Privacy notice

1. Who is responsible for your data

SC Patratul Rosu SRL, which operates the Future Frames project, is the controller of the data used to administer and assess applications.

Contact: info@futureframes.ro.

For the “Hypnosis for Storytellers” workshop, Liviu Tipurita is a separate controller for his own use of applications and for health information. He is registered with the UK Information Commissioner’s Office under no. ZA361795.

Contact for this workshop: liviu.tipurita@futureframes.ro. His own privacy notice: retreatsincrete.com/course-privacy-notice.

2. What information we collect

• identity and contact details: name, age, city, country, email address and phone number;
• professional and creative information: field, experience, biography and portfolio;
• answers about motivation, projects, availability and accessibility needs;
• choices and consents expressed in the form;
• for the hypnosis workshop, health information supplied in section 5;
• limited technical data needed to secure the site, such as IP address, request time and error information.

The information is collected directly from the person completing the form.

3. Why we use your data and our legal bases

• to receive, assess and select applications and communicate the result — steps taken at the applicant’s request and our legitimate interest in organising the selection;
• to organise the workshop and send administrative communications to selected participants — performance of the participation arrangement;
• for health information — the explicit consent given separately in the form;
• for news about future workshops — only where the person has separately chosen this option;
• to prevent abuse, secure the form and diagnose errors — our legitimate interest in protecting the site and applications.

4. How health information is protected

Section 5 of the hypnosis form is encrypted in the browser before transmission using Liviu Tipurita’s public key. It is sent separately from the rest of the application and can only be opened with the private key in his possession. It does not appear in the general application email and is not shared with the Future Frames selection team.

5. Who may receive the data

Depending on the purpose, access is limited to:

• Future Frames team members involved in selection and organisation;
• workshop leads, only for information needed to select participants and run the workshops;
• Liviu Tipurita, including exclusive access to the encrypted health section;
• Netlify, for site hosting and technical request processing;
• Brevo, for transactional email delivery;
• the providers of Future Frames email accounts, for delivery and storage of received messages.

We do not sell personal data or use it for behavioural advertising.

6. International transfers

Some technical providers may involve processing outside the European Economic Area. Where this occurs, transfers rely on an adequacy decision or GDPR-recognised safeguards such as Standard Contractual Clauses.

7. How long we keep the data

• unsuccessful applications: no longer than one year after the selection decision is communicated;
• selected participants’ applications: no longer than three years after the workshop ends;
• health information: only for as long as needed for selection and the safe running of the workshop, after which it is deleted;
• details used for future workshop news: up to three years or until consent is withdrawn;
• technical logs: according to the short retention periods set by our infrastructure providers.

Information may be retained for longer only where required by law or needed to establish, exercise or defend a legal claim.

8. Required fields and decisions

Fields marked * are needed to assess an application. If they are not completed, the form cannot be submitted or the application cannot be assessed. The option to receive future workshop news is voluntary.

We do not use automated decision-making for selection and do not carry out automated profiling.

9. Your rights

Subject to the conditions in the GDPR, you may request:

• access to your data and a copy of it;
• correction of inaccurate or incomplete data;
• erasure or restriction of processing;
• data portability, where applicable;
• objection to processing based on legitimate interests;
• withdrawal of consent at any time, without affecting processing carried out before withdrawal.

To exercise these rights, write to info@futureframes.ro; for data managed by Liviu Tipurita, write to liviu.tipurita@futureframes.ro.

If you believe your rights have not been respected, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

10. Cookies and traffic measurement

The site currently uses no marketing cookies, advertising pixels or behavioural analytics tools. The hosting provider may process technical data strictly necessary to operate and secure the service.