Last updated: 6 November 2026
1. Who we are
This Privacy Policy explains how the Nawaf Salameh Foundation (hereinafter the “Foundation” or “we”) collects, uses and protects the personal data of persons who visit the website https://fundatia-nawafsalameh.ro (hereinafter the “Website”) or who come into contact with us.
For the purposes of Regulation (EU) 2016/679 (“GDPR”) and Law No. 190/2018, the Foundation is a data controller, whose identification details are as follows:
- Name: Nawaf Salameh Foundation
- Legal form: Romanian non-profit legal entity (foundation)
- Registered office: Bucov Commune, Pleasa Village, Prahova County, Romania
- Tax identification code (CIF): 15791140
- Registration: No. 6/2003 of 14.06.2003 in the Special Register of Non-Profit Legal Entities kept by Ploiești Court
- Correspondence address: 19A Nicolae Grigorescu Street, Otopeni, Ilfov County, postal code 075100, Romania
- E-mail: office@fundatia-alexandrion.ro
- Telephone: +40 21 405 11 00 · Fax: +40 21 405 11 99
For any matter relating to the protection of personal data you can write to us at office@fundatia-alexandrion.ro, marked “Data protection”, or at the correspondence address above.
2. What data we process
We process only the data we need, depending on how you interact with us:
- Browsing data: IP address, type of browser and device, operating system, pages visited, date and time of access, source of the visit – collected automatically by the server and, to the extent of the consent given, through cookies.
- Contact data: surname, first name, e-mail address, telephone number, the organisation you represent and the content of your message, when you contact us by e-mail, telephone or post (for example for information, collaborations, partnerships, sponsorships or press enquiries).
- Event-related data: identification and contact details of the guests, participants, nominees and laureates of the events organised by the Foundation, as well as images (photographs, video recordings) made on those occasions.
- Partner and beneficiary data: data of contact persons at partner organisations and, where applicable, of beneficiaries of the health, education and social programmes, to the extent that it is necessary for carrying out the projects.
We do not request special categories of data (for example, data concerning health) through the Website. Please do not send us such information by e-mail unless it is strictly necessary for a request and you have been informed beforehand.
3. Why we process data and on what legal basis
- Operation and security of the Website – our legitimate interest in providing a functional and secure website (Article 6(1)(f) GDPR); for strictly necessary cookies, Article 4(5) of Law No. 506/2004.
- Traffic statistics, preferences and marketing – your consent, given through the cookie banner (Article 6(1)(a) GDPR). You can withdraw it at any time.
- Responding to enquiries and correspondence – our legitimate interest in communicating with persons who contact us or, where applicable, steps taken prior to entering into a contract (Article 6(1)(b) and (f) GDPR).
- Organising events and promoting the Foundation’s activity – performance of arrangements with participants, our legitimate interest in documenting and publicly communicating the Foundation’s activity or, where the law so requires, the person’s consent (Article 6(1)(a), (b) and (f) GDPR).
- Carrying out partnerships, sponsorships and programmes – performance of contracts and compliance with legal obligations (Article 6(1)(b) and (c) GDPR).
- Legal obligations – for example accounting and tax records or responses to authorities (Article 6(1)(c) GDPR).
- Defence of the Foundation’s rights – our legitimate interest in establishing, exercising or defending a legal claim (Article 6(1)(f) GDPR).
We do not use your data for decisions based solely on automated processing, including profiling, which produce legal effects concerning you.
4. Cookies
The Website uses cookies and similar technologies, grouped into four categories: Functional (necessary for the operation of the Website, always active), Preferences, Statistics and Marketing. Cookies in the last three categories are placed only if you give your consent in the banner displayed on your first visit. You can change your options at any time in the preferences panel or in your browser settings. Details about each cookie can be found in the Cookie Policy.
5. To whom we disclose data
We do not sell or rent personal data. We may disclose it, strictly to the extent necessary, to:
- service providers (web hosting, IT maintenance and development, e-mail, web analytics services, photographers and production teams at events, legal and accounting advisers), who act as processors, under contracts that require them to maintain confidentiality and security;
- partners with whom we jointly organise events or programmes, to the extent that your participation so requires;
- public authorities and institutions, where we are required to do so by law;
- the general public, in the case of images and information about events, laureates and projects published on the Website or on the Foundation’s social media accounts.
The social networks to which the Website links (X, LinkedIn, Facebook, YouTube, Instagram) process your data in accordance with their own policies when you access them.
6. Transfers outside the European Economic Area
Some providers (for example web analytics services or social media platforms) may process data outside the EEA. In such cases we ensure that the transfer is carried out with the safeguards provided for by the GDPR: adequacy decisions of the European Commission (including the EU–US Data Privacy Framework) or standard contractual clauses.
7. How long we keep data
- Correspondence: for the time necessary to resolve the request and for no more than 3 years from the last communication, unless there is a legal reason for longer retention.
- Contract data and financial and accounting documents: for the periods laid down by accounting and tax legislation.
- Images from events: in the Foundation’s archive, as documentation of its activity, for as long as they are of interest to the history and public communication of the event, subject to your right to object.
- Cookies: for the period indicated in the Cookie Policy for each cookie.
When these periods expire, the data is deleted or anonymised.
8. Your rights
Under the GDPR, you have the following rights:
- the right of access – to find out whether we process your data and to receive a copy of it;
- the right to rectification – to have inaccurate or incomplete data corrected;
- the right to erasure (“the right to be forgotten”), in the cases provided for by law;
- the right to restriction of processing;
- the right to data portability;
- the right to object to processing based on legitimate interest, including to the publication of images;
- the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
- the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), 28–30 G-ral Gheorghe Magheru Blvd., Sector 1, Bucharest, postal code 010336, anspdcp@dataprotection.ro, www.dataprotection.ro.
To exercise your rights you can write to us at office@fundatia-alexandrion.ro or at the correspondence address. We respond within one month at most of receiving the request, a period which may be extended by a further two months for complex requests, with notice to you. To protect your data, we may ask you for additional information to confirm your identity.
9. Data security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction or disclosure: encrypted connection (HTTPS), access to data limited to persons who need it, confidentiality obligations for staff and collaborators, and regular updating of systems. However, no transmission over the internet is completely secure, so we recommend that you do not send us sensitive information by e-mail that is not necessary.
10. Minors
The Website is not aimed at children under 16, and we do not intentionally collect their data through the Website. For programmes or events in which minors take part, their data is processed only with the consent of their parents or legal representatives.
11. Changes to this policy
We may update this Privacy Policy from time to time. The version in force is the one published on the Website, and the date of the last update is shown at the beginning of the document. Significant changes will be clearly indicated on the Website.
12. Contact
- by post: 19A Nicolae Grigorescu Street, Otopeni, Ilfov County, postal code 075100, Romania
- by e-mail: office@fundatia-alexandrion.ro
- by telephone: +40 21 405 11 00