Privacy

A plain-language explanation of what reaches us and what happens next.

This policy covers information shared by email, phone, and other interactions that begin through this website.

Last updated: 15 July 2026 · we do not use profiling or behavioral advertising.

Data controller: ASOCIAȚIA CENTRUL PENTRU COPII - MATTEO
Personal data contact: asociatiamatteo@gmail.com
Phone: 0771 186 006
Supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Providing data: It is voluntary, but without contact details we may not be able to reply.
Profiling and automated decisions: We do not use profiling or make solely automated decisions.

Do not send national identification numbers, identity documents, medical files, or detailed information about a child’s health in your first message. If more information becomes necessary, we will explain why before collecting it.

Data we may receive

We collect data directly from you and limited technical data generated when you use the site.

your name, email address, and, if you choose, phone number;
the subject and content of the message sent to the association;
information you provide about your role, organization, or reason for contacting us;
limited hosting and security logs, such as IP address, access time, and technical errors;
brief health or child-related information only if you choose to mention it; please do not send medical documents or detailed sensitive data in your first message.

Why we use data and our legal bases

We use each category only for the purpose for which it was received or to meet a clear obligation.

to respond and take requested steps before a possible support or collaboration relationship — Article 6(1)(b) GDPR, where applicable;
to communicate legitimately with families, specialists, partners, and supporters — legitimate interests under Article 6(1)(f);
to secure the site, prevent abuse, and resolve errors — legitimate interests under Article 6(1)(f);
to meet legal obligations or respond to valid authority requests — Article 6(1)(c);
if health data later becomes necessary, we will separately explain the purpose, the applicable Article 9 GDPR condition, and safeguards before collecting it;
we do not use contact messages for newsletters, behavioral advertising, or selling databases.

Who may access data

Access is limited to people and providers who need the data to handle the request or operate the website.

authorized team members who respond to requests;
email, hosting, and infrastructure providers used to operate the site;
IT, legal, or administrative providers, only as necessary and under appropriate confidentiality obligations;
public authorities where a legal obligation or valid request applies.

If a provider processes data outside the European Economic Area, the transfer must rely on a GDPR-recognized mechanism and appropriate safeguards.

How long we keep data

The period depends on the request, how the relationship develops, and the obligations that apply.

contact messages and related correspondence: generally no longer than 12 months after the last interaction, unless a legal obligation or justified reason requires a different period;
technical and security logs: for the limited period set by infrastructure providers and security needs;
data connected to a later collaboration or service: according to the documents and obligations that apply to that relationship;
data may be kept longer for a legal obligation, official request, or the establishment, exercise, or defense of legal claims.

Your rights and how to use them

You can send a request directly to the association. We may ask for additional information only to confirm identity and protect the data.

the right to access your data and receive information about its use;
the right to rectification, erasure, or restriction where GDPR conditions apply;
the right to object when processing is based on legitimate interests;
the right to data portability where legal conditions are met;
the right to withdraw consent where processing relies on it, without affecting processing before withdrawal;
the right to lodge a complaint with ANSPDCP.

Send personal data requests to asociatiamatteo@gmail.com.

Loading…

A plain-language explanation of what reaches us and what happens next.

You choose what to send. We use it only for a clear purpose.

Data we may receive

Why we use data and our legal bases

Who may access data

How long we keep data

Your rights and how to use them

A plain-language explanation of what reaches us and what happens next.

You choose what to send. We use it only for a clear purpose.

Data we may receive

Why we use data and our legal bases

Who may access data

How long we keep data

Your rights and how to use them