Privacy policy

1. Who we are

The data controller is Czegei Wass – Casa Tulipán Cultural Foundation, a residential centre for the care and assistance of elderly people.

Address: Com. Aluniș, sat Lunca Mureșului nr. 65/b, Județul Mureș, 547037, Romania. Phone: 0742 655 649.

For any question about your data, write to us at the address above or call us.

2. What we collect through the contact form

When you send us a message through the form on this site, we collect your name and email address, and the text of your message if you fill it in. The message field is optional.

We use this data for one purpose: to reply to you. The legal basis is your consent, given by ticking the box on the form — Article 6(1)(a) GDPR.

The message goes straight to the centre's email inbox. We do not store it in a database, we do not use it for marketing, and we make no automated decisions based on it.

We keep the messages we receive for at most 12 months, after which we delete them. The exception is correspondence that becomes part of a care relationship, in which case the data is handled separately, under the contract and our legal obligations.

You can withdraw your consent at any time using the contact details in section 1. Withdrawal does not affect processing carried out before it.

3. Security and protection against automated messages

The form is protected by Cloudflare Turnstile, a service that tells real visitors apart from automated programs sending spam. To do this, Cloudflare receives your IP address and technical information about your browser and device.

The servers hosting the site likewise record IP addresses and requests, to prevent abuse and keep the site available.

The legal basis is our legitimate interest in keeping the site working and free of automated messages — Article 6(1)(f) GDPR.

4. Who we share the data with

We do not sell your data and we do not pass it to anyone for advertising. It is processed on our behalf only by the providers we need for the site and the form to work:

• Cloudflare — hosting the site and protecting the form against spam;
• Resend — delivering the message from the form to our email inbox;
• Google — showing the map with the centre's location.

The map loads directly from Google's servers, at the moment you scroll to the section where it appears. To do this, Google receives your IP address and technical information about your browser. The map sets no cookies on your device. If you would rather it did not load, simply do not scroll to it; the centre's address is also written out as text, and the directions link does not contact Google unless you click it.

All three providers are United States companies. Transfers outside the European Union are made under the Standard Contractual Clauses approved by the European Commission, which provide the safeguards required by the GDPR.

5. Cookies and local storage

This site uses no tracking, advertising or traffic-analytics cookies. We have no statistics tools and we do not follow visitors from page to page.

We use only what is strictly necessary for the site to work:

• the text you type into the form is kept temporarily in your own browser so it is not lost if sending fails; it is cleared when the session ends;
• the acknowledgement that you have read the cookie notice is kept in your own browser so we do not show it again;
• Cloudflare may set strictly necessary cookies for the form's security check.

None of this requires consent, because without it the service you asked for cannot work.

6. Your rights

Under the GDPR you have the following rights over your data:

• the right of access — to find out what data we hold about you;
• the right to rectification — to have inaccurate data corrected;
• the right to erasure;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to withdraw your consent at any time.

You can send any request by post to the address in section 1, or by phone on 0742 655 649. We reply within one month at the latest.

If you believe we have breached your rights, you can lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (A.N.S.P.D.C.P.), Bd. G-ral. Gheorghe Magheru nr. 28-30, sector 1, 010336 București, www.dataprotection.ro.

7. Changes to this policy

If we change this policy, we update the date below and publish the new version on this page.