Effective Date: September 15, 2026
Global Romania is an initiative of Romanian United Fund ("RUF"), a charitable not-for-profit corporation incorporated in the state of Illinois, United States, and described as a public charity under section 501(c)(3) of the United States Internal Revenue Code. RUF respects your privacy. This Privacy Policy explains what data we collect through this website (the "Website"), how we use it, and what rights you have in connection with it.
RUF is the controller of the data collected through the Website.
Where we rely on your consent as the legal basis for processing your personal data, in accordance with Article 6(1)(a) of the GDPR, we will ask for it explicitly before collecting or using that data, for example when you apply for membership or contact us.
Providing consent is entirely optional; declining it will not prevent you from browsing the Website generally, though it may limit your access to certain features that require it.
You may withdraw your consent at any time, and future processing will stop accordingly; withdrawal does not affect the lawfulness of processing already carried out before that point.
For questions about this section or to withdraw your consent, see our contact details in Section 9.
The categories of data we collect depend on how you interact with the Website. We describe them below.
We collect personal information you choose to provide when you contact us — for example when you reach out to a local point of contact (PPOC) listed on the Website or email us at hello@globalromania.org about membership. Depending on what you include, this may cover your name, email address, city and country, and any other details you volunteer in your message, such as your professional background. The Website itself hosts no forms; we receive personal information only when you send it to us.
The Website does not currently use any third-party analytics tools. If we introduce one in the future, we will update this Policy and, where required, ask for your prior consent before any analytics cookies are placed.
When you visit the Website, our hosting infrastructure processes technical data such as your IP address, browser type, device information, and the pages you visit, as part of serving and securing the Website. We do not use this data to identify you individually.
We do not currently engage third-party analytics providers. Third parties referenced on the Website may provide embedded content, such as videos; embedded video content is loaded in privacy-enhanced mode, which does not place tracking cookies. Third parties cannot collect your personal information from the Website unless you provide it to them directly.
We use only strictly necessary cookies on the Website. A cookie is a small piece of data sent from a website and stored on your device while you browse that website. Strictly necessary cookies are essential for the Website to function and do not require your consent, in accordance with Directive 2002/58/EC (the "ePrivacy Directive").
The Website does not use analytics or other non-essential cookies, and therefore does not display a cookie consent banner. If we introduce non-essential cookies in the future, we will update this section and ask for your prior consent before placing them. You may also set your browser to refuse cookies or to alert you when cookies are being sent; if you disable cookies, some parts of the Website may not function properly.
The Website does not use page tags or web beacons. The Website does not currently respond to "Do Not Track" ("DNT") signals from your browser; because we place no non-essential cookies, there is nothing additional for a DNT signal to disable.
If you apply for membership, we use the information you provide to review your application, communicate with you about its status, and, if accepted, to manage your membership going forward.
If you contact us, whether through a local point of contact or by email, we use your information to respond to your message and address your request.
We may use your data to fulfill any obligations we may have toward you, for example those arising from your membership status or from any other arrangement between you and RUF, including communicating with you about updates, changes, or matters related to that arrangement.
We use the technical information described in Section 3.3 to keep the Website working, secure, and improving. This information does not identify you individually.
RUF takes the security of your personal data seriously. We use reasonable technical and organizational measures designed to protect the data we store, with access limited to those who need it to perform their role. However, no transmission of data over the internet or public networks can be guaranteed to be completely secure. If you suspect that your personal data has been compromised, please notify us using the contact information in Section 9.
In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR, except where the breach is unlikely to result in a risk to your rights and freedoms.
We select our third-party service providers carefully, based on their ability to process personal data in a manner consistent with the commitments set out in this Privacy Policy. Where required, we enter into data processing agreements with third-party processors, setting out the terms governing their processing activities and requiring them to implement appropriate technical and organizational security measures.
We retain personal data collected through membership inquiries and applications for 2 years from the date of collection, in accordance with the principle of storage limitation under Article 5(1)(e) of the GDPR, which requires that personal data be kept only for as long as necessary for the purposes for which it was collected. Once the applicable retention period expires, data is deleted or anonymized.
RUF is based in the United States. If you are located in the European Economic Area, using the Website or providing your data to us involves the transfer of your personal data to the United States, a country that has not been recognized by the European Commission as providing an adequate level of data protection. In such cases, we rely on appropriate safeguards under the GDPR, in particular the European Commission's Standard Contractual Clauses, to ensure that your data continues to benefit from a level of protection equivalent to that guaranteed within the EEA. You may request a copy of the safeguards we rely on by contacting us using the information in Section 9.
You have the right to confirm whether we are processing your personal data and, if so, to obtain access to it, including information about the categories of data processed, the purposes of processing, and the recipients to whom your data has been or will be disclosed.
You have the right to have inaccurate personal data corrected and incomplete personal data completed.
You have the right to request the deletion of your personal data, in particular where it is no longer necessary for the purposes for which it was collected or where you withdraw your consent and no other legal basis for processing applies.
You have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller, where technically feasible.
Where processing is based on your consent, you have the right to withdraw it at any time, as described in Section 2. Withdrawal does not affect the lawfulness of processing carried out before that point.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement. If you are located in Romania, the competent authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
To exercise any of these rights, please contact us using the information in Section 9.
For questions regarding this Privacy Policy or to exercise your rights, you may contact us at: hello@globalromania.org.
Use of the Website is permitted for individuals who meet the following minimum age requirements based on their location: at least 14 years old, for users accessing the Website from the United States; or at least 16 years old, for users accessing the Website from the European Union, in accordance with Article 8 of the GDPR.
If you do not meet the applicable minimum age, you are not permitted to use or provide any information to the Website, apply for membership, use any features of the Website, including any interactive or public comment features, or provide any information about yourself to RUF, including your name, address, telephone number, email address, or any screen name or username you may use.
Regardless of the above, the Website is not intended for children under thirteen (13) years of age, and RUF does not knowingly collect personal information from children under thirteen years of age. If RUF learns it has collected or received personal information from a child under thirteen years of age without verification of parental consent, RUF will delete that information. If you believe RUF might have any information from or about a child under thirteen years of age, please contact us using the information provided in Section 9.
To learn more about California residents' privacy rights, visit https://oag.ca.gov/privacy/ccpa. California's "Shine the Light" law (Civil Code section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us by using the information provided in Section 9.
Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:
– Confirm whether RUF processes their Personal Information.
– Access and delete certain Personal Information.
– Data portability.
– Opt-out of Personal Information processing for targeted advertising and sales.
– Correct inaccuracies in their Personal Information, taking into account the information's nature and processing purpose.
– Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
In the event of any changes to this Privacy Policy, a notice regarding such changes will be posted on the Website. Any change to this Privacy Policy will become effective when RUF posts the revised Privacy Policy on the Website. Your continued use of the Website following such changes means that you accept the revised Privacy Policy.