Privacy Policy
Last updated: [DE COMPLETAT: date]
This policy explains what personal data we collect through the gala website, why, and how we protect it, in line with the personal data protection laws of the Republic of Moldova [DE COMPLETAT: check the law in force – Law No. 133/2011 or the law replacing it].
1. Who processes your data
The Public Association “Viața Fără Leucemie”, IDNO 1011620004380, registered at [DE COMPLETAT: registered address].
For any question about your data: [DE COMPLETAT: email].
2. What data we collect
When you buy tickets: your name, email address, phone number, ticket type and quantity, and chosen language.
When you donate: the amount, your email address and, optionally, your name.
We do not collect or store card details. Payments are processed directly by maib bank on its secure page.
3. Why we use your data
To issue and send your tickets; to check tickets at the entrance; to send you messages about the event (confirmations, a reminder, any programme changes); for accounting and legal obligations.
We do not use your data for advertising and we do not sell it.
4. Legal basis
Performance of the contract (issuing the ticket you bought), compliance with legal obligations (such as accounting) and our legitimate interest in ensuring safe entry to the event. [DE COMPLETAT: if you send newsletters, they are sent only with the person's separate consent.]
5. Who we share data with
Only with providers needed to run the website: maib bank (payment processing), the email service provider [DE COMPLETAT: e.g. Resend], and website and database hosting [DE COMPLETAT: e.g. Vercel, Neon]. Some providers may store data outside the Republic of Moldova, with appropriate safeguards.
We do not share data with other organisations for their own purposes.
6. How long we keep data
[DE COMPLETAT: for example, order data – as long as accounting rules require; contact details used for event messages – up to [number] months after the gala.]
7. Your rights
You have the right to request access to your data, its correction or deletion, restriction of processing, and to object to processing. Send requests to [DE COMPLETAT: email]; we will reply within the time set by law.
If you believe your rights have been infringed, you can complain to the National Center for Personal Data Protection (datepersonale.md).
8. Cookies
The website uses only strictly necessary cookies (for example, to remember your language). We do not use advertising or tracking cookies. [DE COMPLETAT: update this section if you add visitor analytics.]
9. Data security
The website uses an encrypted connection (HTTPS). Access to order data is limited to members of the association's team, each with a personal account and password, and their actions are logged.
10. Changes
We may update this policy. The current version is published on this page, with the date of the last update.