Privacy Policy

The Institute for Behavioral Studies & Biometry Research (ICSCB) is a research organization headquartered in Bucharest, Romania. You can contact us at contact@icscb.org. This privacy policy applies to the icscb.org website and all services offered through it.

**Contact form:** When you fill out the contact form, we collect the name, email address, organization, and project details you voluntarily provide. This data is used exclusively to respond to your request. **Navigation data:** Like any website, our servers may automatically record your IP address, browser type, pages visited, and access time. This data is used strictly for technical and security purposes. **Behavioral Mirror:** The facial reading tool processes camera imagery exclusively locally, in your browser. No image, no video recording, and no biometric data is sent to our servers. All processing takes place on your device via WebAssembly.

We process your data based on: — Your **consent**, when you voluntarily complete the contact form — The **legitimate interest** of ICSCB in operating and securing the site — **Legal obligations** applicable under Romanian and European law

Contact form data is retained for a maximum of 24 months from the last interaction or until deletion is requested by you. Technical server data (logs) is retained for a maximum of 90 days.

We do not sell, rent, or transfer your personal data to third parties for commercial purposes. Data may be accessed by technical service providers (hosting, email) acting as joint or sub-processors under GDPR, who have contractual confidentiality obligations to ICSCB.

The icscb.org website does not use tracking or advertising cookies. Strictly necessary technical cookies may be used for website functionality (session, preferences). We do not use Google Analytics or other third-party tracking platforms.

In accordance with Regulation (EU) 2016/679, you have the right to: — **Access** — request a copy of the data we hold about you — **Rectification** — correct inaccurate data — **Erasure** — request data deletion ("right to be forgotten") — **Restriction** — limit how we process your data — **Portability** — receive data in a structured, commonly used format — **Objection** — object to processing based on legitimate interest To exercise these rights, contact us at: contact@icscb.org You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP): www.dataprotection.ro

We apply appropriate technical and organizational measures to protect your data, including HTTPS transmission, restricted data access, and periodic security reviews.

We may periodically update this privacy policy. The updated version will be published on this page with the date of last revision. We recommend consulting it periodically.