Data protection

Who is responsible for the data

The controller is the Freies Europa Weltanschauung Foundation, with its registered office at Satu Mare, str. Retezatului No. 39, Satu Mare County, CIF 26787560. For questions or to exercise your rights: office@freies-europa.ro.

Correspondence with the Foundation

Contact with the Foundation is by email. We process your email address, the subject and content of your message, and your name and organisation if you choose to provide them. The purpose is to understand the request, respond and, where appropriate, discuss cooperation.

The basis used for ordinary correspondence is the Foundation’s legitimate interest in communicating with people interested in its activities, under Article 6(1)(f) GDPR. Where processing is necessary to comply with a legal obligation, Article 6(1)(c) GDPR applies. Where processing is necessary to take steps at your request before entering into a contract to which you would be a party, Article 6(1)(b) GDPR applies.

For ordinary correspondence, providing data is voluntary. To understand the request and respond to you, we need a message and an email address. Do not send copies of identity documents or sensitive data that are not necessary for the request.

Who may receive correspondence and how long it is kept

Messages are accessible to authorised persons within the Foundation and are managed through the Google Workspace email service.

We retain correspondence for as long as necessary to deal with the request. Where messages document cooperation, a legal obligation or the defence of a right, the retention period is determined by that purpose and the applicable time limits; once retention is no longer necessary, the data are deleted or anonymised. These criteria do not replace statutory retention obligations.

Website operation and technical logs

The website consists of static pages and files, with no user accounts and no database containing visitor data. It is hosted on the Foundation’s server, and website traffic passes through Cloudflare’s network. To deliver pages and protect the website, Cloudflare, Inc., a US company, processes your IP address and technical request data, such as the address of the requested page and the browser type.

The Foundation’s web server does not keep a log of visits and does not record visitors’ IP addresses. When an error occurs, technical system logs may retain data about the request that caused it, such as the address of the requested page. These logs are deleted automatically through storage-based log rotation. These statements about logs concern the Foundation’s server, not processing within Cloudflare’s network. For data processed by Cloudflare on the Foundation’s behalf, Annex 1 to the Data Processing Addendum sets the retention limit at the expiry or termination of the contract, or the point when processing is no longer necessary to perform it, whichever occurs first, subject to applicable legal retention requirements.

The basis for the technical processing described here is the Foundation’s legitimate interest in ensuring the operation and security of the website, under Article 6(1)(f) GDPR.

Data transfers outside the European Economic Area

Google Workspace and Cloudflare may also process data outside the European Economic Area (EEA), including in the US. According to Google’s information on transfer mechanisms, transfers to the US covered by Google LLC’s certification rely on the EU–US Data Privacy Framework and the European Commission’s adequacy decision. The Google Workspace data processing terms provide for the standard contractual clauses adopted by the European Commission where a transfer is not covered by an applicable adequacy decision or another transfer mechanism provided for in those terms.

According to the Cloudflare Data Processing Addendum, for transfers to the US covered by its certification, Cloudflare relies on the EU–US Data Privacy Framework and the adequacy decision, subject to the conditions of Article 45(1) GDPR. For transfers not covered by an applicable adequacy decision, the Addendum provides for the standard contractual clauses adopted by the European Commission and the associated safeguards, subject to the conditions of Article 46(1) and (2)(c) GDPR.

You may ask the Foundation for details of the safeguards applicable to the configuration used and for a copy of them, as provided by law.

Cookies, search and request generators

The website does not use cookies, advertising tools or audience analytics tools. Cloudflare Web Analytics is disabled. Pages do not load scripts, fonts or other resources from third-party websites.

Website search and the catalogue run in the browser; queries are not sent to the Foundation or to third parties.

Data entered in the request generators in the ‘Rights in practice’ guides are processed in your browser and are not sent to the Foundation. Saving a draft on your device, in your browser’s local storage, is optional and is enabled only if you choose this option. You can delete the draft at any time. Sending the text through your own email application or an institution’s form is a separate action that you take outside the website.

External links open in new tabs. Those websites have their own data protection rules.

The website does not make automated decisions that produce legal effects on you or similarly significantly affect you, within the meaning of Article 22(1) GDPR.

People mentioned in published documents

In published copies of documents, anonymisation involves redacting individuals’ names, signatures, stamps, personal addresses and personal contact details. The name of the Foundation’s legal representative remains in the Foundation’s own applications; in court decisions, the names of judges, prosecutors and court clerks are also redacted. Institution names and official roles remain visible.

Publication of the legal representative’s name serves to document the Foundation’s actions, on the basis of its legitimate interest, under Article 6(1)(f) GDPR.

If you notice an anonymisation issue in a published document, report it to office@freies-europa.ro, providing a link to the document and identifying the passage concerned.

Your rights

Subject to the applicable legal conditions, you may request access to data, rectification, erasure or restriction of processing, under Articles 15–18 GDPR. The right to portability applies where the conditions of Article 20 GDPR are met.

You may object at any time to processing based on legitimate interests, on grounds relating to your particular situation, subject to the conditions of Article 21(1) GDPR.

You may lodge a complaint with the National Supervisory Authority for Personal Data Processing, subject to the conditions of Article 77(1) GDPR.

Write to office@freies-europa.ro to exercise your rights. A response is provided under the conditions and within the time limits specified in Article 12(3) and (4) GDPR.