Privacy Policy

golfcaritabil.ro presents CHARITY GOLF – “Hall of Legends”, an event organised by the Unity and Trust Association. The association is the controller of the personal data collected through this site and decides why and how it is used.

For any question about your data, or to exercise the rights described below, write to contact@golfcaritabil.ro. We answer within 30 days at the latest.

We only collect what we need, and only when you give it to us:

Contact form

first and last name, email address, subject and the message itself.

Participant account

first and last name, email address, phone (optional) and your password, stored only in encrypted form. If you sign in with Google, we receive your email address, name and an account identifier from Google — never your password.

Event registration

the name, email and phone of the person registering, and for each participant: first and last name, email, phone and, if you fill them in, golf handicap, team name, dietary preferences and shirt size.

Donations

the amount, the payment method and, if you want a confirmation, your name and email address. You can donate anonymously — in that case your name appears nowhere.

Auction interest

your name, email address, phone (optional) and the lot you are interested in.

Partnership form

company name, contact person, email, phone, partnership category and message.

Newsletter

your email address and your consent.

Traffic statistics

page visited, language, referrer, browser type, operating system, device type, country and an anonymised IP address. Collected only if you accept cookies.

Marketing tools

if you accept cookies, the Meta and TikTok pixels can record your visit and key actions on the site, under their own privacy policies. If you decline, they are not loaded.

Technical logs

important actions in the application — sign-ins, registrations, payments — with an anonymised IP address, for security and diagnostics.

We never ask for or store card details. Payments are handled entirely by Stripe, on their infrastructure.

Performance of a contract (Art. 6(1)(b) GDPR)

issuing access documents, managing your account, processing registrations and payments, and communications about your participation.

Your consent (Art. 6(1)(a))

newsletter subscription, traffic statistics and marketing pixels. You can withdraw it at any time, without affecting processing carried out beforehand.

Legal obligations (Art. 6(1)(c))

keeping accounting records for registrations and donations, as required by Romanian accounting and tax law.

Our legitimate interest (Art. 6(1)(f))

site security, abuse prevention, replying to the messages you send us, running the event itself, and aggregate statistics. You may object to this processing at any time.

We do not sell or rent your data. We share it only with the providers that keep the site and the event running, each contractually bound to use it solely on our behalf:

Stripe Payments Europe, Ltd.

card payment processing. Card details are entered directly with Stripe and never reach us.

Resend (Plus Five Five, Inc.)

delivering our emails — confirmations, access documents, notifications — and receiving messages sent to @golfcaritabil.ro addresses.

Google Ireland Limited

only if you choose to sign in with your Google account.

Meta Platforms Ireland Limited and TikTok Technology Limited

only if you accept cookies — their pixels measure how effectively we promote the event.

Our hosting provider

the servers running the site and the database.

Partners involved in the event

the golf club and the gala venue, strictly for access lists and operational needs.

Public authorities

only where the law requires it.

Some of the providers above — our email service and the promotion platforms — also process data outside the European Economic Area. Those transfers rely on the standard contractual clauses approved by the European Commission and, where applicable, on the EU–US Data Privacy Framework, which provide a level of protection equivalent to that in the European Union.

Contact form messages

2 years from the last exchange.

Partnership enquiries

3 years.

Newsletter subscription

until you unsubscribe.

Participant account

for as long as the account is active. You can delete it at any time.

Registrations, donations and the related financial records

10 years, as required by accounting law.

Auction interest records

12 months after the event.

Traffic statistics

24 months.

Technical logs

12 months.

Once these periods expire, the data is deleted or irreversibly anonymised.

You can exercise them free of charge, with a message to contact@golfcaritabil.ro:

Access

find out what data we hold about you and receive a copy.

Rectification

have inaccurate or incomplete data corrected.

Erasure

the “right to be forgotten”, where no legal obligation requires us to keep the data.

Restriction

have processing limited while we look into a complaint.

Portability

receive your data in a structured, machine-readable format.

Objection

object to processing based on legitimate interest, including promotional messages.

Withdrawal of consent

at any time, as easily as you gave it.

We do not make automated decisions with legal effect on you, and we do not carry out profiling.

If our answer does not satisfy you, you may contact the Romanian Data Protection Authority (ANSPDCP) — B-dul General Gheorghe Magheru 28–30, sector 1, Bucharest, anspdcp.ro.

Photographs and video are taken at both the tournament and the gala, and used to report on the event, in the gallery on this site and in the association’s communication. The basis is our legitimate interest in documenting and promoting a public fundraising event.

If you would rather not appear in these materials, tell us at registration or speak to the team on site. You can also ask us later, by email, to remove a photograph.

This site is not aimed at children: we do not create accounts for people under 16 and do not knowingly collect their data. Minors may attend the event accompanied by a parent or guardian, who provides the registration details. If you become aware that a child has sent us personal data, write to us and we will delete it.

• traffic between your browser and the site is encrypted (HTTPS);
• passwords are stored only in irreversibly encrypted form;
• sessions use httpOnly cookies, out of reach of scripts in the page;
• IP addresses are anonymised before being stored;
• access to data in the admin area is limited to the people who need it;
• card details never reach us.

We use a small number of cookies, needed for sign-in and — only with your agreement — for traffic statistics and marketing pixels. The full list, and how to change your choice, are in the Cookie Policy linked in the site footer.

We may update this policy when the way we work or the applicable law changes. The version in force is always the one published here, with the last update shown at the top. If something important changes, we will let you know by email or through a visible notice on the site.