Privacy Policy

Through this Information Note, we inform you of how personal data are processed for the purposes identified below, through the website https://yana.ro (the “Site”), as well as the rights of the data subjects , in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (“GDPR”).

DATA OPERATOR

The YANA Foundation, with headquarters at Str. Trandafirilor 5, Nicolae Bălcescu locality, Jud. Bacău has the status of data operator according to the GDPR. Throughout this document, the YANA Foundation will be referred to as the Operator or the YANA Foundation.

PERSONAL DATA PROCESSED THROUGH THE SITE

For the purposes described below, the YANA Foundation processes the following categories of personal data:

1. the data filled in by you in the Contact page of the Website: full name, e-mail address, your message, respectively all the information communicated to the Foundation through this method;the data filled in by you on the Site when you apply for volunteer activities at the YANA Foundation: name, phone number, e-mail address, the selected activities in which you want to get involved, what you choose to tell us about yourself, as well as the additional data you communicate to us when you chat with a member of the Foundation;
2. the data completed by you in the Website when you choose to support the YANA Foundation by directing the percentage of 3.5% of the annual tax due;
3. the data filled in by you on the Site when you choose to support the YANA Foundation by donating an amount of money: name, surname, amount donated, e-mail address;
4. images of you and your volunteer story;
5. data resulting from browsing the Site and collected through cookies: details about them, how they work and deactivation are available in the Cookie Policy.

PURPOSES AND LEGAL BASIS OF PROCESSING

The purposes of personal data processing and the legal grounds are as follows:

1. communication with the YANA Foundation at your initiative or at the Foundation’s initiative for purposes related to its activity, such as the transmission of informative materials, invitations to the actions carried out, requesting support for the Foundation’s projects, activity reports, etc., based on your consent in this meaning, considering article 6 paragraph (1) letter a) of the GDPR;
2. taking the steps to become a volunteer of the Foundation and carrying out the volunteer activity, taking into account article 6 paragraph (1) letter b) of the GDPR;
3. supporting the Foundation through donations and/or directing the percentage of 3.5% of the annual tax due, taking into account article 6 paragraph (1) letter a) and letter b) of the GDPR;
4. fulfilling the legal obligations of the Foundation, considering article 6 paragraph (1) letter c) of the GDPR;
5. pursuing the Foundation’s legitimate interests, such as: organizing the Foundation’s activity, ensuring transparency and communicating the results of the Foundation’s activity, including by informing the relevant data subjects, resolving the requests/complaints received, defending/preserving the Foundation’s rights in the event of any litigation, bearing in mind see article 6 paragraph (1) letter f) of the GDPR.

If you do not want your personal data to be processed as specified in this document, please do not enter your data in the Site.

We specify that, when we base our data processing on your consent, you have the right to withdraw it at any time. The YANA Foundation will stop said processing as soon as possible (necessary to implement the change internally), but the legality of the processing activities carried out before the withdrawal is not affected.

PERSONAL DATA PROCESSING DURATION

Personal data are processed for a limited period of time, in relation to the processing purposes. For example, we process personal data for the duration of your consent or for the period provided by the legislation in force applicable to the Foundation. We will keep the proof of your consent for processing for a maximum period of 3 years from its withdrawal. At the end of the retention period, we will delete the personal data.

RECIPIENTS OF PERSONAL DATA

The personal data are intended for use by the Foundation exclusively for the purposes mentioned above and may transmit/provide access to them to the following recipients, if applicable:

1. central and local institutions/authorities in order to fulfill the operator’s legal obligations (e.g. ANSPDCP, ANAF, police, prosecutor’s office, etc.);
2. courts in order to formulate actions, defenses and representation in court;
3. volunteers of the Foundation and collaborators/providers of services used by the Foundation in its activity including, but not limited to areas such as IT, website hosting, accounting, legal, etc.

The YANA Foundation does not transfer personal data to countries outside the European Union or the European Economic Area (so-called third countries).

THE RIGHTS OF THE PERSONS CONCERNED

According to the applicable legal provisions (Articles 12-22 of the GDPR), the data subject has the following rights: access, rectification, deletion of data (“the right to be forgotten”), restriction of processing, data portability, opposition, to request and obtain the withdrawal, cancellation or re-evaluation of any decision taken regarding the data subject, which produces legal effects and is based exclusively on automatic processing (we specify that the YANA Foundation does not use an automatic decision mechanism in the processing carried out), to withdraw the consent for the processing of personal data based on this legal basis, to address the National Supervisory Authority for the Processing of Personal Data or a competent court.

If you believe that your rights have been violated, you can always submit a complaint/report to the National Authority for the Supervision of Personal Data Processing, based in Bucharest, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Romania, www.dataprotection.ro. You can also address the competent courts.