Last updated: September 2026
ASOCIAȚIA HAPPY TAILS TIMIȘOARA – CODIȚE FERICITE respects the privacy of people who interact with the Association and protects personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable data-protection law.
This Privacy Policy explains what personal data we collect, why we use it, with whom we may share it, how long we keep it and what rights you have in relation to it.
1. Who controls the data
The controller of your personal data is:
ASOCIAȚIA HAPPY TAILS TIMIȘOARA – CODIȚE FERICITE
Tax identification number (CIF): 43369827
Register of Associations and Foundations: 2107/A/2020
Registered office: Str. Carei nr. 10, bl. 39, sc. A, parter, ap. 2, municipiul Timișoara, jud. Timiș
Website: www.happytailstimisoara.com
Email: happytailstimisoara@gmail.com
For any question or request concerning personal-data protection, you can contact us at the email address above.
2. What data we may collect
The data we process depends on how you interact with the Association.
2.1. Adoption applications
When you complete the adoption form, we may collect:
- your first and last name;
- your telephone number;
- your locality;
- the animal you wish to adopt;
- information about whether you live in a house or apartment;
- information about other animals or young children in your home;
- information you choose to provide in the free-text comments field.
We recommend that you do not enter sensitive information or other data unnecessary for the adoption process in free-text fields.
Adoption forms are managed through Google services, including Google Forms, Google Sheets and Gmail.
2.2. Completed adoptions
If an adoption is completed, we may also process other data necessary to enter into and perform the adoption contract.
Adoption contracts are signed and kept on paper.
We may use the adopter's contact details after the adoption to communicate about the adopted animal, monitor its situation after adoption and fulfil obligations under the contract.
2.3. Donations
Depending on how you make a donation, we may receive or process data such as:
- your first and last name;
- your email address;
- transaction details;
- the amount donated;
- information needed for financial and accounting records.
Donations can be made by:
- bank transfer;
- PayPal;
- card payment through Global Payments / GP webpay.
For card donations, the data needed to authorise and process payment is handled through the Global Payments / GP webpay infrastructure.
The Association does not store full bank card details.
For recurring donations, the payment processor may process the information needed to make periodic payments authorised by the donor.
The Association may receive transaction information from the processor, such as the amount, payment date, transaction identifier and other information needed to administer the donation and maintain financial and accounting records.
2.4. Sponsorships
When sponsorship contracts are concluded, we may process the data of representatives, contacts and signatories of the organisations with which we work, to the extent necessary to conclude, perform and keep records of the contract.
2.5. Tax redirection
We use the external platform redirectioneazaimpozit.ro to redirect a portion of income tax.
Data entered directly on that platform is processed according to its operator's terms and policies, depending on the process used.
We recommend reading the platform's privacy policy before submitting your data.
2.6. Direct communication with the Association
If you contact us by email, telephone or another means, we may process your contact details and the information you send us to respond to your request and manage our communication with you.
3. Why we use the data
We may process personal data to:
- review and manage adoption applications;
- contact people interested in adoption;
- prepare and manage adoptions;
- communicate and monitor after adoption;
- manage donations;
- administer recurring donations;
- manage sponsorships;
- meet financial, accounting and tax obligations;
- respond to requests sent to the Association;
- manage and defend the Association's rights and legitimate interests;
- meet legal obligations;
- resolve data-protection requests.
We do not use data collected through adoption forms to send commercial communications or newsletters.
4. Legal bases for processing
Depending on the circumstances, processing may rely on one or more of the following legal bases:
Steps taken at the person's request
Data provided through the adoption form is used to review the application and take the steps necessary for a possible adoption.
Performance of a contractual relationship
For adoptions, sponsorships or other contractual relationships, we process the data necessary to enter into and perform them.
Legal obligations
Certain data and documents must be kept to comply with tax, financial and accounting obligations or other legal obligations.
Legitimate interest
We may process certain data when necessary for the Association's legitimate activities, including to:
- manage relationships with adopters;
- monitor the situation of adopted animals;
- resolve incidents or disputes;
- protect the Association's rights and interests;
- maintain records of its activities.
When we rely on legitimate interest, we consider whether the processing is necessary and the rights and freedoms of the person concerned.
Consent
Where processing relies on consent—for example, in certain cases involving the publication of photos or materials in which identifiable people appear—we request it separately.
Consent may subsequently be withdrawn without affecting the lawfulness of processing carried out before its withdrawal.
5. How long we keep the data
We do not keep personal data longer than necessary for the purposes for which it was collected, except where the law requires a retention period.
We mainly apply the following criteria:
Adoption applications that do not result in adoption
Data in adoption applications that do not lead to adoption is generally kept for a maximum of 12 months from the last relevant interaction with that person.
After that period, data will be deleted from active systems unless there is another justified legal reason to retain it.
Completed adoptions
Data needed to manage a completed adoption may be kept for the duration of the adoption relationship and afterwards for as long as necessary to protect the animal, fulfil obligations under the contract and defend the Association's rights and legitimate interests, within applicable legal time limits.
Adoption contracts are kept in the Association's physical archive.
Donations, sponsorships and financial-accounting documents
Documents and data forming part of financial and accounting records are kept for the period required by applicable law.
At present, the principal legal retention period for relevant supporting documents and accounting records is 5 years, calculated according to financial and accounting law.
Data relating to donations made through PayPal or Global Payments / GP webpay may also be kept by those providers in accordance with their legal obligations and retention policies.
Correspondence
Messages and requests received by email are kept for as long as necessary to manage the communication and, where applicable, document the relationship between the person and the Association.
Where messages form part of an adoption, donation, sponsorship or other relationship with a specific retention period, the period for that purpose applies.
When the applicable period expires, data is deleted, anonymised or, where there is a legal obligation, archived with restricted access.
6. With whom we may share data
Personal data is not sold or shared with third parties for their own marketing purposes.
Where necessary, data may be accessible to or shared with:
- Google, through Gmail, Google Forms and Google Sheets, which we use to manage certain forms and communications;
- PayPal, when you make a donation through that service;
- Global Payments / GP webpay, to process card donations and, where applicable, recurring donations;
- banks involved in processing transfers and payments;
- the Association's accountant or financial-accounting service providers;
- technical providers needed to operate the website and services used by the Association;
- public authorities or institutions, when disclosure is required by law;
- legal advisers or other specialists, when necessary to protect the Association's rights.
When services from international companies are used, data may also be processed outside the European Economic Area. In those circumstances, the mechanisms and safeguards required by data-protection law apply to the extent necessary.
7. Cookies and tracking technologies
At present, the Happy Tails Timișoara website does not use cookies for analytics, advertising, marketing or profiling, and does not use tools such as Google Analytics or Meta Pixel.
We do not profile Website visitors for advertising purposes.
Technologies or elements strictly necessary for the website or the infrastructure delivering it to operate may exist; they are not used to analyse behaviour or for marketing.
External services accessed by Users, including PayPal and Global Payments / GP webpay, may use their own technologies needed for the operation and security of their services. Those technologies are managed by the providers under their own policies.
If we introduce analytics or marketing tools, or other technologies requiring consent, we will update this policy and seek Users' consent before activating them where required by law.
8. Photos and video materials
The Association does not ordinarily publish photos or videos of identifiable people without an appropriate legal basis.
Where publication relies on a person's consent, it is requested separately.
9. Data security
We take reasonable organisational and technical measures to protect data against unauthorised access, loss, alteration, disclosure or destruction.
Access to data is limited to people who need it to carry out the Association's activities.
We periodically review how access rights are granted and the measures used to protect accounts, documents and records containing personal data.
10. Your rights
Under the conditions set out in the GDPR, you may have:
- the right of access to the personal data we process about you;
- the right to rectification of inaccurate or incomplete data;
- the right to erasure, where the legal conditions are met;
- the right to restriction of processing;
- the right to object where processing relies on legitimate interest;
- the right to data portability where applicable;
- the right to withdraw consent where processing relies on consent.
Exercising the right to erasure does not automatically mean all information will be deleted. We may keep certain data where necessary to comply with a legal obligation, establish, exercise or defend a legal claim, or for another reason permitted by the GDPR.
To exercise your rights, you can contact us at:
We will respond to requests within the time limits and conditions set out in applicable law.
11. Right to lodge a complaint
If you believe your personal data is being processed in breach of data-protection law, you have the right to lodge a complaint with:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal – ANSPDCP (Romania's national data-protection supervisory authority)
We also encourage you to contact us first at happytailstimisoara@gmail.com so we can try to resolve any concern about your data directly.
12. Changes to this policy
This Privacy Policy may be updated when the Association's activities, the services it uses, its payment methods or applicable legal requirements change.
The updated version will be published on the website with the date of the last change.