Privacy Policy
Last updated: September 2026
ISIAS respects the privacy of your personal data and processes it in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
1. Data controller
Controller: the Institute for Intelligence Studies and Strategic Analysis (ISIAS), based in Bucharest, Romania. For any request regarding your personal data, contact us at contact@isias.ro.
2. What data we collect and why
Contact form: name, email, subject, message — to respond to your inquiry.
Course enrollment: name, email, phone, chosen course — to follow up with you about your enrollment.
Event registration: first name, last name, phone, institution/company, email — to organize the event and generate the QR access code, also emailed to you.
Newsletter: email address — to send you news about courses and events, only with your explicit consent at sign-up.
Online Platform account: name, email, role (student/teacher/partner) — to grant access to courses, modules, and materials. Tied to your account, we also store: lesson progress, quiz results, files you upload for assignments (visible only to you and the course's teacher), issued certificates, and any lesson questions/answers you post.
Course review: the rating (1-5) and optional comment you leave on an Online Platform course — shown publicly next to the course, without your name or email.
Event satisfaction survey: anonymous — we don't collect your name or email when you submit it, only the rating and an optional comment.
Event photo/video gallery: photos taken at ISIAS events may later be published in that event's gallery on the site. If you'd rather not appear in a published photo, email us at contact@isias.ro and we'll remove it.
Administrative activity log (internal use): for ISIAS staff with admin-panel access, we record the administrative actions taken (email, action type, date) — used solely for internal security auditing, not publicly visible, and unrelated to site visitors.
3. Legal basis for processing
We process data either based on your consent (e.g. newsletter sign-up), for steps taken at your request prior to a possible enrollment (e.g. contact form, course/event registration), or based on ISIAS's legitimate interest in responding to inquiries and organizing its educational activities.
4. Who we share data with
Your data is never sold and is not used for third-party marketing. It is accessible to the ISIAS team and to the technical providers strictly necessary to run the site: application hosting (Hostinger), database (Supabase, servers in the European Union), and email delivery (ISIAS's own SMTP server). These providers process data solely on our behalf, under their own contracts and privacy policies.
5. How long we keep data
We keep data for as long as necessary for the purpose it was collected (e.g. the duration of a course/program plus a reasonable archiving period), or until you withdraw consent (e.g. newsletter unsubscribe), except where the law requires a minimum retention period.
6. Your rights
Under GDPR, you have the right to access your data, rectify it, request erasure ("the right to be forgotten"), restrict processing, request data portability, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
You can exercise these rights by writing to contact@isias.ro. You also have the right to lodge a complaint with Romania's data protection authority (ANSPDCP), www.dataprotection.ro.
7. Data security
We apply reasonable technical and organizational measures to protect your data (encrypted HTTPS connections, restricted access to the admin panel, encrypted passwords/credentials). No system is 100% infallible, and ISIAS acts promptly if a security incident is identified.
8. Cookies
This site uses a minimal set of strictly necessary cookies. See the Cookie Policy for full details.
