Privacy policy

1. Who processes your data

Asociația Valori de Bine, registered office: Str. Arieșul Mare nr. 3, Bl. I10, Sc. 5, Et. P, Ap. 63, Camera 1, District 6, Bucharest, postal code 060791, Romania. Tax ID: 51801640. National Registry no.: 1278/A/2025. Legal representative: Mădălina Daia, President. For any question or request about your data: comunicare@valoridebine.ro.

2. What data we process and why

• Contact form — name, e-mail address, phone (optional), the topic you choose and your message. We use them to reply to you.
• Volunteer form — the kinds of involvement you choose, name, e-mail address, phone (optional), city, occupation, availability and a few words about you. We use them to talk with you about getting involved and to organise our activities.
• Partnership form — company, contact person, e-mail address, phone (optional), the partnership types you choose and your message. We use them to discuss a possible partnership.
• Messages sent directly by e-mail or phone — the data you choose to give us, so we can reply.
• Donations by bank transfer — from our bank statement we learn your name, the account you donated from, the amount and the payment details. We keep them for our accounting records.
• Form 230 — if you redirect 3.5% of your income tax through formular230.ro, we receive the form you completed, with the identification data in it (name, personal identification number, address and, if you fill them in, phone and e-mail), and we file it with the Romanian tax authority (ANAF).
• Technical data — IP address, browser and device type, the page visited. They are processed automatically by our technical providers (section 4), to run and secure the site and for aggregate visit statistics.

The site has no database: form messages are not stored on the site, they only reach the association's inbox as e-mail. We do not use your data for marketing, we do not sell it and we do not send newsletters. The site does not collect data about the children in our programmes.

3. Legal basis

• Replying to messages and discussing volunteering or partnerships — steps you take before a possible collaboration (Art. 6(1)(b) GDPR) and our legitimate interest in replying to those who write to us (Art. 6(1)(f)).
• Donations and Form 230 — the association's legal accounting and tax obligations (Art. 6(1)(c)).
• Site security, spam protection and aggregate statistics — our legitimate interest in a secure site and in understanding, without identifying anyone, how it is used (Art. 6(1)(f)).

4. Providers we work with

• Cloudflare — hosts the site and the forms; processes technical data. Cloudflare privacy policy
• Cloudflare Turnstile — spam protection for the forms. It loads only when you start filling in a form and analyses technical signals about your browser to tell people from automated programs; it does not read what you type in the form. Turnstile privacy policy
• Cloudflare Web Analytics — aggregate visit statistics (pages visited, traffic source, country, device and browser type), without cookies and without identifying visitors.
• Resend — delivers the e-mails generated by the forms to the association's inbox; for our domain, sending takes place from the EU region (Ireland). Resend privacy policy
• Our e-mail hosting provider — hosts the comunicare@valoridebine.ro inbox where messages arrive.

5. External platforms

From the site you can reach platforms run by other organisations. When you use them, their own privacy policies also apply:

• Galantom — online card donations. Galantom privacy policy
• formular230.ro — completing and signing Form 230, which then reaches us (section 2). formular230.ro privacy policy
• LinkedIn, Instagram, Facebook — links to our pages. The site does not include buttons or widgets from these networks.

6. Transfers outside the EU

Cloudflare and Resend are US companies. Data transfers outside the European Union rely on the mechanisms provided by the GDPR — the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

7. How long we keep data

• Form messages and e-mails — at most 3 years after the last interaction, then we delete them.
• Documents related to donations and Form 230 — as long as accounting and tax law requires.
• Technical data — as set out in the policies of the technical providers above.

8. Your rights

You can ask at any time to access your data, to have it corrected or deleted, to restrict its processing or to receive it in a portable format, and you can object to processing based on our legitimate interest. Write to us at comunicare@valoridebine.ro — we reply within one month.

If you believe your data is not being processed correctly, you can file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): dataprotection.ro.

9. Security

The site uses HTTPS on every page, so the data you send through the forms travels encrypted. The association's e-mail inbox is password-protected.

10. Changes

If we change this policy, we publish the new version here, with the date of the update.

Last updated: 7 November 2026.