Privacy policy
The purpose of this Privacy Policy is to explain what data we process, why we process it, and how we use it. We take your privacy seriously and we never sell personal data lists or email addresses. Being fully aware that personal information belongs to you, we make every effort to store it securely and process it responsibly. We do not share information with third parties without informing you.
The Margaret of Romania Royal Foundation is a charitable foundation established and operating in accordance with Romanian law, with its registered office in Bucharest, registered in the Register of Associations and Foundations under no. 243/PJ/18.09.1998, with unique registration code 10981730. The Foundation is responsible for processing your personal data collected directly from you or from other sources. According to the law, The Margaret of Romania Royal Foundation is a personal data controller. In order to ensure that your data is processed safely, we have made every effort to implement reasonable measures to protect your personal information.
According to the law, you, as a natural person who benefits from our services or who is in any kind of relationship with us, are a “data subject”, meaning an identified or identifiable natural person. In order to be fully transparent regarding data processing and to allow you to easily exercise your rights at any time, we have implemented measures to facilitate communication between us, as the data controller, and you, as the data subject.
Protecting your personal information is very important to us. Therefore, we commit to respecting the following principles:
Lawfulness, fairness and transparency – We process your data lawfully and fairly. We are always transparent about the information we use, and you are properly informed.
You are in control – Within the limits of the law, we give you the possibility to review, modify or delete the personal data you have shared with us and to exercise your other rights.
Data integrity and purpose limitation – We use data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes comply with the applicable legislation. We take reasonable steps to ensure that personal data is accurate, complete and up to date.
Security – We have implemented reasonable security and encryption measures to protect your information as effectively as possible. However, please note that no website, application or internet connection is completely secure.
This Privacy Policy may be updated at any time. All updates and changes to this Policy become effective immediately upon notification, which will be made by posting on the website and/or by email notification.
By providing personal data, data subjects expressly and unequivocally consent to their personal data being included in the database of The Margaret of Romania Royal Foundation (Romania) for the purpose of providing social services, fundraising activities, awareness and information campaigns exclusively related to our projects and activities. The personal data collected and processed will not be disclosed to third parties, except in cases where The Margaret of Romania Royal Foundation (Romania) is required to disclose such data under applicable law. The requested data may include: full name, phone number, email address, home address.
Data processing is carried out in a lawful, fair and transparent manner with respect to the data subject and ensures the integrity and confidentiality of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, through appropriate technical or organizational measures.
We collect your information for specific and legitimate purposes, including but not limited to:
- For the conclusion or performance of a contract between you and us;
- To respond to your questions and requests;
- To inform you, with your prior consent, about opportunities to get involved in our projects as a volunteer or donor;
- To provide and improve the services and products we offer;
- To provide newsletters, SMS messages and personalized content related to projects and activities;
- To protect ourselves against cyberattacks;
- To comply with legal obligations.
Have you given your consent for the processing of personal data?
Please note that you may withdraw your consent at any time by submitting a written request to the email address: protectiadatelor@principesa.ro
Personal data collected and used for providing social services, marketing, advertising and information activities by The Margaret of Romania Royal Foundation (Romania) will be stored for a period of 5 years from the termination of contractual relations or for any longer period required by law, regulations or applicable rules regarding accounting record retention obligations or requests from public authorities. Immediately after the applicable storage period expires, the data will be:
- deleted or destroyed
- anonymized
- transferred to an archive (unless prohibited by applicable law or regulations on record retention)
Personal data is stored electronically in secure, password-protected files. Paper-based information is kept in special files accessible only to employees of The Margaret of Romania Royal Foundation, who are bound by confidentiality obligations.
You will be notified of a data security breach within a reasonable period of time after such a breach is discovered, except where a competent public authority determines that notification would hinder a criminal investigation or prejudice national security. In such cases, notification will be delayed in accordance with the instructions of that authority. We will respond promptly to any questions you may have regarding such a data security breach.
Right to information – You may request confirmation of whether your personal data is being processed and how it is used by submitting a written request to protectiadatelor@principesa.ro
Right to rectification – If we process incomplete or inaccurate personal data, you may request correction or completion at any time by submitting a written request to protectiadatelor@principesa.ro
Right to erasure – You may request the deletion of your personal data if the purpose for which it was collected no longer exists, if processing violates legal provisions, if processing disproportionately affects your interests, or if processing is based on consent that you have withdrawn, by submitting a written request to protectiadatelor@principesa.ro
Please note that there may be other reasons preventing immediate deletion of your data, such as mandatory archiving periods, pending legal actions, claims, or the exercise or defense of legal rights.
Right to restriction of processing – You have the right to request restriction of the processing of your personal data in the following cases:
- You contest the accuracy of your data, for a period allowing us to verify its accuracy
- Processing is unlawful and you oppose deletion and request restriction instead
- We no longer need your personal data for the stated purpose, but you require it for the establishment, exercise or defense of legal claims, or you have objected to processing
Right to data portability – You may request that we provide your personal data in a structured, commonly used and machine-readable format, insofar as processing is based on your consent or on a contract between us and is carried out by automated means.
Right to object – If we process your personal data for tasks carried out in the public interest, for the exercise of official authority, or for the defense of a legitimate interest, you may object to such processing where there are compelling legitimate grounds relating to your personal data. You may also withdraw your consent to receive marketing messages at any time, without providing a reason.
Right to lodge a complaint – If you believe that we have violated Romanian or European legislation regarding the processing of your personal data and thereby infringed your rights, please contact us at protectiadatelor@principesa.ro so that we can clarify your concerns. We will attempt to respond within 30 days. This period may be extended depending on factors such as the complexity of the request, the volume of requests received, or difficulties in identifying you.
If, despite our efforts, we are unable to identify you and you do not provide additional information to enable identification, we are not obliged to comply with the request.
You also have the right to address the Romanian Data Protection Authority or another competent European supervisory authority.