiunea Cernăuți) - for project coordination, Open Call evaluation, and event organisation
- Open Call selection committee members - for the evaluation of applications (subject to confidentiality agreements)
- Hosting provider - SC Reea SRL (CUI RO 10966500), with servers operated by Hetzner Online GmbH (Germany, EU), for the technical operation of the Platform
- Email service provider - [INSERT EMAIL SERVICE PROVIDER], for newsletter delivery
- European Commission / EACEA - aggregated and anonymised project data as required by the Creative Europe grant agreement
4.2. We do not sell, rent, or trade your personal data to third parties for commercial purposes.
4.3. The Platform is hosted within the EU (Hetzner Online GmbH, Germany). However, the use of Google Analytics involves the transfer of data to servers operated by Google LLC in the United States. This transfer is carried out on the basis of the EU-US Data Privacy Framework and Google's compliance with Standard Contractual Clauses, in accordance with GDPR Chapter V. Google Analytics is activated only with your explicit consent via the cookie consent banner.
4.4. Note regarding the Ukrainian partner: Asociația Cadrelor Didactice de Etnie Română din Regiunea Cernăuți is based in Ukraine, which is outside the EEA. Any personal data shared with this partner for project coordination purposes will be subject to appropriate safeguards, including Standard Contractual Clauses or equivalent protection mechanisms, in compliance with GDPR requirements.
5. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected:
| Data category | Retention period |
| Browsing/analytics data | 14 months from collection |
| User account data | Duration of account + 12 months after deletion |
| Newsletter subscription data | Until unsubscribe + 30 days |
| Contact form data | 12 months from enquiry date |
| Open Call application data | Project duration + 5 years (Creative Europe requirement) |
| Selected artist data | Project duration + 5 years |
After the applicable retention period, personal data will be securely deleted or irreversibly anonymised.
6. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15) - to obtain confirmation of whether your data is being processed and to receive a copy
- Right to rectification (Art. 16) - to have inaccurate data corrected
- Right to erasure (Art. 17) - to request deletion of your data, subject to legal retention obligations
- Right to restriction of processing (Art. 18) - to request that processing be limited in certain circumstances
- Right to data portability (Art. 20) - to receive your data in a structured, commonly used format
- Right to object (Art. 21) - to object to processing based on legitimate interest
- Right to withdraw consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at info@echoeslive.eu. We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, România
Website: www.dataprotection.ro
Email: anspdcp@dataprotection.ro
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
- SSL/TLS encryption for all data transmitted through the Platform
- Encrypted storage of passwords and sensitive data
- Access controls limiting data access to authorised personnel only
- Regular security reviews and updates
- Confidentiality agreements with all persons who have access to personal data
While we take reasonable precautions, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security of your data.
8. Cookies
The Platform uses cookies to ensure proper functionality and to analyse usage patterns. For a detailed description of all cookies used on the Platform, their purposes, durations, and your consent options, please refer to our Cookie Policy available at echoeslive.eu/cookie-policy.
We do not use advertising or tracking cookies. We do not engage in profiling or automated decision-making. For analytics, we use Google Analytics with IP anonymisation enabled and a Data Processing Agreement in place with Google. Analytics cookies are activated only with your explicit consent via the cookie consent banner.
9. Children's Data
The Platform is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete it promptly.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform's functionality, or legal requirements. Changes will be published on the Platform with an updated "Last updated" date. For material changes, we will notify registered users via email.
11. Contact
For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact:
Asociația MUSIC FOR PEACE
Int. Gheorghe Pop de Băsești, Nr. 3, Ap. 1, Sector 2, București, România
CUI: 48846382
Email: info@echoeslive.eu
Website: https://www.echoeslive.eu
Last updated: 23.03.2026