updated on 06.02.2026

This Privacy Policy describes how the Narațiuni S.A.F.E. Foundation – Safe Action for Freedom of Expression (hereinafter referred to as S.A.F.E. Narratives) collects, uses and protects the personal data of volunteers, beneficiaries, members, employees and other individuals who interact or collaborate with TransCore.

We are committed to protecting the confidentiality of the personal data we collect and to complying with applicable legislation, including Regulation (EU) No. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR), as well as Romanian national legislation.

Below, you will find information about our identity as a personal data controller, as well as the categories of data processed by S.A.F.E. Narratives and your rights in relation to the processing of personal data.

1. Who are we?

S.A.F.E. Narratives was established in December 2025 with the aim of promoting fundamental rights, freedom of expression, access to information and digital democracy. The foundation’s activities and projects are aimed at civic organisations, journalists and vulnerable groups and seek to support them in strengthening their capacity to carry out their work in conditions of digital safety, through actions such as, but not limited to, the development and provision of infrastructure and protection services, training, awareness-raising, education and intervention in risk situations.

From a legal point of view, S.A.F.E. Narratives is a foundation established and incorporated under the applicable legislation in Romania, in accordance with the provisions of Government Ordinance 26/2000 and related applicable legislation, identified with C.I.F. 53245176.

For any requests related to the processing of personal data by S.A.F.E. Narratives or the exercise of the rights provided for in Chapter 7 below, related to confidentiality, you can contact us at:

Email: contact@safenarratives.org

Address: Calea Serban Voda, no. 140, 1st floor, room 12, sector 4, Bucharest.

2. What data do we collect?

In the course of our business, we may collect the following categories of personal data, depending on the subject of the data processing and the nature of the legal/contractual relationship between us and the data subject:

1. The data processed in relation to S.A.F.E. Narratives volunteers and interns includes:

• First and last name;
• Age;
• Personal identification number and/or identification data (e.g. identity card)
• Contact details (e.g. email, telephone, address);
• Professional experience and relevant skills;

1. Data processed in relation to S.A.F.E. Narratives beneficiaries includes:

• First and last name;
• Age;
• Contact details (e.g. email, telephone number, address);
• Information necessary for specific projects (e.g. socio-economic status, criteria for belonging to a group vulnerable to discrimination, occupation), only with express consent in this regard.

1. The data processed in relation to S.A.F.E. Narratives employees and contractors includes:

• First and last names;
• Identification data (e.g. personal identification number, identity document);
• Contact details (e.g. telephone number, email address, postal address);
• Bank details for salary processing;
• Medical information specific to occupational health examinations, required prior to employment;
• Professional and educational history.

To the extent that you participate in S.A.F.E. Narratives events, photographs or audio/audio-video recordings made during these events may include your image and/or voice.

3. How do we use the data?

We use personal data only for the specific purposes for which it was collected, namely to carry out our activities, to satisfy legitimate interests or to fulfil our legal or contractual obligations. By way of example, the purposes of personal data processing operations include, but are not limited to:

• Managing volunteer and internship activities and preparing the documentation required by law to monitor these activities;
• Providing support and specific services to the beneficiaries targeted by our activity, as well as verifying eligibility to be a beneficiary of S.A.F.E. Narratives;
• Administering human resources and legal obligations for employees and contractual collaborators;
• Compliance with our legal obligations, including accounting and financial reporting obligations.

4. Legal grounds for data processing

We process personal data on the basis of one or more legal grounds, such as:

• The express and informed consent of the data subject, expressed by accepting the terms of this privacy policy;
• The performance of our contractual obligations (e.g. payment of salaries, certification of volunteer status);
• Compliance with our legal obligations (e.g. financial reporting, in the case of payment of salaries or intellectual property rights; archiving of accounting documents).
• Legitimate interest (e.g. promoting our mission and objectives, improving the services provided to beneficiaries).

5. Who has access to the data?

As part of processing operations, data collected by S.A.F.E. Narratives may be shared with:

• Members of our team (e.g. employees, volunteers, service providers), to the extent that they need access to personal data in order to perform their duties;
• Partners and collaborators involved in our projects, to the extent that data sharing is necessary and with prior information on the confidential nature of the shared data;
• Public authorities, if required by law in order to fulfil legal obligations.

In the course of our business, we do not sell/share the personal data we collect to third parties without authorisation.

6. How long do we keep the data?

We only keep data for as long as it’s needed for the purposes it was collected for. Because the data we process can be classified according to its category and the purposes for which it is collected, the processing period varies depending on the specific information involved. For example, we keep your identification data, such as your first and last name, for the entire duration of the volunteer contract.

On the other hand, in the context of the legislation on the organisation of accounting records, we will be obliged to keep data on payments made to you (e.g. if you are an employee or external collaborator) for a period of 5 years.

Thus, your data will be processed throughout our relationship, and after the end of this period, the data retained will be limited to what is necessary in accordance with legal provisions (e.g. legal provisions governing the archiving of documents).

In general, under no circumstances will the retention period for any type of personal information exceed 5 years from the date of termination of our relationship, except in situations where an extension of this period is necessary for the resolution of ongoing legal proceedings or for another reason provided for by law.

7. Your rights

As a data subject in the processing of personal data, you may exercise the following rights:

• Right of access and right to information – to the extent that the terms of this privacy policy do not answer all your questions, you can always request confirmation or information regarding the processing of your personal data by sending an email to contact@safenarratives.org.
• Right to rectification – you may request us at any time to rectify your personal data that we hold, in order to complete incomplete information or provide additional statements.
• Right to erasure (“right to be forgotten”)– you may obtain, without undue delay, the erasure of personal data concerning you, if their processing was not lawful or in other cases provided by law, by sending a written, signed and dated request to our headquarters at Calea Serban Voda, no. 140, 1st floor, room 12, sector 4, Bucharest, or to the email address contact@safenarratives.org.
• Right to restrict processing – you can obtain the restriction of processing operations when at least one of the following cases applies:
• you contest the accuracy of the data, requesting the restriction of processing until the accuracy of the data has been verified.
• the processing is unlawful, but you oppose the erasure of the data, requesting instead that its use be restricted.
• you need certain data to establish, exercise or defend a right in court.
• you object to the processing of your data on the basis of a legitimate interest justified by us, requesting the restriction of processing for the period of time during which it is verified whether the legitimate rights of S.A.F.E. Narratives prevail over those of the data subject.
• Right to object – you have the right to object at any time to any processing operation we carry out in relation to your data. Exercising this right does not involve any cost – send us a written request, mentioning the data on which you are exercising your right to object and the reasons related to your particular situation, and we will take the necessary measures to stop processing those categories of data.
• Right not to be subject to an individual decision – this is your opportunity to request S.A.F.E. Narratives not to be subject to a decision based solely on automated processing, excluding profiling, which produces legal effects concerning you or significantly affects you. With regard to the adoption of a decision based solely on automated processing, you have the opportunity to express your point of view, to request the intervention of a human operator, as well as the opportunity to challenge our decisions on this matter, through the contact methods described in this notice.
• Right to data portability – you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit those data to other entities without objection from us.
• Right to lodge a complaint – you may lodge a complaint at any time regarding the way we process your personal data, either directly with us or with the competent data protection authority, i.e. the National Authority for the Supervision of Personal Data Processing (ANSPDCP), with the following contact details: www.dataprotection.ro, 28-30 General Gheorghe Magheru Boulevard, postal code 010336, Sector 1, Bucharest, Romania, anspdcp@dataprotection.ro.
• Right to seek legal redress
• Right to withdraw consent – in cases where processing is based on your consent, you can withdraw it at any time. Withdrawal of consent will only have effect for the future, with processing carried out prior to withdrawal remaining valid.

8. How do we protect data?

We take care to implement and continuously update the appropriate technical and organisational measures we have developed to ensure that factors leading to inaccuracies in personal data and the risks of error are minimised. We also ensure that we secure your information in a manner that takes into account any potential risks to your rights and interests.

Through the security measures we implement, all your data is processed securely and the possibility of misuse is minimised.

Among the technical and organisational measures we take to protect your personal data are:

• Restricted access to data;
• Secure storage of information (e.g. use of encryption);
• Training our employees and collaborators on confidentiality and data protection;
• Practising a clean desk & screen policy to prevent unauthorised access to data and keep any physical or digital documents containing personal data confidential and secure;
• Securing and monitoring access to our workspaces (e.g. offices, common areas).

9. Changes to the policy

We may update this Privacy Policy periodically, depending on the evolution of our business or changes in legislation. The date of the last update is indicated at the beginning of this privacy policy. We encourage you to regularly review our privacy policy and consult the changes we notify you of so that you remain informed about the security of your data processing.

10. Contact

For any questions or requests regarding this Privacy Policy, please contact us at:

Email: contact@safenarratives.org