Last updated: 27 October 2026
Who is responsible for the data
The Romanian Airline Companies Association “Carpathia” (ACAR “Carpathia”) is the controller of data processed to administer this website and correspondence addressed to the association. You can contact us at contact@acar.aero or at 9B Șos. Fabrica de Glucoză, CC, District 2, Bucharest, Romania.
Technical access data
When you access the website, the server and technical providers may record your IP address, the date and time of access, the page or resource requested, browser type and error information. This data is used to provide and secure the service, diagnose problems and prevent abuse, based on the legitimate interest in keeping the website operational and secure.
Messages you send us
If you contact us, we use the information you provide, such as your name, email address and message, to handle your request and correspondence. Depending on the subject, the basis may be our legitimate interest in responding to enquiries, taking steps at your request before entering into a contract, or compliance with a legal obligation.
The contact form prepares a message in your email application. The message is transmitted when you send it from that application. You do not need to provide sensitive data for an ordinary enquiry.
External map and weather services
To display maps, your browser downloads map elements from OpenStreetMap. For weather in Bucharest, your browser requests data from Open-Meteo. These requests may transmit your IP address and technical browser information to the provider. Aircraft information and airport weather observations are also obtained through external services, including adsb.lol, ADSBDB and AviationWeather.gov; requests made by ACAR’s server do not require the transmission of data from your messages.
You can consult the OpenStreetMap Foundation privacy policy and Open-Meteo’s information. Links to social networks and other websites open services with their own privacy policies.
Cookies and visitor statistics
With your consent, we use Google Analytics 4 to understand visits, pages read, traffic sources, device types and approximate country or city. Location is estimated from technical information, including the IP address, and may be inaccurate. Google processes the data to provide statistics. We do not enable Google Signals, advertising personalisation or collection of information entered into forms, and we do not send names, email addresses or message contents to Analytics.
The Google Analytics code and its cookies are loaded only after you select “Accept statistics”. Declining or closing the notice does not prevent use of the website and does not enable measurement. You can change or withdraw consent at any time using “Statistics preferences” in the page footer. Withdrawal stops future measurement and removes Analytics cookies from the browser; it does not automatically erase previously processed data.
Your choice is stored locally in your browser for 180 days. After acceptance, the _ga and _ga_… cookies use pseudonymous identifiers, with a configured lifetime of no more than 180 days. The property’s standard settings retain event data for 2 months and user data for up to 14 months, resetting on new activity. These limits do not apply to most aggregated reports. See how Google uses information from partner sites and the Google data processing terms.
The website does not include marketing pixels or advertising code installed by ACAR. Photographs, fonts and the main video are hosted with the website. Hosting or security infrastructure may use technical mechanisms necessary to provide and secure the service. The administration area uses browser session storage for authentication and is excluded from Google Analytics. Continued browsing is not treated as consent to optional technologies.
Who may receive data
Data may be accessed by authorised people within the association and by providers of hosting, email, maintenance or security, as necessary for the service. Data may be disclosed to authorities where there is a legal obligation. ACAR does not sell personal data received through correspondence.
External services may use infrastructure in other countries. Any transfer by ACAR outside the European Economic Area is subject to the requirements and safeguards of data protection law. For information about the recipients and safeguards applicable to a particular processing activity, contact us using the details above.
How long data is retained
Correspondence data is retained for as long as necessary to resolve the request and meet any legal obligations or establish, exercise or defend legal claims. The need for retention is assessed according to the purpose of the message, the nature of the relationship and applicable legal time limits. Technical data is retained to the extent necessary for the operation and security of the service. You may request information about the period or criteria applicable to your situation.
Your rights
Subject to Regulation (EU) 2016/679, you may request access, rectification, erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal.
Send requests to contact@acar.aero. You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing. The website does not use automated decisions or profiling that produce legal effects on visitors.
Updates
This notice may be updated if the website’s functions or data processing practices change. The version date is displayed on this page.