This policy explains what personal data we process through the website asociatiapostului.ro, why, how long we keep it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
This is an English translation provided for convenience; the Romanian version is the legally binding one.
Who is responsible for your data
The data controller is ASOCIAȚIA POSTULUI TERAPEUTIC (the Therapeutic Fasting Association), with its registered office at 2 Pantel Street, Iași, Romania.
- Email: tabaradepost@gmail.com
- Phone: +40 332 802 834
What data we collect and why
The retreat registration questionnaire
To assess whether a person is ready for a water fast and to organise the retreat, we collect: name, phone number, email, age, weight, height, occupation, marital status, level of education, place of residence, the preferred session, and health data (conditions, treatments, blood group, habits, motivation and fasting experience).
- Purpose: reviewing your application, contacting you, the initial medical assessment and organising the retreat.
- Legal basis: your explicit consent, given by ticking the consent box in the form. Health data is a special category of data and is processed only with your explicit consent.
- Who sees it: the association’s team and, where applicable, the medical and psychological staff involved in the retreat.
“I would like to come to a retreat” and the newsletter
We collect the name and email address you give us, in order to send you details about the retreat and, respectively, announcements of new sessions and articles. The legal basis is your consent; you can unsubscribe at any time.
Donations
Card donations are processed by Stripe, which receives your card details directly. We only receive the payment confirmation, the amount, the frequency (one-off or monthly) and the contact details you enter (name, email, optional phone number), in order to issue the receipt and keep the accounting records. Legal basis: carrying out the donation and our legal accounting obligations.
Contact
If you email us, call us or write to us on WhatsApp, we use the details you give us only to reply to you.
Technical data
The hosting servers may temporarily record your IP address and technical details of the request, for security and operation. With your consent (given in the cookie banner), we use Google Analytics for visitor statistics; without consent, it is not loaded. We do not use advertising cookies. Details in the Cookie Policy.
Who we share your data with
We do not sell your data or share it for marketing purposes. It may only be received by the providers that help us operate, under contracts that oblige them to protect the data:
- the website hosting and email provider;
- Stripe, for donation payments;
- the authorities, where the law requires it.
YouTube videos and links to Facebook or WhatsApp are services of other companies, with their own privacy policies.
How long we keep your data
We keep data only as long as necessary for the purpose for which it was collected and as required by law (for example, accounting obligations for donations). Rejected or unanswered registration requests, as well as newsletter subscriptions, are deleted on request or after a reasonable period of inactivity.
Your rights
You have the right:
- of access to the data we hold about you;
- to rectification of incorrect or incomplete data;
- to erasure (“the right to be forgotten”), when there is no longer a basis for keeping it;
- to restriction of processing;
- to data portability: to receive your data in a structured format;
- to object to certain processing;
- to withdraw your consent at any time, without affecting processing carried out before.
To exercise your rights, write to us at tabaradepost@gmail.com. We will reply within 30 days at most. If you believe we have infringed your rights, you can lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP): dataprotection.ro, or with the data protection authority in the country where you live.
How we protect your data
We take the security of your data seriously: an encrypted connection (HTTPS), limited access to data and security measures at hosting level. Card details do not pass through our servers.
Changes
We may update this policy; you will find the date of the last change at the end of the page. For important changes, we will let you know through the website.
Last updated: November 2026.