ARCH Pediatric Hospital – AMERICAN ROMANIAN CHILDREN'S HOSPITAL & RESEARCH CENTER respects the right to privacy of everyone who interacts with our project. This policy describes how we collect, use and protect your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

What data do we collect:

• Name and surname
• Email address
• Phone number
• Tax information (CNP, address, income), in the case of tax redirection forms (Form 230)
• Donation data (amount, frequency, payment method)
• IP address and browser information (for security and analytics)

How we use data:

• To process donations and forms 230
• To communicate about project progress and fundraising campaigns
• To comply with legal and tax obligations
• To improve the experience on the site

Legal basis:

• Your express consent (e.g. newsletter subscription)
• Legal obligation (e.g. keeping tax documents)
• Legitimate interest (e.g. improving the website)

Who we share data with:

• Payment processors (e.g. Stripe)
• Communication platforms (e.g. Mailchimp)
• Form230.ro (for tax redirection)
• Tax and legal authorities (when applicable)

Your rights:

• Right of access
• Right to rectification or deletion
• The right to withdraw your consent
• The right to file a complaint with the ANSPDCP

For any questions or requests related to your data, you can contact us at: contact@arch.ro / +40 764 336 939