Notification regarding the protection of personal data

Date of update 11 July 2022

1. Introduction

United Way Romania is a foundation registered at the District 1 Court and headquartered in Bucharest, Bd. Dimitrie Pompeiu no. 6E, floor 6, zone A, Sector 2, code 020337 (“United Way Romania” or “Us”), and, for the purposes of personal data protection legislation, is the data controller regarding the personal data provided and processed during the relationship you have with Us or as a result of accessing the website accessible at the URL www.unitedway.ro (“Website”).
This Information notice informs you about what happens to the personal data you may provide to Us (ie any information about an identified or identifiable individual, such as your full name or email address) during your relationship with Us (either as a collaborator, representative of a collaborator that is a legal entity , donor or representative of donor or volunteer that is a legal entity) or as a result of accessing the Website or sending an e-mail to United Way Romania.
If you have questions or requests regarding the processing of your personal data or if you need additional information, contact us at the email address: office@unitedway.ro or at the telephone number +40 21 306 4970.

2. What categories of personal data do we collect about you?

United Way Romania processes general personal data , such as:
• name, address, e-mail, telephone number, place of work, date of birth;
• PCN, number and series of the identity card; bank account;
• details about your visits on the Website and the resources you access;
• responses to invitations and confirmations of participation in events
United Way Romania does not collect special categories of personal data about you, especially personal data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or union membership, nor genetic data, biometric data in the purpose of uniquely identifying a natural person, health data or data on the sexual life or sexual orientation of a natural person and does not collect personal data relating to criminal convictions and offenses. Therefore, please do not submit United Way Romania data from those listed in this paragraph.

3. How do we obtain your personal data?

We obtain your personal data either directly from you when you provide it to us or when you interact directly with us (eg, events, volunteer activities, filling in the online donation form, requesting funds, subscribing to the newsletter or visiting Website), or indirectly, from employees of the collaborators or donors you represent.

4. For what purposes do we use your personal data and on what legal basis?

Purpose of processing

Legal ground

Type of personal data processed

To enable you to use the Website and improve your experience on the Website

Processing is required to run the Website

a. Information collected when accessing the Website from a computer:

• your IP address;

• browser type;

b. Information collected when accessing the Website from a mobile device:

• unique device identifier assigned to that device.

To be able to process donations received from you or to conclude volunteer contracts

Processing is required to perform a contract to which you are a party or to take action, at your request, before concluding a contract.

a. contact information:

•     name and surname;

•     phone number; and

•     email address.

b. Other information, such as:

• identity card number and number

•     date of birth;

• locality;

•     bank account

To negotiate, conclude and carry out the various types of contracts concluded with the donor / collaborator you represent

Processing is required to perform a contract to which you are a party or to take action, at your request, before concluding a contract.

a. contact information:

•     name and surname;

•     phone number; and

•     email address.

b. Other information, such as:

• identity card number and number

•     date of birth;

• sex.

To give you direct marketing messages

Processing is based on your explicit, specific, informed and freely expressed consent, which is obtained through a consent form

a. contact information:

•     name and surname;

•     email address.

In order to respond to various requests as a result of sending e-mails to the attention of United Way Romania

Processing is necessary for our legitimate interests to respond to your requests and stay in touch with you.

a. contact information:

•     name and surname;

•     phone number; and

•     email address.

b. records of correspondence with United Way Romania, including information provided by you when you send us a request.

We may also process your personal data for our compliance with legal obligations (such as legal obligations regarding tax reporting, conducting audits, keeping records).

5. Who can access your personal data?

In accordance with the purposes mentioned above, we may disclose personal data to the following categories of recipients located within or outside the European Economic Area:
• Third-party service providers who have been entrusted with processing activities and have been duly appointed as data processors, for example: cloud service providers, IT service providers, experts and consultants.
• Courts, regulators and public administrations.

6. How long do we keep your personal data?

We will retain your personal data only for as long as is necessary to carry out the purposes for which the data were collected as specified in this Information notice.

7. Transfer of your personal data

Your personal data may be transferred to countries within or outside the European Economic Area (EEA), in particular to the United States of America.
Some non-EEA countries are recognized by the European Commission as ensuring an adequate level of data protection according to EEA standards. The full list of these countries is available at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.
For transfers from the EEA to countries that are not considered appropriate by the European Commission, we have put in place adequate and appropriate safeguards to protect your personal data and to ensure that the transfer of your personal data is in accordance with the requirements and obligations set out in the applicable data protection legislation , such as the standard contractual clauses adopted by the European Commission in accordance with Article 46 of the General Data Protection Regulation (EU) 2016/679 (“GDPR”). To obtain a copy of them, contact us at the email address: office@unitedway.ro

8. How we process and store your personal data?

For the purposes set out above, personal data is processed by both electronic and manual means, but are not subject to an automated decision-making process (including profiling) (as required by Article 22 par. 1 and 4 RGPD) and are protected by appropriate security measures.
United Way Romania is committed to ensuring that your personal data is secure. To prevent unauthorized access or disclosure of data, United Way Romania has technical and organizational measures by which your personal data is secure. The United Way Romania personnel and third parties for the processing of your personal data are obliged to respect the confidentiality of the data.

9. Your rights regarding your personal data

To the extent permitted by the provisions of the GDPR, you have the following rights regarding the personal data we process for you:
• to request access to your personal data, including receiving a copy of your personal data;
• to request the rectification of your personal data;
• to request the deletion of your personal data;
• to request the restriction of the processing of your personal data;
•to request the receipt or transmission to another operator, in a structured, commonly used and automatically readable format, of the personal data you have provided to us;
• to oppose the processing of your personal data;
• to withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal; and
• to submit a complaint to the National Authority for the Supervision of Personal Data Processing based in G-ral Blvd. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania.
In order to exercise your rights (except for submitting a complaint with the National Authority for the Supervision of Personal Data Processing), you can contact us by sending a request to office@unitedway.ro. Please consider the following aspects:
We take the confidentiality of all records containing personal data seriously and reserve the right to ask you for proof of your identity if you exercise one of your rights.
We will not charge you any fees to exercise any of your rights in relation to your personal data, unless your request for access to information is unfounded, repetitive or excessive, in which case we will charge you the fee with a reasonable amount given the circumstances. We will notify you of any fees before the completion of your application.
We try to respond to any valid requests within one (1) month, unless it is extremely complicated or you have made several requests, in which case the one month period may be extended by two months. Any such extension will be notified to you. We may also ask you for clarification or additional information to help us resolve your request more quickly.
Third party rights. We are not obliged to comply with a request if it affects the rights and freedoms of other data subjects.

10. Updates to this Information notice

We may amend or update this Information notice as a result of various interpretations, decisions, opinions regarding the interpretation and applicability of personal data protection legislation. Any updates to this Information notice will be posted on the Website in the form of a revised Information notice. If this Information notice is amended in the sense that we will use your personal data that we have already collected from you for other purposes, we will notify you and let you choose how we use your personal data in the future.