This Privacy Policy explains how fundatia egm romania ("we," "us," or "our"), a non-profit organization dedicated to training Christian leaders and providing resources for children and adolescents, collects, uses, stores, and protects personal information gathered through our website.

Acceptance of Terms
By accessing or using our website, you acknowledge and agree to this Privacy Policy and our website's Terms of Use. If you disagree with these terms, please do not use our website.

Information We Collect
Personal information, such as name and email address, may be collected when you engage with our website, including when you:
Register for events or programs.

• Subscribe to our newsletters or other communications.
• Request resources or materials.
• Make a donation or purchase materials under our subsidized model.
• Interact with forms or other website features.

Purposes of Data Collection and Processing
Personal data is collected and processed for the following purposes:
Register for events or programs.

• To provide information about our training programs, resources, events, and initiatives related to training Christian leaders and ministering to children and adolescents.
• To manage participation in programs and events.
• To send communications, newsletters, updates, and promotional materials related to our activities, where consent has been provided.
• To process orders for materials under our subsidized model.
• To improve the content, functionality, and user experience of our website.
• To comply with legal and regulatory obligations under Romania's Personal Data Protection Act (PDPA).

Legal Basis for Processing
Under Romania's Personal Data Protection Act (PDPA), the primary legal basis for processing personal data is the informed consent of the data subject. Explicit consent will be obtained before collecting or processing personal data, unless processing is necessary for:

• Fulfilling a contractual or pre-contractual obligation.
• Exercising state powers or complying with legal obligations.
• Safeguarding vital interests.
• The legitimate interests of our organization, provided these interests do not override rights and freedoms, especially if you are a minor.

Data Retention
Personal data will be retained only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. When data is no longer necessary, it will be securely deleted or anonymized. Data may be retained longer for statistical, archival, or research purposes, provided appropriate safeguards are in place to protect privacy.

Data Sharing and Disclosure
Personal data will not be shared or disclosed to third parties without explicit consent, unless it is necessary to fulfill a legal obligation or the transfer is otherwise permitted under Romania's PDPA. Data may be shared with:

• Service providers assisting with website operations, program delivery, or data storage, under strict confidentiality agreements.
• Government agencies or regulatory authorities when required by law or a court order.

International Data Transfers
As Fundatia Egm Romania operates within Romania, data is primarily processed domestically. If personal data is transferred internationally, it will only be transferred to countries that offer an adequate level of data protection as determined by Romania's Data Protection Authority, or where appropriate safeguards (such as Standard Contractual Clauses or Binding Corporate Rules) have been implemented to ensure data is protected according to Romania standards. Information about such transfers and the measures taken to safeguard data will also be provided.

Data Security Measures
We are committed to protecting personal data and employ robust technical and organizational security measures to safeguard it against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to, encryption, access controls, secure storage solutions, and regular vulnerability assessments.

Your Data Protection Rights
In accordance with Romania's Personal Data Protection Act (PDPA), you have the following rights regarding personal data:

• Right to Access:You can request confirmation of whether personal data is being processed and obtain a copy of the information held.
• Right to Rectification:You can request the correction of inaccurate or incomplete personal data.
• Right to Deletion (Right to be Forgotten):You can request the deletion of personal data when it is no longer necessary or when processing is unlawful.
• Right to Object:You can object to the processing of data based on legitimate interests or for direct marketing purposes.
• Right to Data Portability:You can obtain a copy of data in a structured, commonly used, and machine-readable format and have it transmitted to another data controller, where technically feasible.
• Right to Lodge a Complaint:You have the right to file a complaint with the Romaniae Data Protection Authority (Agencia de Acceso a la Información Pública - AAIP) if you believe your rights have been violated.

To exercise these rights or make any inquiries about personal data, please contact us at: \afundatia@gmail.com. The request will be responded to within the timeframe stipulated by the PDPA, which is generally within 10 days for access requests.

Updates to This Privacy Policy
This Privacy Policy may be updated or modified at any time, with or without prior notice, to reflect changes in data processing practices or legal requirements. Any changes will be posted on this page and will become effective immediately upon posting. Continued use of the website after modifications indicates acceptance of the revised Privacy Policy. Review this policy periodically.

Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or data handling practices, please contact:

• Asociación Civil Para Cada Generación (fundatiaegm Romania)
• afundatia@gmail.com
• Str. Lotrului, No. 2, Oradea, Jud. BH
• 9869999945

To exercise these rights or make any inquiries about personal data, please contact us at: \afundatia@gmail.com. The request will be responded to within the timeframe stipulated by the PDPA, which is generally within 10 days for access requests.