Privacy policy

PRIVACY POLICY

Updated on April 21, 2026

Future Romania („we” or „our”) is committed to protecting privacy
you. This Privacy Policy explains how the data
your personal data is collected, used and disclosed by Future Romania through
through the Future Romania mobile application (the „Application”).
This Policy applies to the Application and the services accessible through it. The Application is the platform
digital community of the „Future Romania – Public Leadership Program” („Program”),
operated by the Vintilă Brătianu Association, a non-profit organization registered in Romania, fiscal registration code (CIF)
49750951, with headquarters at 134 Viitorului Street, Building A, ground floor, apartment 02, Sector 2, Bucharest, Romania.
The application does not process payments, orders, or commercial transactions.

1. The data controller and the DPO
Data controller: Vintilă Brătianu Association, tax ID 49750951, 134 Viitorului Street, Building A, ground floor,
Apt. 02, Sector 2, Bucharest, Romania. E-mail: suport@futureromania.ro.
Data Protection Officer (DPO): Niculina Șomlea. E-mail: dpo@futureromania.ro.
Mailing address: 134 Viitorului Street, Building A, ground floor, apt. 02, District 2, Bucharest – „În
DPO's attention.

2. The data we collect
2.1. Data provided directly by you:
Upon registration and use of the Application, you may provide: full name, e-mail address, telephone number
phone (optional), date of birth, gender, profile picture (optional), city and country of residence,
professional field and/or current position (optional), the edition of the Program you participated in.
2.2. Automatically collected data:
When using the Application, the following data may be collected automatically: the device's IP address;
visited Application sections, time, date and duration of the visit; type and version of the operating system;
device type and unique identifiers; usage analytics (via Google Analytics for Firebase);
error reports (via Firebase Crashlytics).
2.3. Location data:
The application can collect approximate geolocation data for features based on
location and personalized content. Aggregated and anonymized location data may be used to
performance analysis and improvement of the application. You can disable location access at any time from
device settings.
2.4. Device functionality data:
Camera and Photo Gallery: The app may request access to allow you to upload a photo
profile. You can refuse these permissions without affecting other functionalities of the Application.

3. Purposes and legal grounds for processing
3.1. Performance of the contract (Art. 6(1)(b) GDPR):
User account management; enabling networking functionalities, including visibility
profile and messaging between active users; providing access to content related to the Program and
community features; displaying your profile to other active users according to
community functionalities described in the Unilateral Declaration of Participation.
3.2. Legitimate interest (Art. 6 para. (1) lit. f) GDPR):
Improving application functionality and user experience; analyzing patterns of
use through aggregated and anonymized analyses; ensuring the security of the Application and preventing
abuses; facilitating professional and civic networking among Program alumni. A test of
The proportionality (balancing test) has been conducted and is available upon request.
3.3. Consent (Art. 6(1)(a) GDPR):
Sending push notifications about relevant events, activities, or opportunities of
Program; the use of the profile picture in promotional materials. You can withdraw
consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7
alin. (3) GDPR).
3.4. Obligația legală (Art. 6 alin. (1) lit. c) GDPR):
Păstrarea documentației contabile și fiscale conform legislației române, inclusiv Legea nr. 82/1991
(Legea contabilității), Codul fiscal (Legea nr. 227/2015) și Legea nr. 16/1996 (Legea Arhivelor
Naționale).
3.5. Obligația de a furniza date
Furnizarea datelor cu caracter personal constituie o cerință contractuală necesară pentru crearea
și menținerea contului dumneavoastră în Aplicație. Fără datele obligatorii (nume, adresă de
e-mail, ediția Programului), nu putem înregistra contul și nu putem furniza funcționalitățile
comunității. Datele marcate ca opționale (număr de telefon, fotografie de profil, domeniu
profesional) nu sunt obligatorii, iar refuzul de a le furniza nu afectează posibilitatea de a utiliza
Aplicația. Nicio dispoziție legală sau reglementară nu vă obligă să furnizați date către Aplicație.
3.6. Decizii automatizate
Aplicația nu efectuează decizii bazate exclusiv pe prelucrare automată, inclusiv crearea de
profiluri, care produc efecte juridice sau efecte semnificative similare asupra dumneavoastră, în
sensul Art. 22 GDPR.

4. Vizibilitatea profilului și funcționalitățile comunității
Prin crearea unui cont activ, următoarele date de profil sunt vizibile celorlalți utilizatori activi:
numele, fotografia de profil (dacă ați încărcat-o), ediția Programului, domeniul profesional/funcția
(dacă le-ați completat), orașul/țara. Adresa de e-mail și numărul de telefon sunt vizibile celorlalți
utilizatori doar dacă alegeți să le afișați în setările de confidențialitate ale profilului. Aveți control
deplin asupra datelor de contact vizibile.
Aplicația include o funcționalitate de mesagerie internă (chat) pentru comunicarea directă între
utilizatorii activi. Mesajele sunt prelucrate de Operator exclusiv în calitate de furnizor al
infrastructurii tehnice, în temeiul Art. 6 alin. (1) lit. b) GDPR. Conținutul mesajelor nu este
monitorizat și nu este utilizat în alte scopuri.

5. Servicii terțe
Aplicația utilizează următoarele servicii terțe, fiecare cu propria Politică de Confidențialitate:
Google Play Services (https://policies.google.com/privacy); Google Analytics for Firebase
(https://firebase.google.com/support/privacy); Firebase Crashlytics
(https://firebase.google.com/support/privacy). Doar date agregate și anonimizate sunt transmise
periodic acestor servicii.

6. Partajarea datelor și destinatarii
Datele dumneavoastră cu caracter personal pot fi partajate cu: furnizori de servicii IT, hosting și
e-mail care acționează ca persoane împuternicite conform acordurilor Art. 28 GDPR; alți utilizatori
activi ai Aplicației (date de profil, sub rezerva setărilor de confidențialitate); instituții academice
partenere (ex: Oxford, Cambridge, Harvard) – inclusiv în țări din afara UE/SEE – exclusiv pentru
validarea burselor sau programelor academice; autorități publice, exclusiv când legea impune
acest lucru.
Furnizorul de Servicii nu vinde, nu închiriază și nu partajează datele dumneavoastră cu caracter
personal cu terți în scopuri comerciale, publicitare sau de marketing.

7. Transferuri internaționale de date
Pentru transferurile către SUA (Google LLC și alți furnizori certificați), ne bazăm pe Decizia de
adecvare privind EU-U.S. Data Privacy Framework ((UE) 2023/1795), suplimentată de Clauze
Contractuale Standard (SCC) conform Deciziei (UE) 2021/914, Modulul 2. Pentru transferurile către
Regatul Unit, ne bazăm pe Decizia de adecvare (UE) 2021/1772, astfel cum a fost reînnoită la 19
decembrie 2025. Pentru alte țări terțe, utilizăm SCC suplimentate de măsuri tehnice conform
Recomandărilor EDPB 01/2020. Puteți solicita o copie a garanțiilor de transfer la
dpo@futureromania.ro.

8. Păstrarea datelor
We retain personal data for as long as the account is active and for a reasonable period
subsequent (up to 30 days after account deletion). Data necessary for legal obligations
(accounting, taxation, archiving) are kept for the duration provided by law (usually, 10 years
for financial records in accordance with Romanian legislation. Anonymous and aggregated data may be
stored indefinitely for statistical and research purposes.

9. Your rights under the GDPR
You benefit from the following rights: The right of access (Art. 15) – to obtain confirmation and a
copy of personal data; Right to rectification (Art. 16) – to correct inaccurate data;
Right to erasure (Art. 17) – the right to request the deletion of data; Right to restriction (Art.
18) – to restrict processing in certain circumstances; The right to data portability (Art. 20) – to
provide the data in a structured, machine-readable format; The right to object (Art. 21) – to
object to processing based on legitimate interest; The right against automated decisions (Art. 22) –
not to be subject to decisions based solely on automated processing; The right to withdraw consent
(Art. 7 para. (3)) – at any time, without affecting prior processing.
To exercise your rights, contact: dpo@futureromania.ro or by mail at: Association
Vintilă Brătianu, 134 Viitorului St., Building A, ground floor, apt. 02, Sector 2, Bucharest – „Attn."
DPO”. Response deadline: one month (Article 12(3) GDPR), extendable by two months in cases
complex, with prior notification.

10. Account deletion
You have the right to delete your account at any time, either directly from the Application or by contacting
dpo@futureromania.ro. Upon account deletion: the profile and all associated personal data
will be deleted; the data will no longer be visible to other users; personal data will be deleted in
30-day term; the data necessary for legal obligations will be kept for the duration provided by
law.

11. Protection of minors
The application is not intended for persons under 16 years of age, in accordance with Art. 8 para. (1) of
Regulation (EU) 2016/679 (GDPR). We do not knowingly collect personal data from
children under 16 years of age. If we find that personal data has been collected from a minor under 16 years of age without
parental consent, we will take steps to delete them immediately. Contact:
dpo@futureromania.ro.

12. Security measures
We implement appropriate technical and organizational measures to protect data in accordance with Art. 32
GDPR, including: encrypted authentication; data encryption in transit (TLS/SSL); limited access to
authenticated users; periodic security assessments; incident response procedures
in accordance with the internal Security Incident Management Policy.

13. The supervisory authority
You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing
Data Protection Authority (ANSPDCP): General Gheorghe Magheru Blvd., no. 28-30, District 1,
Bucharest, 010336. Website: www.dataprotection.ro. E-mail: anspdcp@dataprotection.ro. Phone:
+40 318 059 211.

14. Changes to the Privacy Policy
We may update this Policy periodically. We will notify you of any material changes.
through the Application, prior to their entry into force. In the event that the changes concern processing activities
based on your consent, we will request new consent, to the extent that
The law requires this. If you do not agree with the updated policy, you can delete your account.

15. Contact
For general questions: suport@futureromania.ro. For data protection:
dpo@futureromania.ro. Website: https://futureromania.ro.