Last updated: 23 September 2026
This page explains what personal data Asociatia Point of VYou (POV) collects, why, how long we keep it and what your rights are. It applies to the pointofvyou.org website and to the projects we organise.
Who we are
The data controller is Asociatia Point of VYou, tax ID (CUI) 36473042, with its registered office in Dărăști-Ilfov, Ilfov county, Romania. For any question about your data, write to us at pointofvyou@gmail.com.
In short
- We do not sell data and we do not run personalised advertising.
- Google Analytics only starts if you agree, and you can withdraw your consent at any time.
- We use messages from the contact form only to reply to you.
- We use project participants’ data to organise the project and for the reporting required by the Erasmus+ programme.
1. When you visit the website
Like any web server, our hosting provider’s server (Gazduire.net) automatically logs technical data about visits: IP address, browser type, pages visited and time. We use it only for security and to keep the site running, based on our legitimate interest (Article 6(1)(f) GDPR), and the provider keeps it for a short period, according to its own policy.
On the Home and Blog pages we show the latest articles from our blog hosted on WordPress.com. The images of these articles load directly from WordPress.com servers (Automattic Inc.), which therefore receive your browser’s IP address.
2. The contact form
When you write to us through the form on the Contact page, we process your name, email address, subject and message. We use them only to reply and to continue the conversation you started. The legal basis is the consent you tick in the form (Article 6(1)(a) GDPR).
The message is saved in the website’s admin area and also reaches our email inbox (Gmail, Google). To stop automated spam, we keep an encrypted fingerprint of the IP address, not the address itself, for at most one hour.
We keep messages for as long as we need them to reply and to continue working together. We review messages regularly and delete those we no longer need. You can ask us to delete your message at any time.
3. Statistics (Google Analytics)
If you click “Yes” in the cookie banner, we use Google Analytics 4 to see how many visitors we have and which pages are useful. Google Analytics collects data such as the pages visited, visit length, device and browser type, approximate location (country, city) and pseudonymous identifiers stored in cookies. We do not use this data for advertising and we do not link it to your name.
The legal basis is your consent (Article 6(1)(a) GDPR). Without consent, Google Analytics does not load at all. You can change your choice at any time through the “Cookie settings” link in the site footer. The service is provided by Google Ireland Limited; data may be transferred to Google LLC in the USA, which participates in the EU-U.S. Data Privacy Framework.
4. The 3.5% tax redirection (Form 230)
If you choose to redirect 3.5% of your income tax to POV, you fill in Form 230, which contains data such as your name, personal identification number (CNP), address and, optionally, email and phone. If you fill it in on the redirectioneaza.ro platform (run by the Code for Romania association) or send it to us, we receive the form only to submit it to ANAF, the Romanian tax authority, following the legal procedure. The legal basis is your request and the legal obligations related to the redirection (Article 6(1)(b) and (c) GDPR). We keep the forms only as long as tax law requires and we do not use them for anything else.
5. Participants in our projects
When you apply for or take part in a youth exchange, training course or other POV activity, we process the data needed to organise and report on the project:
- identification and contact details: name, date of birth, nationality, address, email, phone, emergency contact;
- information from the application form: motivation, experience, CV or letter of motivation, where relevant;
- a copy of your identity document, when needed for travel tickets, accommodation or insurance;
- your bank account (IBAN), to reimburse travel costs;
- information on diet, allergies or medication, for your safety during the activities;
- photos and videos taken during the activities.
We collect this data through Google Forms, by email and, for quick communication during the project, through WhatsApp or Facebook groups. Joining these groups is optional: if you prefer, we communicate by email only.
Legal bases: organising your participation, at your request (Article 6(1)(b)); obligations under the Erasmus+ grant agreement and accounting law (Article 6(1)(c)); your explicit consent for health information (Article 9(2)(a)) and, in emergencies, protecting your vital interests (Article 9(2)(c)); your consent for photos and videos used in promotional materials. You can withdraw your consent for photos at any time for future materials.
Minors: for participants under 18 we ask for the written consent of a parent or legal guardian, who also receives this information.
Who we share it with: partner organisations hosting or co-organising the activity (including in countries outside the European Union, only the data needed for your participation); the European Commission and the Erasmus+ national agency funding the project, through the official platforms (for example Beneficiary Module and Youthpass), where they act as separate controllers; transport, accommodation and insurance companies, strictly for your services.
How long: we keep data in the project file for as long as the Erasmus+ grant agreement requires (usually 3 to 5 years after the final payment, for possible checks) and as accounting law requires. We delete copies of identity documents and medical information after the activity ends, unless we are required to keep them. We delete the applications of candidates who were not selected once the selection for that project is over.
6. Who else we share data with
Besides the above, we use providers that process data on our behalf: Gazduire.net (website hosting), Google (Gmail, Google Forms, Google Drive, Google Analytics), Automattic (our WordPress.com blog), Meta (WhatsApp and Facebook groups). We share data with authorities only when the law requires it. We do not sell or rent personal data.
Some of these providers may transfer data outside the European Economic Area, mainly to the USA. Transfers rely on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.
7. Cookies and browser storage
- pll_language (necessary): remembers the language you chose (RO or EN). Duration: up to 1 year.
- pov_consent (necessary, local storage in your browser): remembers whether you accepted or refused statistics. Duration: 6 months.
- _ga and _ga_* (statistics, only with your consent): Google Analytics cookies. Duration: up to 2 years.
- wordpress_*, wp-settings-* (necessary): only for team members who log in to the admin area.
You can delete cookies at any time from your browser settings.
8. Your rights
Under Regulation (EU) 2016/679 (GDPR), you have the right:
- to know what data we hold about you and to receive a copy;
- to have incorrect data corrected;
- to have your data deleted when there is no longer a legal reason to keep it;
- to restrict processing or to object to processing based on our legitimate interest;
- to receive your data in a structured format (portability);
- to withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To exercise any of these rights, write to us at pointofvyou@gmail.com. We reply within one month at the latest. If you are not satisfied with our answer, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postcode 010336, Bucharest, Romania, www.dataprotection.ro.
9. Security
The website uses an encrypted connection (HTTPS). Only the team members who need personal data for their work have access to it, with their own passwords.
10. Changes
We may update this policy when we change the way we handle data. The date of the last update appears at the top of the page.