Personal data

Privacy Policy

Last updated: 27 July 2026

In short: we only collect your name, email and county. We never ask for your national ID number (CNP) or ID-card details. The data is used solely for this petition and is never sold or used commercially.

1. Who we are

“Acces Responsabil” is an independent civic initiative supporting the amendment of art. 54 of Law 46/2008 (the Forestry Code). The data controller is [name of the legal entity or responsible person — to be completed]. You can contact us at any time at contact@accesresponsabil.ro.

2. What data we collect

When you sign the petition we collect:

·your first and last name (for organizations: the organization's name and the representative's name);

·your email address;

·your county;

·the capacity in which you are signing (individual, NGO/association, sports club, company);

·your choice to be notified about the paper supporter lists.

We do not collect your national ID number (CNP), ID-card series or number, full address, or other ID-card data. For a petition addressed to public authorities (GO 27/2002), these are not required.

3. Why we collect this data

The data is used exclusively for: (a) centralizing signatures and submitting the petition to Parliament, ministries and other competent authorities; (b) verifying the uniqueness of signatures — one signature per email address; (c) only if you have explicitly opted in — inviting you to sign the official paper supporter lists, in the case of a citizens' legislative initiative (Law 189/1999); (d) aggregate statistics by county and supporter category, which contain no personal data.

4. Legal basis

We process your data based on your explicit consent (art. 6(1)(a) of EU Regulation 2016/679 — GDPR), expressed by checking the consent box when signing. You may withdraw it at any time, with a simple email.

5. How long we keep the data

Signatures are kept for the duration of the legislative process or until consent is withdrawn. After the process concludes, we retain only anonymous statistics (county, category), with no identifying data.

6. Who we share the data with

The list of signatories is shared exclusively with public authorities, as an annex to the petition. We do not sell, rent, or transmit the data for commercial purposes. We use technical providers (web hosting, database storage) only under GDPR-compliant data processing agreements. Signatures are stored in a database operated by Supabase, on servers located in the European Union; Supabase acts as a data processor (art. 28 GDPR) and does not use the data for any other purpose.

7. Your rights

You have the right to access your data, to rectify it, to erase it (the “right to be forgotten”), to restrict processing, to object, and to withdraw your consent at any time. Write to us at contact@accesresponsabil.ro and we will respond within 30 days at the latest. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

8. Data security

We apply appropriate technical and organizational measures: restricted access to the signature database (protected by record-level access policies), encrypted connections, and anti-spam mechanisms that do not collect additional data. We do not store IP addresses.

9. Changes to this policy

Any change to this policy will be published on this page, with the update date. The current version applies to all signatures collected.