Privacy Policy

Beneficiaries: name, address, date of birth, contact details, household composition, and — only where strictly necessary to deliver care — health and social-situation information.

Volunteers: name, contact details, availability, references, and where legally required for work with children or vulnerable adults, a criminal record certificate.

Donors: name, contact details, amount and date of donation, bank reference, and fiscal data required for sponsorship contracts or 3.5% designation forms.

Website visitors: only the data you enter into our contact and volunteer forms. Our website uses no advertising cookies and no third-party analytics profiling.

To deliver social assistance and to manage beneficiary case files — legitimate interest and, for health data, explicit consent or substantial public interest in the social protection field (Art. 6(1)(f), Art. 9(2)(a) and (b) GDPR).

To manage volunteering relationships — performance of the volunteering contract under Law no. 78/2014 (Art. 6(1)(b) GDPR).

To administer donations, issue receipts and comply with accounting and fiscal obligations — legal obligation (Art. 6(1)(c) GDPR).

To answer your messages — consent, withdrawable at any time (Art. 6(1)(a) GDPR).

Accounting and fiscal records: 10 years, as required by Romanian law.

Beneficiary case files: for the duration of support and 5 years thereafter, in case of audit or continuity of care.

Volunteer files: for the duration of the contract and 3 years thereafter.

Contact form messages: 12 months.

We never sell or rent personal data. We disclose data only to: public authorities where we are legally obliged to (ANAF, county social assistance, courts); our bank and our accountant, bound by confidentiality; and, with explicit consent, to partner institutions when a referral is in the beneficiary's interest.

We do not transfer personal data outside the European Economic Area.

You have the right of access, rectification, erasure, restriction of processing, data portability, objection, and the right to withdraw consent at any time without affecting prior lawful processing.

To exercise any right, write to elbert-floyd3ick@gmx.com or to our registered office. We respond within 30 days.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro.

We photograph and publish stories of beneficiaries only with prior written consent, which can be withdrawn at any time. Children are never identified by full name. Where consent is refused, aid is delivered exactly the same way.

Paper case files are kept in a locked cabinet at our registered office. Electronic records are stored on password-protected, access-restricted accounts. Only coordinators and board members with a demonstrated need have access.