Privacy Policy
Protecting your personal data is a priority for us. Find out how we collect, use and protect your information.
Last updated: 12.10.2026
Lupii Munților Association is committed to respecting and protecting the privacy of the personal data of our website's users, our program participants and our volunteers. This policy describes how we collect, use and protect your data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
1 Data Controller
The controller of your personal data is:
- Name: Asociația Lupii Munților
- Registered in: Romania
- Email: contact@lupiimuntilor.ro
You can contact the controller about any matter related to the processing of your personal data at the email address above.
2 What data we collect
We collect personal data depending on the action you take on our website:
Contact form
- First and last name
- Email address
- Subject and content of the message
Child enrollment form
- Parent's/guardian's name
- Email address and phone number
- Child's name and age
- Message / additional information
Volunteer application form
- First and last name
- Email address and phone number
- Availability and areas of interest
- Message / additional information
We do not collect sensitive data (as defined in GDPR art. 9) and we do not collect data about children directly — all data related to children is provided by their parents or legal guardians.
3 Purpose and legal basis of processing
| Purpose | Legal basis (GDPR) | Data used |
|---|---|---|
| Responding to messages received through the contact form | Consent (art. 6(1)(a)) | Name, email, message |
| Processing child enrollment requests | Consent (art. 6(1)(a)) | All data from the form |
| Managing volunteer applications | Consent (art. 6(1)(a)) | All data from the form |
| Communications about the association's activities | Legitimate interest (art. 6(1)(f)) | Name, email |
4 How long we keep your data
Personal data is kept only for as long as necessary for the purposes for which it was collected:
- Contact messages: up to 12 months from the date received, after which they are deleted.
- Enrollment / volunteering requests: for the duration of the relationship with the association and up to 2 years after it ends.
- If consent is withdrawn, the data will be deleted within 30 days, except where the law requires it to be kept.
5 Who we share data with
We do not sell, rent or transfer your personal data to third parties for commercial purposes. Data may only be shared with:
- Technical service providers (web hosting, email services) acting as processors on behalf of the controller, who are required to comply with GDPR.
- Public authorities, when the law requires us to disclose the data.
All data transfers are carried out with the appropriate safeguards required by GDPR.
6 Your rights
Under GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at contact@lupiimuntilor.ro. We will respond within a maximum of 30 days.
7 Data security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure. Access to data is restricted to authorized staff of the association who need it to perform their duties.
8 Cookies
Our website may use cookies strictly necessary for the pages to function correctly (e.g. form sessions). We do not use tracking or advertising cookies without your consent.
You can control cookies from your browser settings. Disabling strictly necessary cookies may affect the functioning of the website.
9 Changes to this policy
We reserve the right to update this privacy policy periodically. Any significant change will be communicated by publishing the new version on this page, with the date at the bottom updated. We recommend checking this page periodically.
10 Contact
For any questions, requests or complaints related to the processing of personal data, you can contact us: