Privacy and Data Protection Policy

Effective Date: 07.02.2025

1. Introduction

At Tutti Cancer Warriors (“we,” “us,” “our”), we are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy and Data Protection Policy (“Policy”) explains how we collect, use, disclose, and safeguard your personal information when you interact with our website and participate in our peer support program.

By using our website, applying for support, or participating in any of our programs, you consent to the practices described in this Policy.

2. Information We Collect

We may collect the following types of personal information from you:

  • Contact Information: Name, email address, phone number, and other contact details.
  • Demographic Information: Age, location, and relevant health-related information.
  • Communication Data: Messages, interactions, and any other communication shared with us or others in the program.
  • Technical Data: Information about your device and browsing behavior, including IP address, browser type, and usage patterns on our website (through cookies).

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To facilitate your participation in our peer support program, including connecting you with a survivor or warrior.
  • To respond to your inquiries and provide support, resources, and information.
  • To process and manage your donations, applications for grants, or other requests.
  • To communicate with you about updates, events, and news related to our organization.
  • To comply with legal obligations and protect our legal interests.

4. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

  • Consent: We process personal data when you provide explicit consent, such as for communication in the peer support program.
  • Contractual Necessity: We process personal data to fulfill our contractual obligations to provide services, grants, and other support.
  • Legal Obligations: We process personal data as required to comply with applicable laws, such as data protection and tax regulations.
  • Legitimate Interests: We process data for legitimate interests, including improving our services and marketing communications, provided that these interests do not override your rights and freedoms.

5. Data Sharing and Disclosure

We do not share your personal data with third parties, except for the following reasons:

  • To Facilitate Peer Support: We may share your contact details with your assigned peer support Volunteer (Survivor) to enable communication and support.
  • Service Providers: We may share data with trusted third-party providers who help us manage our website, facilitate the peer support program, or process donations (e.g., PayPal, banks).
  • Legal Compliance: We may disclose your personal data if required to comply with legal obligations, respond to a legal request, or protect our rights.

6. Data Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include secure storage of your data, encryption, and restricted access to personal information.

However, no data transmission or storage system is 100% secure, and we cannot guarantee the absolute security of your information.

7. Your Rights Regarding Your Data

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Access: You can request access to the personal data we hold about you.
  • Correction: You can request corrections to any inaccurate or incomplete personal data.
  • Deletion: You can request the deletion of your personal data under certain circumstances.
  • Restriction: You can request restrictions on how we process your data.
  • Data Portability: You can request that we provide your personal data in a structured, commonly used format.
  • Objection: You can object to our processing of your personal data based on legitimate interests.
  • Withdraw Consent: You can withdraw any consent you have given us for the processing of your data at any time.

To exercise your rights, please contact us using the details provided at the end of this Policy.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Policy, including complying with legal obligations, resolving disputes, and enforcing agreements. When personal data is no longer needed, it will be securely deleted or anonymised.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. These technologies may collect information such as your IP address, browser type, and website usage patterns.

  • Cookies: Small files stored on your device that help us track website usage, remember your preferences, and provide a personalized experience.
  • Analytics: We use tools like Google Analytics to analyze website traffic and usage patterns to improve our services.

You can control cookie preferences through your browser settings. However, please note that disabling cookies may affect the functionality of our website.

10. International Data Transfers

If you are located outside of Romania or the European Economic Area (EEA), please be aware that your data may be transferred to and processed in Romania or other countries where we operate or have service providers. We ensure that such transfers comply with applicable data protection laws.

11. Children’s Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal data from minors. If we learn that we have inadvertently collected data from a child under 16, we will take steps to delete such data as quickly as possible.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any updates will be posted on our website with the updated date. We encourage you to review this Policy periodically to stay informed.

13. Contact Us

If you have any questions about this Privacy and Data Protection Policy or wish to exercise your rights, please contact us at:

Tutti Cancer Warriors
Email: tcw@tutticancerwarrior.org
Website: http://www.tutticancerwarriors.org