1. Who operates the website
The website is operated by Asociația Speranță pentru Sofia Ema, CUI 50880386, Associations and Foundations Registry no. 1554457, registered office: Tg. Mureș, B-dul 1848 no. 63, apt. 7, Mureș County, Romania. Email: speranta.pentru.sofia@gmail.com. Phone: +40 747 487 723.
2. What personal data means
Personal data is information relating to an identified or identifiable person. Depending on how you use the website, this may include contact details, form submissions, technical identifiers and information you voluntarily send to the association.
3. Data we may collect
- name, email address and telephone number;
- information sent through contact, Wall of Hope or Form 230 notification forms;
- technical data such as IP address, browser/device information and basic logs;
- cookie/analytics information when such services are enabled;
- transaction information supplied by payment providers to the extent needed for administration.
4. Why data is used
Data may be used to respond to messages, manage Form 230 notifications, administer sponsorship or donation-related communication, operate and secure the website, understand aggregate site use and comply with legal obligations.
5. Legal bases
Processing may rely on consent, steps taken at your request, legal obligations and legitimate interests such as website security, administration and responding to legitimate inquiries, depending on the specific activity.
6. Information and media about Sofia
The website contains health information, photographs and videos about Sofia published by or with the authorization of her legal representative for the purpose of documenting her story and fundraising needs. Visitors may not reuse this content in a misleading, exploitative or unauthorized way.
7. Donations and external payment services
Some donation methods lead to third-party services such as payment platforms or banks. Those providers process data under their own privacy notices. The association does not control every data element collected by third-party payment services.
8. Analytics, video embeds and cookies
The website may use analytics, embedded video/social media services and cookies. These services can process technical data and may set cookies according to their own terms. Where required by law, non-essential technologies should be subject to the appropriate consent mechanism.
9. Sharing and international transfers
Personal data may be shared with service providers that support hosting, forms, security, communications or payments, and with authorities when legally required. Some providers may process data outside the European Economic Area subject to the safeguards required by applicable law.
10. Retention and security
Data is retained only for as long as reasonably necessary for the purpose collected, accounting/legal obligations or dispute prevention. Reasonable technical and organizational measures are used, but no internet service can guarantee absolute security.
11. Your GDPR rights
Where applicable, you may have rights of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent when processing relies on consent. Requests can be sent to the association’s email address. You may also complain to the competent data protection authority.
12. External links and policy updates
The site contains links to external platforms whose policies are independent. This privacy policy may be updated when the website, services or law changes; the current version will remain published on this page.