GDPR

1 What is GDPR

GDPR is the European regulation that sets the rules for collecting, storing and using the personal data of citizens of the European Union. It applies to all organizations — regardless of size — that process the personal data of people in the EU.

GDPR's core principles:

🎯

Lawfulness and transparency

Data is processed lawfully, fairly and transparently.

📌

Purpose limitation

Data is collected only for specific and legitimate purposes.

⚖️

Data minimization

We only collect the data strictly necessary for the purpose.

✅

Accuracy

Data must be accurate and kept up to date.

⏱

Storage limitation

Data is not kept for longer than necessary.

🔒

Integrity and confidentiality

Data is protected through appropriate technical and organizational measures.

2 Data Controller

The controller responsible for processing your personal data is:

Name

Asociația Lupii Munților

Contact email

contact@lupiimuntilor.ro

Country

Romania (EU)

3 Your rights under GDPR

GDPR gives you a set of fundamental rights regarding your personal data. You can exercise any of them by contacting our association:

👁

Right of access

Art. 15

You have the right to obtain confirmation of whether we hold data about you and, if so, to receive a copy of it along with information about how it is processed.

✏️

Right to rectification

Art. 16

You have the right to request the correction of inaccurate data or the completion of incomplete data concerning you.

🗑

Right to erasure ("right to be forgotten")

Art. 17

You have the right to request the deletion of your data when it is no longer necessary for the original purpose, when you withdraw consent, or when you object to processing.

⏸

Right to restriction of processing

Art. 18

You have the right to request the temporary limitation of the processing of your data — for example, while its accuracy is being verified or while an objection to processing is being considered.

📤

Right to data portability

Art. 20

You have the right to receive the data you provided in a structured, commonly used, machine-readable format, and to transmit it to another controller.

🚫

Right to object

Art. 21

You have the right to object to the processing of your data based on the controller's legitimate interest or for direct marketing purposes.

↩

Withdrawing consent

Art. 7(3)

If processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.

⚖️

Right to lodge a complaint

Art. 77

You have the right to lodge a complaint with the competent supervisory authority — in Romania, ANSPDCP — if you consider that the processing of your data breaches GDPR.

4 How to exercise your rights

To exercise any of the rights above, send us a written request to contact@lupiimuntilor.ro with the subject "GDPR Request", indicating:

Your first and last name
The right you wish to exercise
A brief description of your request
A way for us to identify you (without sending sensitive documents by unencrypted email)

⏱ Response time

We will respond within a maximum of 30 calendar days of receiving your request. In complex cases, this period may be extended by up to 60 additional days, with prior notice to you.

5 Legal basis for our processing activities

Processing activity	Legal basis (GDPR art. 6)
Responding to messages through the contact form	Consent (lit. a)
Processing requests to enroll children in programs	Consent (lit. a)
Managing volunteer applications	Consent (lit. a)
Communications about the association's activities	Legitimate interest (lit. f)
Legal obligations (accounting, reporting)	Legal obligation (lit. c)

6 Supervisory authority (ANSPDCP)

If you believe your rights have not been respected, you have the right to lodge a complaint with the national data protection supervisory authority:

Institution

National Supervisory Authority for Personal Data Processing

ANSPDCP

Website

anspdcp.ro

anspdcp@dataprotection.ro

We encourage you to contact us first — we will make every effort to resolve any issue amicably.

7 Updates to this page

This page may be updated periodically to reflect changes in legislation or our processing practices. The date of the last update is shown in the page header. We recommend checking it periodically. For full details on how we collect and use data, also see our Privacy Policy.