Personal data

Privacy Policy

Last updated: 14 August 2026

In short: when you sign the petition we only collect your name, email, phone number and county. If you get involved through the “Get Involved” form, we also collect the data needed to contact you as a volunteer or supporter. We never ask for your national ID number (CNP) or ID-card details. The data is used solely for this initiative and is never sold or used commercially.

1. Who we are

“Acces Responsabil” is an independent civic initiative supporting the completion of art. 58 of Law no. 331/2024 on the Forestry Code. The data controller is Acces Responsabil. You can contact us at any time at contact@accesresponsabil.ro.

2. What data we collect — signing the petition

When you sign the petition we collect:

·your first and last name;

·your email address;

·your phone number;

·your county;

·your choice to be notified about the paper supporter lists.

We do not collect your national ID number (CNP), ID-card series or number, full address, or other ID-card data. For a petition addressed to public authorities (GO 27/2002), these are not required.

3. What data we collect — the “Get Involved” form

If you sign up as a volunteer or a financial supporter through the “Get Involved” form, we collect:

·for volunteering: your name (or, for organizations, the representative's name and the organization's name), your email address, your phone number, your county, the areas you'd like to help with, the approximate number of members — if applicable — and your optional message;

·for financial support: your name or the company name, tax ID / VAT number (optional), your email address, your phone number, the intended amount and frequency (optional), and your optional message.

This data is separate from what we collect when you sign the petition, and is used solely to contact you about the involvement or support you offered.

4. Why we collect this data

Petition-signing data is used exclusively for: (a) centralizing signatures and submitting the petition to Parliament, ministries and other competent authorities; (b) verifying the uniqueness of signatures — one signature per email address; (c) contacting you, by email or phone, if a clarification about your signature or the legislative process is needed; (d) only if you have explicitly opted in — inviting you to sign the official paper supporter lists, in the case of a citizens' legislative initiative (Law 189/1999); (e) aggregate statistics by county and supporter category, which contain no personal data. Data from the “Get Involved” form is used exclusively to contact you about the volunteering or financial support you offered, and to organize field actions.

5. Legal basis

We process your data based on your explicit consent (art. 6(1)(a) of EU Regulation 2016/679 — GDPR), expressed by checking the consent box when signing the petition or submitting the “Get Involved” form. You may withdraw it at any time, with a simple email.

6. How long we keep the data

Signatures are kept for the duration of the legislative process or until consent is withdrawn. After the process concludes, we retain only anonymous statistics (county, category), with no identifying data. Data from the “Get Involved” form is kept for the duration of the collaboration or until consent is withdrawn.

7. Who we share the data with

The list of petition signatories is shared exclusively with public authorities, as an annex to the petition. Data from the “Get Involved” form is not shared with authorities and is used internally, solely by the Acces Responsabil team, to organize volunteering and financial support. We do not sell, rent, or transmit the data for commercial purposes. We use technical providers (web hosting, database storage, sending confirmation emails) only under GDPR-compliant data processing agreements. Signatures are stored in a database operated by Supabase, on servers located in the European Union; Supabase acts as a data processor (art. 28 GDPR) and does not use the data for any other purpose. Confirmation emails are sent through Resend, also under a GDPR-compliant processing agreement.

8. Your rights

You have the right to access your data, to rectify it, to erase it (the “right to be forgotten”), to restrict processing, to object, and to withdraw your consent at any time. Write to us at contact@accesresponsabil.ro and we will respond within 30 days at the latest. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

9. Data security

We apply appropriate technical and organizational measures: restricted access to our databases (protected by record-level access policies), encrypted connections, and anti-spam mechanisms that do not collect additional data. We do not store IP addresses.

10. Changes to this policy

Any change to this policy will be published on this page, with the update date. The current version applies to all data collected.