Legal

Privacy policy

This policy explains which personal data the Kronospan Foundation website collects, why, for how long and what rights you have. It covers this website only. For the Foundation’s internal data protection rules, see Legal documents.

Last updated: 24 October 2026

01Who is responsible for your data

The controller of the personal data processed through this website is the Kronospan Foundation, No. 1 Strunga Mieilor Street, 500482 Brașov, Romania.

For any question about your data or to exercise your rights, write to office@kronospanfoundation.org or send a letter to the address above.

02What data we collect and why

Contact form Your name, e-mail address, the topic and subject you choose and your message. We use them only to answer you. Legal basis: our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR).

skill.ED application form Details about the applicant school (name, address, description), the contact person (name, position, phone, e-mail), the project description, the implementation period, the budget and the documents you attach. We use them to evaluate the application, to communicate with you during the selection and, if the project is selected, to sign and follow up the grant agreement. Legal basis: steps taken at your request before entering into an agreement (Art. 6(1)(b) GDPR) and our legitimate interest in running a fair selection (Art. 6(1)(f) GDPR).

Technical data When a form is sent, the server records the IP address and the time of sending, to protect the forms against spam and abuse (limited number of submissions per address). Legal basis: our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR).

Visit counting on our own server Every page view is counted by the website itself, without cookies: the page, the type of device, browser and operating system, the website you came from, and the city and country estimated from the IP address. The IP address is used only at that moment and is not stored; to count each visitor once per day, the server keeps a code derived from the IP address and browser with a key that changes every day and is then deleted, so visits cannot be linked from one day to the next or to a person. We do not count visitors whose browser sends “Do Not Track” or “Global Privacy Control”. Only if you accept statistics cookies, your browser also remembers the date of your first visit, so we can tell new from returning visitors. The data stays on our hosting server and is not shared. Legal basis: our legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR); for the first-visit date, your consent (Art. 6(1)(a) GDPR). City estimates: IP Geolocation by DB-IP (db-ip.com), licensed CC BY 4.0.

Statistics and measurement Only if you accept them in the cookie banner: Google Analytics, the Google tag and the Meta Pixel collect information about how the website is used (pages visited, device and browser type, approximate location derived from the IP address, the website you came from). We use these data for statistics and to understand how people reach us; we do not run targeted advertising campaigns based on them. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from at the bottom of every page.

Donations Donations are made on PayPal’s website. We do not see or store your card details. PayPal processes your data under its own privacy policy; we receive from PayPal the information needed to record the donation.

03Who receives your data

Messages and applications are delivered by e-mail to the Foundation’s team. A copy of each submission is kept on the website server as a backup in case an e-mail is lost.

We use service providers who process data on our behalf, under contract: our website hosting and e-mail provider, with servers in Romania; Google Ireland Limited (Google Analytics, Google Tag Manager, Google tag) and Meta Platforms Ireland Limited (Meta Pixel), only with your consent.

For the Meta Pixel, the Kronospan Foundation and Meta are joint controllers for the collection and transmission of the data to Meta; Meta is the sole controller for any further use of these data under its own policy.

We do not sell your data and we do not share it with other parties, except where the law requires us to (for example, at the request of a public authority).

04Transfers outside the European Union

Google and Meta may transfer data to the United States. These transfers are covered by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. They happen only if you accept analytics or marketing cookies.

05How long we keep your data

Contact messages 12 months from our last reply, unless the conversation continues.

skill.ED applications Applications that are not selected: until the end of the edition’s selection plus 12 months. Selected projects: for the duration of the grant agreement and afterwards for the period required by accounting and archiving law.

Server backups of submissions and anti-spam records Anti-spam records: 10 minutes. Backup copies of submissions: same period as the original message or application.

Visit counting 25 months, then deleted automatically.

Analytics and measurement data Google Analytics: 14 months (setting in Google Analytics). Cookies: see the Cookie policy.

06Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability and to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise these rights, write to office@kronospanfoundation.org. We reply within one month; in complex cases this period can be extended by two more months, and we will tell you why. We may ask you to confirm your identity.

You also have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro.

07Security

The website is served only over an encrypted connection (HTTPS). Submissions are stored outside the public part of the server and are accessible only to the people who manage the website. Forms are protected against automated spam.

08Changes to this policy

We will update this page when the website or the way we use data changes. The date of the last update is shown at the top of the page.