Privacy Policy

How the Forever for Europe Association processes personal data collected through www.mpe.ro: what data, on what legal basis, how long we keep it, and what rights you have.

Last updated: 12 September 2026. This is an English translation provided for convenience. The Romanian version is the reference text.

1. Who we are

The controller of personal data for this website is Asociația „Mereu pentru Europa” (Forever for Europe Association), a Romanian non-profit legal entity under private law.

• Fiscal identification code: RO17954350
• Registration: No. 43/09.09.2005, Register of Associations and Foundations
• Registered office: Str. Grigore Pleșoianu 2, bl. 1, sc. 1, et. 1, ap. 3, 200457 Craiova, Dolj County, Romania
• Operational office: Str. Geniștilor 43A, Craiova, Dolj County
• E-mail: mpe@mpe.ro
• Telephone: +40 351 176 824 (landline) · +40 730 250 628 (mobile)

The association hosts the Europe Direct Craiova information centre and implements projects co-financed by the European Union.

This policy covers only the processing of data through the www.mpe.ro website. Data of participants in our projects is processed under separate privacy notices, provided at the point of enrolment in accordance with the requirements of the relevant funding programmes.

2. What data we process through this website

2.1. The contact form

If you write to us through the form on the contact page, we process your first name, surname, e-mail address and the content of your message. This data is sent to us by e-mail and is used solely to reply to you.

You are not obliged to use the form: you can write directly to mpe@mpe.ro or call us.

2.2. Server logs

Like any website, the server hosting www.mpe.ro automatically records, for each visit, the IP address, date and time, page accessed, browser type and operating system. These logs are necessary for the operation and security of the website — detecting attacks, diagnosing errors — and are not used to identify you or to track your behaviour.

2.3. Cookies

The website uses two categories of cookies:

• Strictly necessary (functional) — the cookie storing your cookie preference, the cookie storing the site language and, if you log in to the administration area, WordPress session cookies. These require no consent.
• Statistics — placed by Google Analytics, only after you accept them via the banner shown on your first visit. If you decline or ignore the banner, these cookies are not placed and no analytics script is loaded.

Full details, including the name and duration of each cookie, are in the Cookie Policy. You can change your choice at any time through the consent management link.

2.4. Google Analytics

To understand how many visitors we have and which pages are read, we use Google Analytics 4 (property G-78PXQFG045), a service provided by Google Ireland Limited.

The service loads only after your explicit consent. Until then the script is blocked and does not execute.

If you consent, Google Analytics processes: your IP address (anonymised — Google Analytics 4 does not store full IP addresses), the pages visited and time spent, the source you arrived from, device type, browser, operating system and country.

We do not use this data for advertising, remarketing or individual profiling. We use it in aggregate, to decide which content is worth developing and for the audience reporting required by the funders of our projects.

2.5. What we do not do

For clarity, we state explicitly what this website does not do:

• we do not use tracking pixels, advertising or remarketing cookies;
• we load no analytics script before you have consented;
• we do not create profiles and we take no automated decisions about you;
• we do not load fonts, maps or embedded content from third-party servers — the site’s fonts are hosted on our own server, precisely so that your IP address does not reach third parties;
• we have no social media buttons that track you; the links to our Facebook, LinkedIn, Instagram, X, Mastodon and eYou.social pages are plain links;
• we do not sell, rent or exchange personal data.

3. Legal basis for processing

Processing	Legal basis (Regulation (EU) 2016/679)
Messages sent through the contact form	Art. 6(1)(f) — our legitimate interest in responding to enquiries received
Server logs	Art. 6(1)(f) — legitimate interest in ensuring the security and operation of the website
Statistics cookies and Google Analytics	Art. 6(1)(a) — your consent, given through the cookie banner, in conjunction with Art. 5(3) of Directive 2002/58/EC
Strictly necessary cookies	Art. 5(3) of Directive 2002/58/EC — no consent required, as they are indispensable to providing the service

4. How long we keep data

• Contact messages: a maximum of 3 years from the last communication, after which they are deleted. Where the correspondence gives rise to a contractual or partnership relationship, statutory archiving periods apply.
• Server logs: normally a maximum of 12 months, in line with the hosting provider’s policy.
• Google Analytics data: for the retention period configured in the Google Analytics 4 property — by default between 2 and 14 months for user-level data, after which it is deleted automatically by Google.
• Preference cookie: for the duration stated in the Cookie Policy.

5. Who else has access to the data

We do not disclose personal data to third parties for commercial purposes. Limited access, strictly for the performance of their service, may be held by:

• the web hosting provider, which operates the server holding the website and its backups, acting as a processor under contract;
• the e-mail service provider, through which we receive messages sent from the form;
• Google Ireland Limited, as processor for the traffic analysis service, if you have consented to statistics cookies;
• public authorities, where we are under a legal obligation to disclose information.

All our processors handle data only on our instructions and are bound by confidentiality obligations.

6. Transfers outside the European Economic Area

If you accept statistics cookies, data collected through Google Analytics may be transferred to Google LLC in the United States. The transfer takes place on the basis of the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, adopted on 10 July 2023, under which Google LLC is certified, supplemented by the standard contractual clauses adopted by the Commission.

If you decline statistics cookies, no such transfer takes place and the Google script is not loaded.

Otherwise, we do not intentionally transfer personal data outside the European Economic Area. It is possible, however, that our technical service providers — web hosting and e-mail — operate infrastructure or provide technical support from outside the EEA. In such cases, the transfer takes place only under the conditions of Chapter V of Regulation (EU) 2016/679.

If you wish to know exactly where data is stored at a given time, write to us at mpe@mpe.ro.

7. Your rights

Under Regulation (EU) 2016/679 you have the following rights:

• right of access — to find out whether we process data about you and to receive a copy of it (Art. 15);
• right to rectification — to have inaccurate or incomplete data corrected (Art. 16);
• right to erasure — the “right to be forgotten”, under the conditions provided by law (Art. 17);
• right to restriction of processing (Art. 18);
• right to data portability (Art. 20);
• right to object — you may object to processing based on legitimate interest (Art. 21);
• right not to be subject to automated decision-making, including profiling (Art. 22) — we note that we carry out no such processing;
• right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.

8. How to exercise your rights

Write to us at mpe@mpe.ro or at the registered office given in section 1. We respond within 30 days of receiving the request. This period may be extended by a further two months for complex requests, in which case we will inform you of the extension and the reasons for it.

In order to respond, we may ask you for additional information enabling us to identify you. Exercising your rights is free of charge.

9. Right to lodge a complaint

If you consider that the processing of your data infringes data protection law, you have the right to lodge a complaint with:

The National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, sector 1, 010336 Bucharest, Romania
Telephone: +40 318 059 211
E-mail: anspdcp@dataprotection.ro
Web: www.dataprotection.ro

You may also bring proceedings before the competent courts.

10. Children

This website is not directed at children and we do not knowingly collect personal data from persons under 16 through the site. Our project activities involving minors are carried out exclusively with the written consent of parents or legal representatives, under separate privacy notices.

11. Links to other websites

The website contains links to the websites of European institutions, of our partners, and to our own social media pages. We are not responsible for the privacy practices of those websites. We recommend that you consult their policies before providing them with data.

12. Changes to this policy

We may update this policy when the way the website works or the applicable legal framework changes. The version in force is always the one published on this page, and the date of the last update is shown at the top.