Last updated: 11 July 2026
This Privacy Policy explains how personal data is collected and used when you visit sustainabilityembassy.eu, contact us, submit our contact form or interact with the services available through this website.
1. Who is responsible for your data
Sustainability Embassy Europe is a public-interest platform developed and operated by:
Asociația Coaliția România Sustenabilă
Str. Avram Iancu 16, Corp A
024015 Bucharest, Romania
Tax identification number: 34914193
Registered in the Romanian Register of Associations and Foundations under number 20427/A/2015
Asociația Coaliția România Sustenabilă is the data controller for the personal data described in this Privacy Policy.
For questions about privacy or the use of your personal data, contact us at:
contact [at] sustainabilityembassy [dot] eu
2. What personal data we collect
Information submitted through the contact form
When you use our contact form, we may collect:
- your full name;
- your email address;
- the organisation you represent, if you choose to provide it;
- your reason for contacting us;
- the content of your message;
- the date and time of your submission.
Please do not include sensitive personal data or confidential information in the message unless it is strictly necessary.
Information sent by email
If you contact us directly by email, we process your email address, the content of your message and any other information you voluntarily provide.
Website usage and analytics data
When analytics consent is granted, we may collect information about how visitors use the website, including:
- pages visited;
- approximate location, such as country or city;
- device and browser type;
- operating system;
- screen size;
- referral source;
- interactions with website content;
- date, time and approximate duration of the visit.
We do not use Google Analytics for personalised advertising, remarketing or the creation of advertising profiles.
Google Analytics does not log or store individual IP addresses from users in the European Union, Switzerland or the United Kingdom. IP addresses may be used temporarily to determine approximate location before being discarded.
Technical and security data
Our hosting and security systems may process technical information such as IP address, browser information, request time, requested pages and error or security logs. This information is used to maintain the security, availability and correct functioning of the website.
Consent preferences
When you interact with the cookie banner, we store your consent choices so that the website can remember whether you accepted or declined particular categories of cookies.
3. Why we use personal data
We process personal data for the following purposes:
Responding to enquiries
We use contact-form and email information to answer questions, respond to media or speaking requests, explore partnerships, discuss organisational support and manage other communications initiated by you.
The legal basis is our legitimate interest in responding to enquiries and maintaining professional communications. Where your request concerns a possible agreement or collaboration, processing may also be necessary to take steps at your request before entering into an agreement.
Operating and protecting the website
Technical data may be processed to ensure that the website works correctly, prevent abuse, investigate errors and maintain website security.
The legal basis is our legitimate interest in operating and protecting our website.
Understanding website use
We use Google Analytics 4 to understand how visitors use the website and to improve its content, navigation and structure.
Analytics data is processed only after the visitor has provided the relevant consent through the cookie banner. You may refuse or withdraw this consent at any time.
Meeting legal obligations
We may process or retain information where necessary to comply with accounting, tax, regulatory or other legal obligations, or to establish, exercise or defend legal claims.
4. Contact form and Tally
Our contact form is provided through Tally BV, a company based in Belgium.
When you open and submit the form, the information you provide is processed through Tally on our behalf. Tally states that form data is encrypted in transit and at rest and stored in Europe.
Tally acts as a service provider and data processor for the form information we collect. You can read more in Tally’s Privacy Policy and GDPR information.
Submitting the contact form does not subscribe you to a newsletter or marketing communications.
5. Google Analytics and Site Kit
We use Google Analytics 4, implemented through Site Kit by Google, to obtain aggregated information about website usage.
Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Analytics may process information such as website interactions, device and browser characteristics, approximate location and online identifiers. Google Analytics may use cookies or similar technologies only in accordance with the consent choices communicated through our cookie-management system.
Analytics cookies and related data collection are activated only where the required consent has been provided. Refusing analytics cookies does not prevent access to the website or the contact form.
You can withdraw or modify your choice at any time by selecting Manage Consent in the website footer.
More information is available in Google’s Privacy Policy and its information about Google Analytics privacy controls.
6. Cookies and Complianz
We use Complianz to display the cookie banner, record consent preferences and control the use of optional cookies.
The website may use:
- functional cookies, necessary for the website and consent-management system to operate;
- statistics cookies, used for Google Analytics only after consent.
We do not currently use advertising, remarketing or personalised marketing cookies.
You can accept, refuse or change your cookie preferences at any time through the Manage Consent link displayed in the website footer.
Additional details about individual cookies, their providers and retention periods are available through the cookie banner and the website’s Cookie Policy.
7. Who may receive personal data
Personal data may be accessed or processed, where necessary, by:
- authorised members of our team;
- website hosting and technical-maintenance providers;
- email and communication service providers;
- Tally BV, for contact-form submissions;
- Google Ireland Limited and relevant Google group companies, where analytics consent has been granted;
- professional advisers, auditors or legal representatives where necessary;
- public authorities where disclosure is required by law.
We do not sell, rent or trade personal data.
8. International data transfers
Tally states that its form data is stored in Europe.
Some Google services may involve processing outside the European Economic Area. Where personal data is transferred internationally, Google states that it uses recognised legal safeguards and applicable data-transfer frameworks.
Information about Google’s international data practices is available in Google’s Privacy Policy.
9. How long we keep personal data
We retain personal data only for as long as necessary for the purposes for which it was collected.
As a general rule:
- contact-form submissions and ordinary enquiries may be retained for up to 24 months after the last relevant communication;
- correspondence connected to an active partnership, sponsorship, donation, agreement or legal matter may be retained for the duration of that relationship and for any additional period required by law;
- Google Analytics user-level and event-level data may be retained for up to 14 months;
- consent preferences may be stored for up to 12 months, after which consent may be requested again;
- technical and security logs are retained only for the period reasonably necessary to ensure website security, investigate incidents and meet legal obligations.
Data may be retained for a longer period where required by law or necessary for the establishment, exercise or defence of legal claims.
10. Your data-protection rights
Subject to the conditions established by applicable law, you may have the right to:
- receive information about how your personal data is used;
- request access to your personal data;
- request the correction of inaccurate or incomplete data;
- request the deletion of your data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain data in a portable format;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a data-protection authority.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact:
contact [at] sustainabilityembassy [dot] eu
We may need to request information necessary to verify your identity before responding to a request.
11. Complaints
If you believe that your personal data has been processed unlawfully, you may lodge a complaint with the Romanian supervisory authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
You also have the right to contact the supervisory authority in the country where you live or work.
12. Automated decisions
We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.
13. External websites and services
The website contains links to external services, including Tally, Cal.com, Substack, LinkedIn and websites operated by Ambasada Sustenabilității în România.
These services operate under their own terms and privacy policies. We recommend reviewing their privacy information before providing personal data directly to them.
14. Data security
We use reasonable organisational and technical measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.
However, no website or method of electronic transmission can be guaranteed to be completely secure. Please avoid sending unnecessary sensitive or confidential information through the contact form or ordinary email.
15. Changes to this policy
We may update this Privacy Policy when the website, its services or the applicable legal requirements change.
The latest version will always be published on this page, together with the date of the most recent update.