NAYA Events

Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Arabesque Events S.R.L. ("NAYA Events", "we", "us") collects, uses and protects your personal data when you visit naya.events (the "Website") or otherwise interact with us, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

Data Controller

The data controller is Arabesque Events S.R.L., registered office at Str. Vântului nr. 4-6, Clădirea Scara 1, Etaj 3, Ap. 23, Sector 3, București, CUI 54613292. Contact: hello@naya.events.

What Data We Collect

  • Email address, when you join our access list (newsletter).
  • Any information you send us directly, e.g. via email, WhatsApp or social media, for table, VIP, press or partnership enquiries.
  • Technical data such as IP address, browser type and device information, collected automatically via cookies (see our Cookie Policy).
  • Interaction data with our advertising (e.g. Meta Pixel), where enabled and where you have given consent.

We do not collect or store payment card data. All ticket payments are processed directly by our ticketing partner, livetickets.ro, under its own privacy policy.

How We Use Your Data

  • To send you updates about upcoming NAYA Events Chapters, if you have subscribed to our access list.
  • To respond to booking, table, VIP, press or partnership enquiries.
  • To operate, secure, and improve the Website.
  • To measure the performance of our marketing, where you have consented to analytics or advertising cookies.

Legal Basis for Processing

We process your data based on: your consent (e.g. newsletter sign-up, marketing cookies); our legitimate interest (e.g. responding to enquiries, keeping the Website secure); and, where applicable, the performance of a contract.

Who We Share Data With

  • MailerLite, our email marketing platform, which processes access-list subscriber data on our behalf.
  • livetickets.ro, our ticketing partner, for ticket sales, governed by their own privacy policy.
  • Sanity, our content management provider, which hosts website content.
  • Cloudflare, our hosting and security provider.
  • Meta (Facebook/Instagram), if and when advertising pixels are enabled, subject to your cookie consent.

We do not sell your personal data to third parties.

International Transfers

Some of our providers (e.g. MailerLite, Meta) may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Data Retention

We retain your data only as long as necessary for the purposes described above — for example, newsletter data until you unsubscribe, and enquiry correspondence for a reasonable period to handle your request and any related follow-up.

Your Rights

Under GDPR, you have the right to: access your data; rectify inaccurate data; request erasure; restrict or object to processing; request data portability; and withdraw consent at any time (e.g. by unsubscribing from our newsletter). To exercise these rights, contact us at hello@naya.events. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at dataprotection.ro.

Photography & Image Rights

As described in our Terms & Conditions, attending a NAYA Events event may involve being photographed or filmed for promotional purposes. If you wish to object to the future use of an image featuring you, contact us at hello@naya.events.

Children's Privacy

Our events and Website are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors.

Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated revision date above.

Contact

Questions about this Privacy Policy can be sent to hello@naya.events.