privacy policy
Help&Care Association, non-governmental, non-profit and apolitical organization, based in Oradea, Gen. Gheorghe Magheru no. 5, registered in the Register of Associations and Foundations with no. 4/N/2013, fiscal code 31511820, understands to update its personal data processing policy in order to comply with the new rules introduced by the General Data Protection Regulation, no. 679 of April 27, 2016, applicable in the European Union (GDPR) for the protection of individuals regarding the processing of personal data and the free movement of such data.
Through this Policy we inform you:
- Certain important concepts related to personal data;
- What personal data we process;
- For what purpose we use this data;
- To whom we may transmit the data;
- What data rights you have.
What is personal data?
Personal data means any information or information that identifies or can identify you directly or indirectly. This means that personal data includes information such as: name, surname, identification number, email address, domicile, mobile phone, username, profile photos, location data, etc.
What does the processing of personal data mean?
Processing means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
What personal data do we process?
The categories of personal data that the Help&Care Association processes are:
- Identification and contact information;
- Data regarding the history of collaboration with the persons concerned;
- Photos and videos.
All your personal data is stored in – The data we collect in relation to our grantees and sponsors is archived in locked cabinets to which only the executive team has access; all data in electronic format is stored on password-protected external devices. Access to personal data is done through username and password, only by employees of the foundation during the period in which they fulfill this capacity. Based on the employment contract, the employees individually assume the confidentiality and protection of the data they come into contact with during the activity.
For what purpose do we process the data?
Your personal data is processed by the Help&Care Association for the following purposes:
- Transmitting information about the program, fund or event supported within the Help&Care Association;
- Communication of the new programs run by the Help&Care Association in Oradea, which may be of interest to the persons concerned;
- Promotion of the activities carried out within the programs financed by the Help&Care Association;
- Fulfilling the payment obligations of donations and sponsorships;
- Congratulations to the donors on their birthday.
Data processing is carried out on the basis of your express consent, by signing the donation and sponsorship contracts, by filling in the support forms for the projects registered at the events held by the Help&Care Association, by accepting the policy regarding the processing of personal data on the websites of the Help&Care Association . In other situations, the processing of personal data is carried out in accordance with the legislation in force in civil, fiscal, administrative, etc.
Duration of personal data processing
The data required for processing will be kept for a maximum period of 5 years depending on the category of personal data processed. They can be deleted upon request during this period, if applicable.
Transfer of personal data
The Help&Care Association processes your personal data exclusively on the territory of Romania.
Responsibility of third parties for the security and processing of your personal data
The Oradea Community Foundation makes all the necessary efforts to transmit your data safely to third parties, but does not assume responsibility for the way they process and secure the data. If they are compromised as a result of a security breach, we will notify you immediately in accordance with the notification procedures required by applicable law.
Our procedures regarding the protection of personal data, organizational and technical measures, are structured in order to ensure the confidentiality and security of personal data and all information under our care. We undertake to periodically verify the adequacy of the implemented measures.
What are the rights of the data subject?
Based on GDPR and related data protection legislation, you have the following rights:
• Right of access – means that you have the right to obtain a confirmation from us that we are processing your personal data or not, and if so, access to that data and to information regarding the manner in which it is processed.
• The right to data portability – you can receive your data in a structured, commonly used format and the right to have it transmitted directly to another operator, if this is technically feasible.
• The right to opposition - you can object to the processing of personal data when the processing is necessary for the performance of a task that serves a public interest or when it considers a legitimate interest of the operator.
• The right to rectification – at any time you can ask us to correct, without undue delay, inaccurate personal data. The rectification will be communicated to each recipient to whom the data have been transmitted, unless this proves impossible or involves disproportionate efforts
• The right to data deletion – the right to ask us, without undue delay, to delete your personal data if it is no longer necessary to fulfill the purposes for which it was collected or processed by us or you withdraw your consent and there is no other legal basis for processing. Also, at any time, you can object to the processing if there are no legitimate reasons that prevail or your personal data has been processed in violation of the law or it must be deleted to comply with a legal obligation owed to us.
• The right to restriction of processing - the possibility to obtain the restriction of processing in any of the following expressly provided situations:
o the accuracy of the data we process is contested;
o the processing of the data by us is illegal and you request the restriction of its use by us;
o if you request the data for establishing, exercising or defending a right in court. The restriction of processing applies for the time frame in which we check whether our legitimate rights prevail over your rights.
For any clarifications, suggestions and interventions on personal data, you can contact us at the e-mail address: [email protected]