We collect information you provide directly to us and information we obtain automatically when you use our service:

Personal Information:

• Email address and name when you register
• Profile information you choose to provide
• Communication preferences

Automatically Collected Information:

• Location data when scanning QR codes (with your permission)
• Device information and browser type
• Usage patterns and game progress
• IP address and access times

We use the information we collect to:

• Provide and maintain the BIAF 2025 Digital Treasure Hunt service
• Track your game progress and achievements
• Verify QR code scans and award points
• Send you important updates about the festival
• Improve our service and user experience
• Prevent fraud and ensure fair play
• Comply with legal obligations

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

• Service Providers: We may share information with trusted service providers who assist us in operating our platform
• Legal Requirements: We may disclose information when required by law or to protect our rights
• Festival Partners: Aggregated, non-personal data may be shared with festival partners for promotional purposes
• Leaderboards: Your username and scores may be displayed publicly on leaderboards (you can opt out)

Our app may request access to your device's location to:

• Verify that you are at the correct location when scanning QR codes
• Provide location-based content and recommendations
• Enhance your treasure hunt experience

You can disable location services at any time through your device settings, though this may limit some features of the treasure hunt.

We implement appropriate security measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis
• Secure authentication systems

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Under applicable data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing

To exercise these rights, please contact us at privacy@biaf2025.ro

We retain your personal information for as long as necessary to:

• Provide the service during the festival period
• Maintain your game progress and achievements
• Comply with legal obligations
• Resolve disputes and enforce agreements

After the festival concludes, we will retain anonymized data for analytical purposes and delete personal identifiers within 12 months unless you request earlier deletion.

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Your continued use of the service after any changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@biaf2025.ro
Data Protection Officer: dpo@biaf2025.ro
Address: Buzău International Arts Festival
Buzău, Romania