How we use the information you send us through this website.
Last updated: November 2026
The data controller is ASOCIAȚIA PLEDOARIE PENTRU DEMNITATE – CENTRUL PENTRU MONITORIZARE ȘI JUSTIȚIE SOCIALĂ, tax identification number (CIF) 55142363.
For questions about how we process data or to exercise your rights, write to us at contact@fordignity.ro.
This policy covers the use of the fordignity.ro website, correspondence and reports sent through the channels shown on the site. For interventions or activities that involve further processing, we give you the specific information you need.
Depending on how you interact with us, we may process:
Reports may contain data about health or disability and other information that needs greater protection.
Please send only the data needed to understand the situation, and avoid including your personal numeric code (CNP), copies of identity documents or full medical records unless they are needed and have been requested through a suitable channel.
Data may come directly from you or, as part of a report, from people who raise a possible rights violation: family members, support persons, representatives, professionals or organisations.
If we receive data about you from someone else, we meet the information obligations of Article 14 GDPR, subject to the applicable legal exceptions. Publishing this policy does not, in every case, replace informing you individually.
We use the data to reply to messages, review reports, assess the options for intervention and take the steps that the reported situation justifies.
For general correspondence and the initial assessment of reports, the processing of ordinary data may rely on the association's legitimate interest in receiving and reviewing reports about respect for rights, under Article 6(1)(f) GDPR, with due regard for the rights of the people involved.
When processing relies on consent, we ask you for specific consent, which you can withdraw. For legal obligations or contractual steps, we use the corresponding legal bases, where they apply.
Legitimate interest alone is not enough for processing health data or other special categories of data. For these we also check that a condition of Article 9 GDPR applies, such as the explicit consent of the data subject or the need to establish, exercise or defend a legal claim.
If the report concerns another person, your consent does not replace theirs. We assess separately the conditions under which we can use the information received and, where needed, ask for clarification or limit the processing.
Data relating to criminal convictions and offences is subject to the special conditions of Article 10 GDPR.
Access is limited to authorised people who need the information to handle the request, and to technical providers, to the extent needed for the services they provide.
Depending on the case, and only as the law allows, data may be shared with the competent authorities, courts, professionals involved in assistance or other recipients needed for the action taken. Sharing is limited to the relevant information and requires checking the legal basis and, for sensitive data, the additional condition that applies.
Publishing reports does not mean that reports or people's identities are published automatically. For public communication we use anonymised information wherever possible.
The website loads a Cloudflare Insights script to measure page use and performance, described on the Cookies page.
Our hosting providers are:
Our form and email providers are:
These providers may process data outside the European Economic Area, including in the United States. In those cases the transfer relies on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, under which Cloudflare and Google are certified, and on the standard contractual clauses adopted by the European Commission.
We keep data for as long as needed to handle the request and any resulting action. To set the period we take into account the nature of the case, legal obligations, the applicable limitation periods and the need to preserve evidence.
We review whether the data still needs to be kept, and delete or anonymise it when identifying people is no longer necessary.
Under the GDPR you can ask for access to your data, rectification, erasure, restriction of processing and, where the legal conditions are met, data portability.
You can object to processing based on legitimate interest, on grounds relating to your particular situation.
You can withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.
Write to us at contact@fordignity.ro.
More information is available on the Data protection page.