This policy explains what personal data we collect through this website, for what purpose, and what rights you have over it, under Regulation (EU) 2016/679 (GDPR).

Who is the data controller

The „MEMORIA CETĂȚII” ALBA IULIA Association, with its office in the Vauban Citadel — str. Cetății no. 14, Alba Iulia, Alba County, Romania. For any request concerning your data, write to the e-mail address in the Contact section.

What data we collect and why

  • Contact form: name, e-mail address and the content of your message — so that we can reply. Legal basis: our legitimate interest in communicating with people who write to us.
  • Membership application: name, e-mail, phone, areas of interest — for the Board to review the application and for the register of members. Legal basis: your consent and, after approval, the performance of the membership relationship.
  • Volunteering form: name, e-mail, phone, availability — to contact you and conclude the volunteering contract required by Law no. 78/2014.
  • Technical data: the site uses cookies strictly necessary for its operation (session, form security). We use no advertising cookies.

How long we keep the data

Contact messages: 2 years at most. Rejected or withdrawn applications: 1 year. Data of members and volunteers: for the duration of membership/volunteering and afterwards according to statutory archiving periods.

Who we share data with

We do not sell or rent personal data. It can be accessed only by the people in the association who need it and by our hosting provider, acting as a processor. Disclosure to authorities happens only where the law requires it.

Your rights

  • The right of access to your data
  • The right to rectification of inaccurate data
  • The right to erasure (“the right to be forgotten”)
  • The right to restriction of processing
  • The right to data portability
  • The right to object
  • The right to withdraw consent at any time
  • The right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

You may exercise any of these rights through a simple e-mail request. We reply within 30 days.

Changes to this policy

If we change this policy, we publish the updated version on this page, together with the date of the change.