1. Data controller
The data controller is Asociația Alpha Leadership, tax identification number 35543352, registered in the Romanian Register of Associations and Foundations under no. 134/2015.
For questions or to exercise your data-protection rights, write to us through the contact page .
2. Data we process
Depending on how you use the website, we may process:
- your name, email address and the content of a message you choose to send;
- any other information you voluntarily include in correspondence;
- technical data needed to deliver and secure the website, such as IP address, request date and time, requested page, browser type and network information;
- Please do not use the form to send sensitive data or information about other people unless necessary and you are entitled to do so.
3. Contact form
When you press “Send message”, your name, email address and message are transmitted securely to the Cloudflare infrastructure serving this website and sent through Brevo, our transactional email provider, to the Association’s contact address. Your address is used for replies and is not automatically added to a marketing list.
Completing and sending the form is optional. Your name, email address and message are needed to manage the request; without them, the form cannot proceed. You may also contact us directly using the details published on the website.
4. Purposes and legal bases
The website does not use form data for advertising, profiling or automated decisions and sends no marketing communications without a separate legal basis.
| Purpose | Legal basis |
|---|---|
| Answering questions and managing correspondence | Legitimate interest in communicating with interested people and, where relevant, steps taken at your request before an agreement |
| Delivering, operating and protecting the website | Legitimate interest in security, availability and technical diagnostics |
| Meeting legal obligations and defending rights | Legal obligation or legitimate interest, as appropriate |
5. Recipients of data
Depending on the process, data may be handled, strictly to the necessary extent, by:
- Brevo, which provides the email-delivery service;
- Cloudflare, which provides website infrastructure, delivery and security;
- public authorities where disclosure is required by law.
Providers may use international infrastructure. Transfers outside the European Economic Area must rely on the mechanisms in Chapter V GDPR, according to the conditions applicable to each service. Read the Cloudflare privacy policy and Brevo privacy policy.
6. Retention
Correspondence is kept for as long as needed to resolve the request and afterwards only where justified by the relationship, legal obligations, or the establishment, exercise or defence of legal claims. Technical data is retained according to the infrastructure provider’s configuration and periods, limited to what is needed for operation, security and incident investigation.
7. Your rights
Subject to the GDPR, you may request:
- access to your data and a copy;
- correction of inaccurate data or completion of incomplete data;
- erasure or restriction of processing;
- objection to processing based on legitimate interest;
- data portability where the legal conditions are met.
We will answer within the period prescribed by law and may request reasonable information to confirm your identity. If you believe your rights have not been respected, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.
8. Messages concerning minors
The general contact form is not an enrolment form and does not ask for sensitive data about minors. Please do not include information about a minor’s health, education or personal circumstances. If a project requires such data, a specific notice will be provided separately before collection.
9. Security and updates
We use reasonable technical and organisational measures to protect data, but no internet transmission can be guaranteed risk-free. We may update this policy when the website, processing or legal framework changes. The current version and update date appear on this page.
Legal reference: Regulation (EU) 2016/679 .