Skip to content

Privacy notice

This notice explains how the Harghita County Association for People with Disabilities (HMSE) handles the personal data you give us when using this website (dizabhr.ro), in line with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1. Data controller

Registered name
Asociația Persoanelor cu Dizabilități din Județul Harghita
Hungarian name
Hargita Megyei Sérültek Egyesülete
Registered office
str. Iancu de Hunedoara nr. 6, 530230 Miercurea Ciuc, jud. Harghita, România
Registration number
297/A/1990
Fiscal code (CUI)
RO520399

2. What data we process and why

Appointment form

Name, phone number, e-mail address, the location and service you choose, your preferred date and your comments. Purpose: arranging the appointment and contacting you. Legal basis: your consent (GDPR Art. 6(1)(a)) and preparing the service you asked for (Art. 6(1)(b)).

Health data and children’s data in the appointment form

  • What we collect: the child’s name and age, the chosen therapy, and any symptoms or complaints you describe in your comments.
  • Purpose: only to arrange the appointment.
  • Legal basis: your explicit consent (GDPR Art. 9(2)(a)), which you give with a separate checkbox in the form. A child’s data may be provided by a parent or legal guardian.
  • Who can access it: designated staff of the association, and our hosting and e-mail providers as processors.
  • How long we keep it: 2 years from submission, or until you withdraw your consent.
  • How to withdraw consent: write to handicap@sec.ro or call +40 735 735 291. We will then delete the data. Withdrawal does not affect processing before it. Without consent you can still ask for an appointment by phone or in person.

Join form (member, volunteer, partner)

Name, phone number, e-mail address, town and your message. Purpose: handling your application and contacting you. Legal basis: your consent (GDPR Art. 6(1)(a)).

How form data is stored

Form data is stored in the website’s administration area, which only designated staff of the association can access, and is also sent by e-mail to the association’s central address.

Medical aids rental

Medical aids can be rented only in person at our centre; there is no rental form on the website. The data needed for a rental is handled in person at the centre.

Webshop orders

Name, address, e-mail address, phone number, the products ordered and payment details. Purpose: fulfilling the order and invoicing. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c), accounting rules). The webshop is not open at the moment.

Donations

For bank transfers we use the data passed on by the bank (name, amount, reference) for our accounts. Legal basis: legal obligation.

Visitor statistics

If you accept in the banner, we use Jetpack Stats (Automattic Inc.) to measure visitor numbers in aggregate. For this the provider receives your IP address, browser details, the address of the page you opened and the referring page, the time, your browser language and your country. We only see aggregate data. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time with the “Statistics settings” button in the footer. Without consent the provider receives no data.

Google Maps

Maps load only when you click “Load map”. Google then receives your IP address. Legal basis: your consent, given by clicking (GDPR Art. 6(1)(a)). We do not store your choice.

3. How long we keep data

  • Forms: 2 years from submission, or until you withdraw your consent. Submissions stored on the website are deleted automatically after 2 years, and we delete the copies received by e-mail within the same period.
  • Visitor statistics: according to the provider, logs that include the IP address are kept for 28 days.
  • Accounting data of orders and donations: for the period required by Romanian accounting law (currently 10 years).

4. Who can access the data

We do not sell your data or pass it on for advertising. We use the following processors and recipients:

  • the website’s hosting provider (storage of the website and database);
  • the e-mail provider that sends notification and confirmation e-mails;
  • Akismet (Automattic Inc.) to filter spam. For this, the name, e-mail address and IP address entered in a form, and for the join form also the message, are transmitted under the EU Standard Contractual Clauses (SCC). Health data and children’s data from the appointment form are not sent to Akismet;
  • Jetpack Stats (Automattic Inc., USA), if you accept statistics. The transfer takes place under the EU Standard Contractual Clauses (SCC);
  • Google (Google Ireland Limited), if you click to load a map: it then receives your IP address;
  • for courier delivery, the courier company (name, address, phone number).

5. Cookies

Without your consent the website only uses cookies and browser storage that are necessary for it to work; visitor statistics start only with your consent. See the cookie information page for details.

6. Your rights

You can ask at any time for access to your personal data, its rectification or erasure, restriction of processing and data portability; you can object to processing and withdraw your consent (this does not affect processing before the withdrawal). Send your request to handicap@sec.ro; we reply within 30 days.

You can lodge a complaint with the Romanian data protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro.

7. Security

The website is only available over an encrypted (HTTPS) connection. The administration area can only be accessed with a password-protected user account.

Effective from 30 October 2026.