1. Introduction and Data Controller
Welcome to Masa care unește! Your privacy matters to us.
This privacy policy is administered by Bloom the World Association, a non-governmental organization headquartered at 12 Liviu Rebreanu Street, Alba Iulia, Romania (the "Association", "we"), acting as Data Controller.
This document explains what data we collect, why we collect it, how we use it, and your rights under Regulation (EU) 2016/679 (GDPR).
2. Key Definitions
- Personal data: Any information that can identify you (e.g. name, email, phone, city, IP address).
- Processing: Any operation performed on data (collection, storage, use, sharing, deletion).
- Data subject: You, the site user and/or participant in our activities.
3. What Data We Collect, Why, and the Legal Basis
We commit to collecting only data strictly necessary to carry out our activity and provide a relevant experience.
We do not intentionally collect or process special categories of personal data (medical data, political opinions, religion, etc.). If such data is provided unsolicited, we will delete it immediately.
| Category of Data Processed | Purpose of Processing | Legal Basis (under Art. 6 GDPR) |
|---|---|---|
| Name, email, phone, company (optional), message (via contact form) | Handling requests, answering questions, contacting potential partners. | Legitimate interest (Art. 6.1.f) in responding to received requests. |
| Email address, name (optional) (via newsletter signup form) | Sending periodic updates, project news, event invitations, and other direct marketing communications. | Your explicit consent (Art. 6.1.a). |
| First name, last name, phone, email, city (via event/volunteer registration form) | Managing registrations, logistical organization of events/volunteer activities, and communication with participants. | Performance of a contract (Art. 6.1.b) to which you are a party (event/volunteer participation). |
| Photographs and video recordings (from events) | Promoting the Association's activity and future events on the site gallery, social networks, and press materials. | Legitimate interest (Art. 6.1.f) in promoting the Association's non-profit mission, supported by prior participant information. |
| Web browsing data (IP address, browser type — via analytics cookies) | Monitoring and analyzing site traffic to understand usage and improve structure and content. | Your explicit consent (Art. 6.1.a), granted via the cookie banner. |
4. Processing Minors' Data and Event Participation
We recognize that our events are also for families, including minors. We have implemented the following rules to protect their data:
- Registration by parents/guardians only: www.masacareuneste.ro does not knowingly collect data directly from persons under 16. Event registration forms must be completed exclusively by a parent or legal guardian.
Consent and responsibility
By registering for an event where a minor will participate, the parent/legal guardian:
- Expresses agreement and is fully responsible for the minor's presence and participation at the event.
- Understands and accepts that the minor may appear in photo/video materials taken at the event for the Association's legitimate promotional purposes, as described in section 3.
Tips and best practices
- On-site notice: At all our events, we will display visible notices informing participants that photos and filming are taking place.
- Right to object: If, for valid reasons, a participant (or a parent on behalf of a minor) does not wish to appear in images, they should inform an organizer on site.
5. Cookie Policy
Our site uses cookies to improve your experience. On your first visit, a banner allows you to express consent. We currently use:
Analytics cookies (e.g. Firebase Analytics): These help us collect aggregated, anonymous data about how visitors interact with the site, allowing us to optimize content.
You can change cookie preferences at any time in your browser settings or via the "Cookie settings" link in the site footer.
6. Disclosure of Data to Third Parties
We do not sell or rent your data. We may share certain data with trusted providers only when absolutely necessary:
- Google / Firebase services (USA): We use Firebase Analytics for traffic analysis. Data transfers are based on appropriate safeguards (Standard Contractual Clauses).
- Social media platforms (e.g. Facebook, Instagram, TikTok, YouTube): When you use share buttons or interact with our embedded content on these platforms, data may be exchanged directly between your browser and the respective platform.
7. Data Retention Period
We retain your data only as long as necessary:
- Contact form data: Until your request is fully resolved, plus a reasonable archiving period (e.g. 6 months).
- Newsletter data: Until you withdraw consent (unsubscribe).
- Event registration data: Up to 2 years after the event, to keep a record of participants and invite you to future editions, based on legitimate interest.
- Photos/Video: May be kept in the Association's archive indefinitely, given their historical and promotional purpose.
8. Your Rights
Under GDPR, you have the following rights:
- Right of access: Request a copy of the data we hold.
- Right to rectification: Correct inaccurate data.
- Right to erasure ("right to be forgotten"): Request deletion of data under certain conditions.
- Right to restriction of processing: Limit how we use your data.
- Right to data portability: Receive your data in digital format and transmit it to another controller.
- Right to object: Object to processing for direct marketing purposes.
To exercise any of these rights, please write to us at comunicare@masacareuneste.ro.
If you are not satisfied with our response, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
9. Security Measures
We have implemented reasonable technical and organizational measures to protect your data against unauthorized access, destruction, or accidental loss (e.g. SSL site security, limited data access, etc.).
10. Links to Other Sites (Partners)
Our site may contain ads or links to our partners' websites. This privacy policy does not cover those sites' practices. We recommend reviewing each site's privacy policy.
11. Photo & video use
By registering for and participating in the event, each participant expressly and unequivocally agrees that the Organizer and official event partners may create, process, and use photographs, audio, and video recordings in which they may appear, without requesting further compensation or consent. These materials may be used for promotion and public communication on any channel (online, offline, mass media, social networks, printed materials, websites, digital platforms, etc.), for an unlimited duration and worldwide. The participant understands and accepts that these materials may be shared and used by the Organizer together with event partners and sponsors under the same conditions.
12. Policy Updates
We may update this policy periodically to reflect changes in our activity or legislation. Any changes will be published on this page.
If you have questions, contact us at comunicare@masacareuneste.ro.