Agreement Regarding the Processing and Sharing of Personal Data Campus2Work: The Festival of Futures

Agreement on the Processing and Sharing of Personal Data Campus2Work — The Festival of Futures

Last updated: 31.07.2026

This document (the “Agreement”) applies exclusively to your registration and participation in the Campus2Work – The Festival of Futures event (October 22, 2026) and supplements the Personal Data Processing Policy and the Terms and Conditions of Undelucram.ro. In the event of any inconsistency on matters specific to the event, this Agreement shall prevail.

1. Who processes your data (the Controller)

UNDELUCRAM S.R.L., a Romanian legal entity, with its registered office in Cluj-Napoca, Str. Regele Ferdinand no. 22-26, Centrul Comercial Central, 3rd floor (correspondence address: B-dul Iuliu Maniu 6L, Campus 6.1, 3rd floor, Sector 6, Bucharest), registered with the Trade Registry under no. J12/2388/2019, tax identification number 37266398 (the “Company” / the “Organizer”).

For any question regarding your personal data: [email protected].

2. What data we process, for what purpose, and on what basis

Specific purpose of the event: to connect you with Campus2Work’s partner companies, by making your profile available to them for recruitment, direct contact, and employer branding activities.

There are two distinct situations, depending on how much of the form you complete:

2.1. Mini-profile (Step 1 – Registration)

If you complete the registration form, we create a mini-profile which may contain: first and last name, e-mail address, phone number, city, university, field of study, year of study, selected skills, and previously declared experience.

→ With your explicit consent, this mini-profile is made available to the event’s partner companies.

2.2. CV (Step 3 – Uploading your CV)

If you choose to upload a CV, we make your full CV available to partner companies, together with all the data it contains.

→ This sharing takes place only if you give separate consent at the time of uploading your CV. You may take part in the event and benefit from the mini-profile without uploading a CV.

Legal basis for both situations: your explicit, specific, and granular consent — Art. 6(1)(a) of the GDPR. You may withdraw it at any time (see Section 6).

CV and sensitive data: please do not include sensitive data in your CV (e.g., data concerning health, ethnic origin, religious/political beliefs, trade union membership). If you nevertheless choose to include such data, by checking the consent box you explicitly consent to the sharing of such data as well — Art. 9(2)(a) GDPR.

2.3. Event-related communications

The contact details in the registration form (email, phone number) are used by the Organizer to send you, by email, SMS and/or WhatsApp, communications strictly related to Campus2Work: registration confirmation, reminders, schedule changes, information about workshops and the raffle, and a follow-up message after the event.

Legal basis: performance of your event registration, Article 6(1)(b) GDPR.

You may object to receiving these communications by writing to [email protected], please note that some information is essential for the proper conduct of your participation in the event.

These communications are separate from the consent to share data with partner companies and do not depend on it.

2.4. Photography and Filming of the Event

During the Campus2Work event, photographs and video recordings will be made in order to document the event and promote future editions, on the Organizer’s communication channels (website, social media, presentation materials, press).

Legal basis: the Organizer’s legitimate interest in documenting and promoting the event, Article 6(1)(f) of the GDPR.

The images will generally capture the overall atmosphere of the event. If you do not want your image to be used, you can let us know when you register for the event, by telling the organizing team present at the venue, or afterwards by writing to [email protected], and the images in which you appear will be removed.

3. To whom we transmit the data (Recipients)

Data is shared with the partner companies of the Campus2Work 2026 event:

Role of the parties: From the moment of transmission, each partner company becomes an independent controller with respect to the data received and is solely responsible for how it subsequently processes that data (storage, contact, assessment of applications), in accordance with its own privacy policy. The Organizer does not control, and is not responsible for, the processing carried out by partner companies after transmission.

The Organizer’s processors (hosting, security, and analytics providers) are those described in Section 4.1 of the general Policy.

All data is processed within the European Union or in accordance with European Union law.

4. How long we retain the data

The Organizer retains event-related data for 12 months from the date of the event, after which it is deleted or anonymized.
Partner companies retain the data received in accordance with their own retention policies, as independent controllers.

5. Nature of the consent

Giving consent to share data with partner companies is optional.

6. Your rights

You have the following rights, which you may exercise by writing to [email protected]:

Access to your data and information about the processing;
Rectification of inaccurate data;
Erasure (“the right to be forgotten”);
Withdrawal of consent at any time — withdrawal does not affect sharing already carried out before the withdrawal. For data already transmitted to a partner company, you may contact that company directly, as it holds the data as an independent controller;
Restriction of processing;
Portability of your data;
Objection to processing;