Personal data
Privacy Policy
This policy covers using the website and initial contact by email or phone. If you begin a service or collaboration, you receive separate information about the data needed for that relationship.
Last updated:
Getting in touch
Send only what we need to reply.
A question and a way to contact you are enough to begin the conversation.
- Data controller
- ASOCIAȚIA CENTRUL PENTRU COPII - MATTEO
- Email for privacy requests
- asociatiamatteo@gmail.com
- Phone
- 0771 186 006
- Contact address
- Strada Florilor nr. 8A, Bragadiru, județul Ilfov, România
- Providing data
- It is voluntary. Without a way to contact you, we may be unable to reply.
- Profiling and automated decisions
- The association does not use profiling or solely automated decisions.
Do not send national identification numbers, identity documents, medical files or detailed information about a child’s health. If sensitive data is needed, we explain the purpose, legal basis and appropriate way to share it first.
Data we receive
Contact information comes directly from you. Your browser sends technical data to display and operate the website.
- Your name, email, phone number and information you include in the conversation, to the extent you provide them.
- Your IP address, requested page, access time and browser information may appear in the hosting provider’s technical logs.
- The website has no accounts, document upload forms, online payments, newsletter or visitor analytics tools.
- Initial contact is not a channel for collecting medical records. Sending health data on your own initiative does not replace the special processing conditions in Article 9 GDPR.
Purposes and legal bases
The legal basis depends on the purpose. Simply using the website does not mean consenting to every kind of processing.
- Answering questions and communicating with families, specialists, volunteers and partners: the association’s legitimate interest in handling incoming enquiries, Article 6(1)(f) GDPR.
- Steps before entering a contract, only when you request them for that purpose: Article 6(1)(b) GDPR.
- Operating the website, resolving errors and preventing abuse: the legitimate interest in keeping the website available and secure, Article 6(1)(f) GDPR.
- Meeting an obligation imposed by law: Article 6(1)(c) GDPR, when such an obligation applies.
- Loading the optional Google Maps embed: your choice before it loads, Article 6(1)(a) GDPR. You can close the map at any time.
- We do not sell contact data or use messages for advertising or newsletters.
Access and providers
Access is limited to what is necessary to handle the enquiry or operate the website.
- Authorized team members who respond to your enquiry.
- Email, hosting and technical support providers. The published email address uses Gmail, provided by Google.
- Legal or administrative providers where an enquiry or legal obligation requires it, with appropriate confidentiality obligations.
- Competent authorities where disclosure is required by law.
Providers may also process data outside the European Economic Area. Such transfers require a basis under Chapter V GDPR, such as an adequacy decision or standard contractual clauses and necessary safeguards. You can request information about the providers involved and safeguards applicable to your data at the email address above.
Retention and protection
Retention depends on the purpose. We limit access to correspondence and do not publish incoming messages.
- Contact messages and related correspondence: generally no longer than 12 months after the last interaction.
- Technical logs: for the period needed to operate the site, investigate errors and maintain security, according to the hosting provider’s settings and policies.
- Data connected to a later service or collaboration: according to the information and obligations applicable to that relationship.
- Data may be kept longer where necessary for a legal obligation or to establish, exercise or defend a legal claim. It is deleted once the purpose and applicable obligations end.
Google Maps, cookies and external links
The map is optional. The center’s address and contact details remain available without loading it.
- The website does not set analytics or advertising cookies. Google Maps does not load until you explicitly choose to load it.
- Loading the map sends Google your IP address and browser information. Google may use cookies to operate the service, personalize it and provide advertising, according to its own policy and your Google settings.
- You can withdraw your choice using the ‘Close Google Maps’ button. This removes the map from the page; it cannot recall data already sent. Your choice is not saved for your next visit.
- Cookies already set by Google can be deleted or blocked through your browser settings. You can separately manage data and preferences in your Google account.
- Links to Google Maps, social networks or other websites open external services. Their policies apply when you access them.
Rights and requests
Write to the email or contact address above. If there are reasonable doubts about your identity, we may ask only for the information needed to confirm it.
- You can request access, rectification, erasure or restriction of processing where GDPR conditions apply.
- You can object to processing based on legitimate interests on grounds relating to your particular situation.
- You can request portability where processing is based on consent or a contract and carried out by automated means.
- You can withdraw consent at any time without affecting the lawfulness of earlier processing.
- We respond without undue delay and within one month of receiving your request. If the complexity or number of requests requires up to two additional months, we inform you during the first month and explain why.
- Requests are generally free of charge. Exceptions for manifestly unfounded or excessive requests apply only under GDPR conditions.
You can lodge a complaint with Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) and use the judicial remedies provided by law.