privacy policy

when you donate or become involved in our actions, we process your personal data

here is how, why and for how long we do it

Update: 16^th of November 2020

The confidentiality of personal data is important for Hope and Homes for Children Romania (hereinafter referred to as “The Foundation”), with headquarters at no. 2A Bucharest Blvd., Baia Mare, Maramureș, County, 430281; identified with TIN (Taxpayer Identification Number) 13661594; phone: +40 262 227 419, +40 722 111 442; fax: +40 362 805 544; email: office@hopeandhomes.ro.

This information report on the processing of personal data is regularly updated; whenever we make a change, we will post it on our site, on the page hopeandhomes.ro/gdpr.

The objective of the procedure

In this report, we explain how we process, including collect, use, and protect your personal data when you contact the Foundation (e.g., at events, in person, through written or online media).

This document and the included procedure are intended to inform about the processing of personal data, in application of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council dated April 27th 2016 on the protection of individuals with regard to processing personal data and on the free movement of such data and of the repealing of Directive 95/46 / EC (General Data Protection Regulation “GDPR”).

What categories of personal data do we process?

The personal data we collect (e.g., last name, first name, email, phone, date of birth, etc.) and how we collect it may vary depending on how you interact with the Foundation: e.g., as an existing or potential donor, as a volunteer, as a consultant, as part of a sponsorship / patronage contract, etc., through data we have obtained from a third party in accordance with the law and who is permitted to exchange information with us (for example, through the company with which you have a contractual relationship as an employee/ collaborator/consultant, etc., if we organize an action in collaboration with that company, etc.).

If you participate or confirm participation in actions / events organized by the Foundation and depending on the specifics of each event / action, we may collect the following personal data (hereinafter referred to as “personal data”):

• First and last name (when you donate or participate in events we organise);
• Mailing address (when you participate in events we organize);
• E-mail address (when you donate or participate in events we organize)
• Phone number (when you donate or participate in events we organize);
• Your image your image from the photos taken during the actions / events (when you participate in the events we organize);
• T-shirt size and whether the T-shirt is specific for a man or a woman – exclusively for participating in sports events within Team Hope where the Foundation offers, free of charge, technical t-shirts.

When is it possible to collect personal data?

We may collect personal data when:

• You initiate and/or finalize a donation to the Foundation (online, using bank transfer, via SMS, money order, through recurrent donation or other legal means);
• You register as a participant and/or you participate in the events/actions organized by the Foundation or for the Foundation;
• You subscribe to news bulletins, alerts or other services we provide;
• You contact us through different channels or you request information about our programmes, actions or events we organize or those related to the Foundation;
• You take part in a competition, raffle or a study, for example;
• Visit or surf through the Foundation’s website and, for example, you provide personal data or this is collected according to cookies policies;
• You gave permission to others, such as, for example, our partners, volunteers or associates, as well as to our third-party suppliers or contractors to exchange information about you;
• When your personal data is public and can be used.

Why is it necessary to process this type of data?

We process personal data only for legitimate purposes, such as (non-exhaustive list):

• to provide information on the destination of donations (cash, recurring, in kind, in services, in the form of volunteering, etc.) received from you;
• to identify you through the media in connection with your activities (participating in a sporting event, for example) and interacting with the Foundation;
• for marketing purposes, according to your options.

The processing of personal data is always based either on the execution of contracts signed with the Foundation (e.g., sponsorship, volunteering, patronage, monthly donations, recurring donations through direct debit or monthly SMS or otherwise, etc.), on the need to comply with a legal obligation, our legitimate interest or a public interest or, as the case may be, on your consent, if you have given it.

More precisely, the Foundation processes your personal data as follows:

• to contact you, confirm and register your participation in actions / events organized by the Foundation or for the Foundation:

  Reason: The provision of your personal data is necessary to contact you in order to confirm your presence at actions / events organized by the Foundation or for the Foundation. Refusal to provide data may result in the inability to confirm your access to actions / events.

• to carry out communication / promotion actions of the Foundation:

Reason: The processing of your data for this purpose is based on your consent (Art. 6 para. 1 letter (a) GDPR). Refusal to provide data may result in the Foundation’s inability to inform you of how we have used your support for the Foundation’s programmatic actions (e.g., cash or service / product donations, consulting, volunteering, etc.). You can withdraw this consent at any time.

For how long do we process personal data?

As a general rule, the Foundation will process your personal data to the extent necessary for the processing purposes mentioned above, in compliance with the internal procedures regarding data retention, including the applicable archiving rules of the Foundation. Upon request, you can obtain additional information about the retention periods applicable to your personal data.

If you withdraw your consent for data processing for marketing purposes, the Foundation will cease the processing of your personal data for this purpose, without, however, carrying out the processing carried out based on the consent expressed by you before its withdrawal.

Who do we share personal data with?

In order to fulfil its processing purposes, the Foundation may disclose your data for example to partners, third parties or entities that support the Foundation in carrying out its objectives and / or the activities or events in which you participate or confirm participation, or to central / local public authorities, in the following cases, by way of example:

• for the transmission of commercial marketing communications, including through social media, under the conditions and limitations stipulated by law;
• when the disclosure of personal data is stipulated by law, etc.

To whom can we transfer personal data?

In the context of data processing we do not transfer your personal data outside Romania. In exceptional cases, it is possible to transfer personal data to countries belonging to the European Economic Area (EEA), to states which have been granted an adequate level of protection or to third countries which do not benefit from such a level. It is also possible to transfer personal data to countries other than the above, provided that the transfer is made on the basis of appropriate safeguards.

What are your rights?

Under the conditions stipulated in the legislation on the processing of personal data, as data subjects, you enjoy the following rights:

1. Access right:you can always get confirmation from the Foundation that we process your personal data, as well as information about the specifics of the processing, such as:
   1. Purpose;
   2. Categories of personal data processed;
   3. Data recipients;
   4. The existence of the right to rectify, delete or restrict the processing. This right allows you to obtain a free copy of the personal data processed, as well as any additional copies for a fee.
2. The right to rectify data:you can ask us to correct your personal data or, if necessary, to fill in data that is incomplete;
3. The right to be forgotten:you may request the removal/deletion of your personal data when:
   1. This data is no longer necessary for the purposes for which we collected and processed it;
   2. You have withdrawn your consent for the processing of personal data and we can no longer process it on the basis of other legal grounds;
   3. Personal data is being processed illegally;
   4. Personal data must be deleted according to the relevant legislation;
4. Consent withdrawal:you can withdraw your consent for the processing of your personal data at any time;
5. Right of opposition:You may object at any time to the processing for marketing purposes, as well as the processing based on the legitimate interest of the Foundation, for reasons related to your specific situation;
6. Restriction:you can request the restriction of the processing of your data when you challenge the correctness of the data while the accuracy of the data in question is verified, as well as in other situations stipulated in Art. 18 of the GDPR;
7. The right to portability:you may request us, in accordance with the law, to provide your personal data in a structured, frequently used and automatically readable form. If you request this from us, we may pass on your personal data to another entity, if technically possible;
8. Automatic decision rights: You will have adequate safeguards for the automatic decisions that are made about you. In particular, you will be entitled:
   1. To express your views on that automated decision;
   2. To request a reassessment of the decision, based on human intervention;
   3. To contest the automatic decision.

9. The right to lodge a complaint with the supervisory authority:you have the right to lodge a complaint with your data processing authority if you believe that your rights have been infringed:

The National Supervisory Authority For Personal Data Processing
28-30 General Gheorghe Magheru Blvd., Sct. 1, 010336 Bucharest, Romania
anspdcp@dataprotection.ro

In order to exercise the rights mentioned in this procedure, for any questions or further clarifications regarding this or if you wish to exercise your rights as a data subject, you can contact us using the following contact details:

Hope and Homes for Children Romania
Fundraising and Communication Department
No. 12 Monetăriei Street, 2^nd floor, apt. 7, Sector 1, Bucharest
bucuresti@hopeandhomes.ro