Privacy Policy

PERSONAL DATA PROCESSING POLICY

In accordance with the Regulation (EU) 2016/679 on the protection of personal data (“GDPR”), St. Thecla Foundation respects and protects the personal data of all individuals who interact with us. This policy explains how we collect, use and protect your personal data and the rights you have in relation to the processing of that data.

  1. WHO ARE WE?

St. Thecla Foundation is a non-profit organization based in Romania, aiming to support people in need through various social, educational and charitable activities. You can contact us at:

  • Address: Șoseaua Fabrica de Glucoza 13, Bucharest, Sector 2
  • Phone: Secretary General Ciorobea Constantin: 0742675052; Administrative Secretary Petre Gabriela Cristina: 0736757217;
  • E-mail: fundatiasfantatecla@gmail.com

If you have any questions about data protection, you can contact us by the means mentioned above.

  1. WHAT IS PERSONAL DATA?

Personal data is any information that directly or indirectly identifies a natural person, such as name, address, telephone number, e-mail address, financial data, health data or other specific information.

  1. WHAT DATA DO WE PROCESS?

St. Thecla Foundation collects and processes personal data strictly necessary for the following activities:

  • Contact forms: name, surname, phone, e-mail, message.
  • Donations and sponsorships: name, surname, e-mail, bank details for payment processing, transaction details.
  • Volunteering and employment: CV, full name, contact details, professional experience, letters of recommendation.
  • Recipients of support: Information about the personal situation of the beneficiaries, including health status, financial status, other details relevant to the provision of appropriate support.
  • Organized events: data required for registration and participation in our charity events, including images and videos taken at these events.
  1. HOW DO WE COLLECT AND PROCESS DATA?

Data is collected by:

  • Online and physical forms
  • E-mail and phone
  • Direct meetings
  • Donation and crowdfunding platforms

All data are used exclusively for the stated purposes and are not shared with third parties without the consent of the data subjects, unless required by law.

  1. HOW LONG DO WE KEEP YOUR DATA?

The data retention period depends on the type of data and the purpose for which it is collected:

  • Donations and sponsorships: data is kept in accordance with legal accounting and tax obligations for 10 years.
  • Volunteers and employees: Data is kept for the duration of the collaboration and for up to 5 years after its termination.
  • Beneficiaries of aid: Data are kept for the duration necessary for the provision of the support and in accordance with reporting obligations.
  • Events and media materials: images and videos may be kept indefinitely for the promotion of the Foundation’s activities, with the possibility to request their deletion.
  1. WITH WHOM DO WE SHARE DATA?

Your data is not sold or used for commercial purposes. In certain cases, data may be shared with:

  • Public authorities, if there is a legal obligation.
  • Contractual partners, such as donation payment processors or IT service providers who help us manage the Foundation’s work.
  • Other NGO partners or social institutions, when working together to provide appropriate support to beneficiaries.
  1. DATA TRANSFER OUTSIDE THE EU

If it is necessary to transfer data outside the European Union, this will be done in strict compliance with GDPR legislation, using appropriate safeguards such as standard contractual clauses approved by the European Commission.

  1. SECURITY MEASURES

Saint Thecla Foundation applies technical and organizational measures for data protection against:

  • Unauthorized access
  • Loss or theft
  • Accidental destruction
  • Alteration or misuse

Access to data is restricted to authorized persons only, and all our processes comply with the security standards required by law.

  1. YOUR RIGHTS

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request information about the data we hold about you.
  • Right to rectification: You can ask for incorrect or incomplete data to be corrected.
  • Right to erasure (“right to be forgotten”): You can request deletion of data when it is no longer needed.
  • Right to restriction of processing: you can request to restrict the use of your data under certain conditions.
  • Right to data portability: you can request the transfer of your data to another controller.
  • Right to lodge a complaint: If you believe that your data is being processed unlawfully, you can lodge a complaint with the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro).

To exercise these rights, you can contact us at fundatiasfantatecla@gmail.com.

  1. POLICY UPDATE

This policy may be amended periodically to reflect legislative or operational changes. We encourage you to check this page periodically for updates.