Construim locuințe, comunități și speranță We build homes, communities and hope
Privacy Notice

Last updated: 19.02.2025

This Privacy Notice explains how Habitat for Humanity Romania collects, processes, and protects your personal data. It applies to all personal data processing activities carried out by us, including your interactions with our website, www.habitat.ro.

We are committed to providing a safe, secure, and positive experience whenever you engage with our projects, programmes, websites, or digital services. As part of our activities, we may provide information about our work and that of our partners through newsletters, event invitations, campaigns, and other communications (collectively referred to as the “Newsletter”).

What Personal Data We Collect

We collect and process only the personal data necessary to provide you with the best possible experience when participating in our projects and using our website. Depending on how you interact with Habitat, we may collect and process the following categories of personal data:

  • Identification data: full name, username.
  • Contact details: postal address, telephone number, email address.
  • Identity verification data: where required to enter into a contract or when you make a donation or redirect a portion of your income tax to Habitat through the relevant tax forms, we may collect identity document details (such as ID series and number, Personal Numeric Code (CNP), and other legally required information).
  • Account and participation information: information you provide when creating a user account on our website, registering or updating your details, subscribing to or unsubscribing from our Newsletter, or registering for and participating in events organised or supported by Habitat.
  • Event-related information: personal data collected during visits to our offices or participation in events organised by Habitat and/or our partners, which may include photographs and video recordings of activities and access to these locations.
  • Financial information: bank account details and other financial information where necessary to establish or manage a contractual relationship.
  • Technical data: including your IP address and information about your use of our website, applications, newsletters, and other communications sent by email, telephone, or through your user account.
  • Additional information: any other personal data you choose to provide to us.

If you apply for a job with Habitat, we will process the personal data necessary for the recruitment process. This may include identification information (such as your full name, gender, and date of birth), contact details (telephone number, postal address, and email address), as well as any other information you provide through your application forms, CV, or supporting documents submitted either in person or electronically.

We collect personal data in both electronic and paper format. Most of the information we process is provided directly by you, although we may also obtain information from publicly available sources where appropriate. We may collect your personal data when you:

  • register for or participate in one of our projects or programmes;
  • create a user or participant account on our website;
  • subscribe to our Newsletter; submit Form 230 to redirect a portion of your income tax to Habitat;
  • make a donation through our website;
  • contact us by email to enquire about our events, employment opportunities, partnerships, or collaborations;
  • meet us at an event and exchange business cards or professional contact details; or register to access other information or services available through our website.

Purposes of Processing and Legal Basis

Providing personal data is mandatory where it is necessary for us to comply with legal or contractual obligations. In such cases, if you do not provide the required personal data, we may be unable to enter into or manage our contractual relationship with you or fulfil our legal obligations.

In all other cases, providing personal data is voluntary, and you are under no obligation to provide it.

Whenever we collect and process your personal data, we will inform you of the specific purpose and legal basis for the processing. Examples include:

Participation in our projects and events

We process the personal data you provide when registering for and participating in our projects, programmes, campaigns, and events, as well as any additional information necessary to manage your participation. This processing is carried out in accordance with applicable legislation governing volunteering, sponsorships, and contractual relationships.

Redirecting a percentage of your income tax (Form 230)

If you choose to redirect a percentage of your income tax to Habitat by submitting Form 230, we process only the personal data required by the competent authorities to complete and submit the form, including your name, address, and other tax-related information required under applicable law.

Online donations

When you make a donation through our website, we collect the information necessary to process your payment and verify your payment method. Habitat does not store your payment card details. Card payments are processed securely by an authorised third-party payment processor located within the European Union.

Newsletters and other communications

If you are already participating in our programmes, using our services, or have contacted us regarding volunteering or professional collaboration, we may send you newsletters, updates, and invitations to Habitat and partner events based on our legitimate interest in keeping you informed.

If you wish to subscribe to our Newsletter, we will ask for your consent at the time of subscription, whether through our website or another registration method. You may withdraw your consent at any time.

Promotional, educational, scientific, and professional events

When organising events for promotional, educational, scientific, or professional purposes, we may collect photographs and video recordings of participants and activities taking place during the event.

Recruitment

If you apply for a job or internship with Habitat, we process the personal data necessary to manage the recruitment process and assess your suitability for the position.

The processing of your personal data during recruitment is carried out as part of the pre-contractual steps taken at your request before entering into an employment contract and, where applicable, to comply with our legal obligations.

To improve and streamline our recruitment process, we also retain records of candidates who have participated in previous recruitment procedures, including the reasons why an application was unsuccessful, based on our legitimate interest.

Applying for a position

When vacancies are available, you may submit your application by email, in person at our offices, or through the dedicated careers section of our website.

If you apply through our website, we will ask you to provide the following information:

  • full name and identification details;
  • postal address;
  • email address;
  • telephone number;
  • CV or résumé.

We use this information to:

  • administer and manage the recruitment process;
  • assess your qualifications and suitability for the role;
  • contact you regarding your application;
  • inform you about future employment opportunities that may be relevant to your profile;
  • maintain records of previous recruitment processes and their outcomes.

Legal Basis for Processing

Depending on the purpose of processing, Habitat processes personal data on one or more of the following legal bases:

  • Performance of a contract or pre-contractual measures, including participation in our projects, processing donations, managing income tax redirection forms, and recruitment procedures.
  • Compliance with legal obligations, including obligations relating to financial reporting, taxation, anti-money laundering legislation, and other applicable legal requirements.
  • Consent, where required, for example when you subscribe to receive our Newsletter or other marketing communications.
  • Legitimate interests, including responding to your enquiries, improving our projects and services, maintaining communication with participants and supporters, and managing and improving our recruitment processes.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding the processing of your personal data:

Right to withdraw consent

Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before your consent was withdrawn.

Right to rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it at any time. We take reasonable steps to ensure that the personal data under our control is accurate, complete, up to date, and relevant based on the most recent information available to us.

Right to restriction of processing

You may request that we restrict the processing of your personal data in the following circumstances:

  • if you contest the accuracy of your personal data, for the period required to verify its accuracy;
  • if the processing is unlawful and you request restriction instead of erasure;
  • if we no longer need your personal data, but you require it for the establishment, exercise, or defence of legal claims;
  • if you have objected to the processing while we verify whether our legitimate grounds override your interests.

Right of access

You have the right to request information about the personal data we hold about you, including:

  • the categories of personal data processed;
  • the purposes for which it is processed;
  • the source of the data, where it was not collected directly from you;
  • the recipients or categories of recipients with whom it has been shared, where applicable.

You are entitled to receive one copy of your personal data free of charge. We reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests, as permitted by applicable law.

Right to data portability

Where processing is based on your consent or on the performance of a contract, you may request to receive your personal data in a structured, commonly used, and machine-readable format or request that it be transferred directly to another data controller, where technically feasible.

Right to object

You have the right to object at any time to the processing of your personal data where such processing is based on our legitimate interests and relates to your particular situation.

In such cases, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.

When exercising this right, please let us know whether you are requesting the erasure of your personal data or the restriction of its processing.

Right to lodge a complaint

If you believe that your personal data has been processed in breach of applicable data protection legislation, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or with another competent supervisory authority.

Right to erasure (“Right to be Forgotten”)

You may request that we erase your personal data where:

  • the data is no longer necessary for the purposes for which it was collected; you object to the processing and there are no overriding legitimate grounds for continuing it;
  • your personal data has been processed unlawfully;
  • you withdraw your consent where processing is based solely on your consent.

However, we may retain your personal data where processing is necessary:

  • to comply with a legal obligation, including statutory record-retention requirements;
  • for the establishment, exercise, or defence of legal claims. We aim to respond to all requests concerning your rights within one month.

Where permitted by law, this period may be extended if your request is particularly complex or if we receive a large number of requests.

In certain circumstances, we may be unable to provide access to some or all of your personal data where legal restrictions apply.

If we refuse your request, we will explain the reasons for our decision. If we are unable to identify you based on the information provided in your request, we may ask you for additional information to verify your identity before processing your request.

To exercise any of your rights or if you have any questions regarding this Privacy Notice or the processing of your personal data, please contact us in writing at dataprotection@habitat.ro.

Data Retention

Where we have a contractual relationship with you, we will retain your personal data for the minimum period required by applicable law, calculated from the date on which the contractual relationship ends.

If you have subscribed to receive our Newsletter, we will retain your personal data for two (2) years from your last interaction with our communications. After this period, we will ask you to renew your consent if you wish to continue receiving our Newsletter. You may withdraw your consent and unsubscribe at any time, after which we will stop processing your personal data for this purpose.

If you have made a donation or redirected a percentage of your income tax to Habitat by submitting Form 230, we will retain your personal data for five (5) years, in accordance with the applicable tax limitation period.

If you contact us through our website regarding an event, enquiry, or any other matter, we will retain your personal data for three (3) years.

Personal data collected during recruitment and retained for the purpose of improving and documenting our recruitment processes will be stored for six (6) months from the date of your application.

Sharing Personal Data

As a general rule, we do not disclose or transfer your personal data to third parties.

Exceptions may apply where disclosure or transfer is necessary within the Habitat for Humanity network, required to provide our services, or where we are legally obliged to do so. Unless prohibited by applicable law, we will inform you of such disclosure or transfer as soon as reasonably possible.

Whenever we share your personal data with third parties, we do so in accordance with applicable data protection legislation and implement appropriate measures to ensure the confidentiality, integrity, and security of your personal data.

We may engage trusted third-party service providers (data processors) to process personal data on our behalf. These may include IT service providers, database and CRM providers, accounting service providers, event organisers, and other professional service providers.

Habitat enters into appropriate data processing agreements with all such service providers to ensure that they process personal data only on our instructions, comply with applicable data protection legislation, and implement appropriate technical and organisational measures to protect personal data.

Cookie Policy

Our website uses cookies to improve your browsing experience and the functionality of our website.

Where required by applicable law, cookies are used based on your consent, which you may provide through your browser settings or via our website’s cookie consent banner.

For more information about how we use cookies and how you can manage your preferences, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect the personal data we process against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures include physical and electronic security safeguards, secure IT infrastructure, and internal procedures governing access to personal data, as well as processes for detecting, reporting, and documenting personal data breaches.

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) and, where required by law, inform you without undue delay.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our activities, legal requirements, or data protection practices.

We encourage you to review this page periodically. Any updates will be published on this page and will replace the previous version of the Privacy Notice.

Contact Us

If you have any questions about this Privacy Notice or the way we process your personal data, please contact us using one of the methods below:

Email: dataprotection@habitat.ro

Postal address:

Habitat for Humanity Romania 45A

Naum Râmniceanu Street, 1st Floor, Apartment 3

District 1, Bucharest 011616 Romania