Privacy policy

Purpose of processing

We collect personal data strictly for two legitimate purposes: (1) to keep you informed about the progress of rebuilding Cabana Gențiana, through notifications you voluntarily subscribe to, and (2) to facilitate donations to the project once the non-profit association is officially registered and can receive funds with full legal safety. We do not use your data for behavioural profiling, we do not sell it, and we do not share it with third parties for advertising purposes. Every communication includes a clear unsubscribe link, and on request we delete your data completely within 30 days at most.

Data we collect

We limit collection to the minimum necessary for each purpose. Below you find every category of data we keep about you, in the order it enters the system. No other type of data is collected without additional explicit consent.

• Email address — when you subscribe to the notification list or send a pledge. We use it only to send you project updates and to confirm your pledge, never for unsolicited marketing.
• First and last name, intended amount in EUR, and an optional message — when you fill in the pledge form. These data help us estimate community support and contact you back when donations become officially available.
• SHA-256 cryptographic hash of your IP address — derived from a server-side secret salt and used solely for automated abuse limiting (rate limiting). The raw IP is never stored in the database and cannot be reconstructed from the hash.

Legal basis

We process your data on two grounds set out by the General Data Protection Regulation (Regulation EU 2016/679, hereinafter "GDPR"). For notifications and pledges — your freely given consent (Art. 6.1.a GDPR), granted explicitly when you complete and submit the form. For the IP hash used to limit abuse — our legitimate interest in protecting the service against automated attacks and ensuring availability for all users (Art. 6.1.f GDPR). You may withdraw your consent at any time, without giving reasons, by email or by using the unsubscribe link present in every communication.

Retention period

We apply the principle of data minimisation: we keep data only for as long as we have a legitimate reason. Email addresses for notifications are kept until you unsubscribe or until you ask for explicit deletion. Pledges (pre-pledges) are kept until the rebuilding project is completed, or for at most five years from submission. IP hashes used for rate limiting are rotated and automatically deleted after six months. When the project closes, all data is permanently deleted within 90 days, except for financial documents that the law requires us to keep for 10 years.

Your rights

Under GDPR you have the following rights: access (to know what data we hold about you), rectification (to correct inaccurate data), erasure — the "right to be forgotten" (Art. 17 GDPR), restriction of processing, portability (to receive your data in a structured, machine-readable format), objection, and withdrawal of consent at any time. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, www.dataprotection.ro). Send your request by email — we reply within 30 calendar days at most.

Processors (sub-processors)

We use a small number of external providers ("processors" within the meaning of Art. 28 GDPR) to operate the Site. All of them are selected for their GDPR compliance and are contractually limited to processing data strictly for the purposes described above.

• Resend (https://resend.com) — sends transactional emails such as subscription confirmations and project updates. Data transmitted: email address, your name, and message contents. Stored on servers within the European Union.
• Stripe Payments Europe Limited (https://stripe.com) — processes card payments once donations become active. Data transmitted: name, email, donation amount. Stripe is an EU-licensed payment processor and is PCI DSS Level 1 certified.
• Fly.io (https://fly.io) — hosts the web application, the PostgreSQL database, and the logging system. All data remains in the Frankfurt (EU) region, in line with the European data localisation principle.

Cookies

We use only cookies that are strictly necessary for the functionality of the Site — primarily for the admin session, for protection against CSRF attacks, and to remember your language preference (RO/EN). We do not use tracking, marketing, or behavioural profiling cookies. We do not embed advertising networks or social-media pixels. For aggregated analytics we use PostHog Cloud (EU region) in cookie-less mode, which sets no cookies, writes nothing to local storage, and does not identify individual users; the Do-Not-Track browser header is honoured. Any optional opt-in features (such as session recording) would only be activated after an explicit notice on this page and a separate consent.

Contact

For any request regarding your personal data — access, rectification, erasure, restriction of processing, portability, objection, or withdrawal of consent — please write to the email address shown in the "Data controller" section above. We reply within 30 calendar days from receiving the request, in writing or by another durable medium. If our reply does not satisfy you, you have the right to address the Romanian Data Protection Authority (ANSPDCP) directly or to bring a court action against us, in accordance with Articles 77 to 79 of the GDPR. We provide reasonable accommodation for requests made through accessibility channels.