Privacy Policy

Last updated: September 4, 2026

1. Who we are

This privacy policy is issued by Avans Proiect Association (AVAPRO), a non-governmental, non-profit, apolitical organization, headquartered in Sibiu, Sibiu County, 550000, Romania.

• Tax ID: 54392841
• National NGO Registry: No. 18/I/A/2026
• CAEN: 8559 – Other forms of education n.e.c.
• Email: radu@avansproiect.ro
• Phone: +40 770 276 406

Under Regulation (EU) 2016/679 (GDPR), Avans Proiect Association acts as the data controller for personal data collected through avansproiect.ro.

2. What data we collect

We do not collect personal data through simple browsing, other than what is described in the "Cookies" section below. We collect personal data only when you voluntarily fill in the contact form, namely:

• First and last name
• Phone number and email address
• Reason for contact (e.g. sponsorship, partnership, membership, project proposal, consultation request, volunteering, etc.)
• Additional fields depending on the reason selected — for example your organisation, field of activity, estimated availability, or the content of your message

3. Purpose of processing

We use the data submitted through the form exclusively to:

• respond to your request (information, partnership, sponsorship, membership, consultation, volunteering, etc.);
• contact you further regarding the subject you wrote to us about;
• manage the relationship with the association's members, partners, sponsors and volunteers.

We do not use this data for unsolicited marketing and we do not sell it.

4. Legal basis for processing

We process your data based on your consent, given by ticking the dedicated checkbox in the form (Art. 6(1)(a) GDPR), and, for further communication strictly related to your request, based on the association's legitimate interest in responding to people who contact it (Art. 6(1)(f) GDPR).

5. Who we share data with

Data submitted through the form is technically processed via Formspree (Formspree, Inc.), the service that forwards messages received through the contact form directly to our email. Formspree acts as a data processor, not as an independent recipient — it does not use this data on its own behalf.

If you choose to make a donation, the payment is processed entirely by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.), on PayPal's own payment page, outside our website. We never receive, see, or store your card details — these remain exclusively with PayPal, under PayPal's own privacy policy.

Other than these two technical providers, we do not transfer, sell or rent your data to third parties for marketing or advertising purposes. Data may be disclosed to public authorities only where the law expressly requires it.

6. Data retention

We keep the data from the contact form for as long as necessary to resolve your request and, afterwards, for an additional period of up to 24 months from the last contact, unless the law requires a different period or you request earlier deletion of your data, as described in section 8 below.

7. Cookies

On your first visit, a consent banner informs you and asks for your agreement before placing any non-essential cookie. You can accept all, reject all, or customise your choice by category, and you can change your choice at any time from the 🍪 button present on every page of the site. The categories used are:

• Essential — the avapro_consent cookie, which stores your cookie choice for 365 days. It does not require consent, as it is strictly necessary for the site to function.
• Analytics — Google Analytics 4, with IP anonymisation, used to understand site traffic (pages visited, visit source). It only loads if you choose "Accept all" or explicitly tick "Analytics" when customising. Google may transfer data to servers located outside the EU/EEA, based on the Standard Contractual Clauses approved by the European Commission.
• Marketing — a category available in the banner (Meta/Facebook Pixel), but not currently configured on the site — even if you accept it, no such script currently loads.

8. Your rights

Under GDPR, you have the following rights regarding your personal data:

• the right of access to your data;
• the right to rectification of inaccurate data;
• the right to erasure ("the right to be forgotten");
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing;
• the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• the right to lodge a complaint with the supervisory authority.

To exercise any of these rights, write to us at radu@avansproiect.ro. We will respond as soon as possible, within the timeframes provided by law.

9. Data security

The site is served exclusively over a secure connection (HTTPS). We take reasonable technical and organisational measures to protect data submitted through the form against unauthorised access, loss, or accidental disclosure.

10. Supervisory authority

If you consider that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with:

• The National Supervisory Authority for Personal Data Processing (ANSPDCP), Romania
• 28-30 Gen. Gheorghe Magheru Blvd., Sector 1, Bucharest, postal code 010336
• Tel: +40.31.805.9211 · Email: anspdcp@dataprotection.ro · www.dataprotection.ro

If you are located in another EU/EEA country, you may also lodge a complaint with your local data protection authority.

11. Changes to this policy

We may periodically update this privacy policy, for example when we change the site's features or the technical services we use. The date of the last update is shown at the top of the page.