Privacy policy

Who the data controller is

The controller of data collected through this site is the People and Deeds Foundation. The Foundation’s full identifying details will be published here once its official registration documents are complete. For any question about your personal data, write to contact@oamenisifapte.org.

What data we collect

We collect only the data you enter into one of the site’s forms. We do not build profiles, buy data or use cross-site tracking technologies.

• Contact form: name, email, optional phone and organisation, subject and message.
• Volunteer form: name, age, location, contact details, skills, availability and — for volunteers under 18 — the name and email of a parent or legal guardian.
• “A Book for Every Child” form: the name and contact details of the requesting adult, the child’s first name and age, and a delivery address. We do not ask for the child’s surname, date of birth, school or photographs.
• Funding application: the applicant organisation’s details, the contact person’s details, project information and any uploaded documents.
• Partnership form: organisation, contact person and message.
• Donations: handled entirely by Stripe. Stripe may pass us your email address for confirmation, but card details never reach our servers.

Why we use it, and on what basis

We use the data only to act on your request: to reply to your message, contact you about volunteering, post the book, assess a funding application or discuss a partnership.

The legal basis is your consent, given by ticking the box on the form, and — for funding applications — our legitimate interest in assessing and administering the applications we receive.

Who we share it with

We do not sell or rent personal data. We share it only with the suppliers that let us operate: the email service through which we receive form submissions, Stripe for payment processing, and the postal service for book deliveries. Each receives only the minimum it needs.

How long we keep it

Contact messages and book requests are kept for as long as needed to deal with them, then for a maximum of 12 months. Volunteer applications are kept for the duration of the collaboration and 12 months afterwards. Funding applications are kept in line with applicable accounting and reporting obligations. Transaction data is retained by Stripe under its own policy.

Children’s data

The “A Book for Every Child” programme is for children, but the request is always completed by a parent or legal guardian, who confirms this explicitly. We collect the strict minimum needed to post the book, and we never publish a child’s name, image or details.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw your consent at any time. To exercise these rights, write to contact@oamenisifapte.org. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP).

Security

The site is served over HTTPS. Forms are validated on the server, protected against automated submissions and rate-limited per connection. Documents uploaded with funding applications are emailed to the Foundation and are not stored publicly on this site.