Effective date: January 1st, 2024

Romanian United Fund, an Illinois not-for-profit corporation tax-exempt under section 501(c)(3) of the Internal Revenue Code, (hereinafter “RUF”) respects your privacy as a visitor to its website (the “Website”) and has developed the following privacy policy (“Online Privacy Policy” or “Policy”) to inform you how RUF handles your Personal Information, defined below, after receiving it.

By accessing or using this Website, you agree to this Policy, so please read it carefully. This Policy may change from time to time. Your continued use of this Website after RUF makes changes is deemed to be an acceptance of those changes, so please check the Policy periodically for updates.

1. Information RUF Collects and Why

1.1 Who Collects Your Information

RUF is the data controller of the information RUF collects from your use of our Website.

RUF utilizes a Data Protection Officer (“DPO”). This person is responsible for evaluating RUF’s data protection policies and the implementation of those policies. If you feel something is not addressed in this Privacy Policy or have further questions, our DPO can be reached by using the contact information contained in Section 7. Additionally, and to the extent that RUF operates in the People’s Republic of China, RUF may designate a legal representative within China that coordinates data privacy compliance for RUF with RUF’s DPO in that country. 

1.2 Consent to Collect Your Information

We process Personal Information (defined below) based on consent according to Art. 6(1)(a) GDPR, which you are free to give or refuse. You’ll see consent options when you visit our Website for the first time. When we change the purposes for which we use your Personal Information, or when there are new purposes, we will notify you of such changes and may need to obtain your consent for the changes or new purposes. You can change your decisions at any time by contacting our RUF personnel as set forth in Section 7, it will not affect the lawfulness of processing based on consent before its withdrawal.

1.3 What Information RUF Collects

Depending on the way you use the Website and RUF services, RUF may gather information from you in the following categories.  

1.3.1 Personal Information

RUF gathers Personal Information. “Personal Information” means data or information that can be used to identify an individual directly or indirectly and may include your name, address, IP address, email address, telephone number, professional information, photograph, biometric data, such as fingerprint or facial recognition, or other similar personally identifying data collected from you by RUF or its authorized agents and also includes Sensitive Information, Financial Information, Analytics Information, and Cookies defined further below.

1.3.2 Sensitive Information

RUF may gather Sensitive Information. “Sensitive Information” means Personal Information that reveals information defined as sensitive under applicable law. Sensitive Information is collected by RUF only with your consent and may include information regarding economic status, cultural identity, social identity, medical or health conditions, racial or ethnic origin, religious or philosophical beliefs, citizenship or immigration status, and user geolocation. RUF collects Sensitive Information for the purpose of better understand and serve the needs of its charitable beneficiaries. RUF does not sell Sensitive Information, and it shares such information only with its sister organizations and partner organizations, only for the purpose of undertaking joint charitable activities.

1.3.3 Financial Information

RUF may gather Financial Information. “Financial Information” means credit card numbers, debit card numbers, bank account numbers, and other similar sensitive payment-related information.

1.3.4 Analytics Information

In an effort to improve visitors’ experiences on the Website, RUF gathers certain information related to individuals’ website visits, collectively “Analytics Information”. Analytics Information does not correlate to you individually and is used solely to measure and improve RUF’s Website and to better serve RUF’s Website visitors. RUF uses aggregate statistical data to compile reports. Analytics Information is likely to include the following: 

1.3.4.1 Device- and Network-Specific Information

Device- and network-specific information includes your unique device identifier, operating system and version, the browser you use, your internet service provider (ISP), and your internet protocol (IP) address.

1.3.4.2 Geographical Information

Geographical information includes your language, zip code, area code, general location, and local time zone. 

1.3.4.3 Website Visit Information

Website visit information includes data such as the domain from which you came to the Website, details of how you use the Website, what webpages you visit on RUF’s Website, and the duration of your visit.

1.3.4.4 Third Parties and Analytics

RUF may employ third-party data analytics firms to track and analyze traffic on the Website and to analyze visitor trends, browser types, and usage trends.

Third parties that are referenced on the Website may have content embedded that uses cookies on your browser or tracks certain analytics information, such as your IP address. Third parties may not collect your Personal Information from the Website unless you provide it to such third parties.

1.3.5 Cookies 

1.3.5.1 Use of Cookies

RUF may use cookies on your computer. A cookie is a small piece of data sent from a website and stored in a user's web browser while the user is browsing that website. Every time the user loads the website, the browser sends the cookie back to the server to notify the website of the user's previous activity. Among other cookies, RUF may use cookies that track the activity of Website visitors across various websites to display third-party advertisements that are relevant and engaging for individual users.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.

RUF has a Cookie Declaration available for review HERE.

1.3.5.2 Do Not Track Signals

RUF does not respond to browser Do Not Track (“DNT”) signals. The Website may utilize page tags or web beacons to track information related to user visits as a part of RUF’s data analytics described below. Page tags, also known as web beacons, pixel tags, or tracking pixels, are small, transparent images or snippets of code that are embedded in websites, emails, or other digital content. They are used to track user behavior, monitor website performance, and gather analytics data.

1.4 Why RUF Collects Your Information

When you sign up to receive a publication of RUF, make a donation to RUF, or otherwise use the Website, RUF may gather Personal Information. Specifically, RUF gathers your Personal Information to accomplish the following objectives. 

1.4.1 To Provide Services

RUF may use your Personal Information to provide services to you upon your request. Such services may include sending you newsletters and publications, responding to your questions and comments, communicating with you concerning your financial transactions conducted on the Website, emailing you updates concerning RUF’s products and services, and personalizing your visits to the Website.

For example, if you obtain a user ID, membership, educational materials, or otherwise request goods or services provided by RUF, you will receive information about RUF’s products, services, marketing information, and related offerings unless you choose to opt out. If you have questions about such communications or no longer wish to receive such offers, please contact RUF using the contact information provided below at Section 7 below. 

RUF may use your email address, usage data, or other Personal Information to provide you with technical support, to send you detailed summary emails regarding your transaction history with RUF, to provide you with important tax information, or to send you notices about the Website or other promotional offers you have elected to receive.

In connection with these services, RUF may also share your Personal Information with other RUF offices or with RUF’s subsidiaries and affiliates in the country in which you reside and in other countries.

1.4.2 To Fulfill RUF’s Contractual Obligations

RUF may collect Personal Information to fulfill RUF obligations under an agreement with you or other third parties. This may include collecting information such as names, addresses, and contact details for the purpose of providing products or services as outlined in our agreements. RUF may also use this information to communicate about updates, changes, or issues related to our agreements.

1.4.3 To Improve Your Experience on the Website

We may use your Personal Information to improve your experience on the Website. By collecting your Personal Information, RUF is better able to personalize your experience by storing your preferences and enabling us to show you relevant content tailored to your interests. Additionally, cookies can remember your login credentials, shopping cart contents, or language preferences. Your Personal Information also helps RUF understand how you interact with RUF’s website, such as which pages you visit and how long you spend on each page, allowing RUF to optimize the Website's layout and user experience.

2. Security and Compliance

2.1 Security

RUF takes the security of your Personal information very seriously. When your Personal Information is stored by RUF, RUF uses limited-access, protected servers. RUF retains your Personal Information only for as long as reasonably necessary for the purpose for which it was collected. RUF does not collect, store, or transmit user social security numbers, driver’s license numbers, or similar information. 

Unfortunately, data transmission over public networks may not be secure. While RUF will use all reasonable means to protect your Personal Information, RUF cannot guarantee the security of your transmissions of such Personal Information, and you use the Website at your own risk. If you suspect your Personal Information has been compromised, please notify RUF using the contact information provided below.

2.2 Financial Data Precautions

RUF takes the privacy and security of your Financial Information seriously. In order to provide you with a seamless and secure experience when making transactions or payments, RUF has partnered with trusted third-party Payment Card Industry Data Security Standard (PCI DSS) compliant financial service providers to process your Financial Information.

Please note that RUF does not directly receive, access, or store your Financial Information, such as credit card or bank account numbers. Instead, RUF employs a tokenization system, which replaces sensitive financial data with unique, non-sensitive tokens. These tokens allow us to securely and anonymously process transactions without exposing your financial information.

Our third-party financial service providers are required to adhere to stringent security standards, including the PCI DSS.

2.3 Data Breach

If RUF experiences a data breach and Personal Information is exposed, RUF will notify you and the relevant supervisory authority within 72 hours of RUF receiving knowledge of the breach and exposure. Additionally, RUF will quickly communicate data breaches to you unless the breach is unlikely to put your information at risk (for instance, if the stolen data is encrypted).

2.4 Third Party Precautions 

We carefully select our third-party service providers and partners based on their ability to process Personal Information consistent with RUF commitments to data privacy set forth in this Online Privacy Policy. RUF shares your Personal Information with such third parties only when it is necessary to provide our services to you or to improve our service offerings. RUF also ensures that these third parties have appropriate technical and organizational measures in place to protect your Personal Information from unauthorized access or processing.

2.5 Third Party Agreements

Where required, RUF enters into legally binding agreements with third-party data processors. These agreements explicitly outline the terms and conditions governing data processing activities, the scope and purpose of data processing, and the respective roles and responsibilities of each party. These agreements also require our third-party data processors to implement appropriate security measures, provide timely notification in case of data breaches, and assist us in fulfilling our obligations applicable law, such as responding to your data subject access requests.

2.6 International Data Transfers

RUF may transfer your Personal Information to third-party recipients located outside the European Economic Area (EEA). When this occurs, RUF ensures that these transfers are subject to adequate safeguards in line with GDPR requirements, such as the use of Standard Contractual Clauses or adherence to Privacy Shield frameworks, where applicable.

2.7 Retention

2.7.1 Retention Periods

We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including, but not limited to, providing our services to you, complying with legal obligations, resolving disputes, and enforcing our agreements.

The specific retention periods for different categories of Personal Information may vary based on the nature of the data, the purposes for which it was collected, and any applicable legal or regulatory requirements. Once the retention period for a specific category of Personal Information has expired, RUF will securely delete or anonymize the data, in accordance with our data disposal procedures.

2.7.2 Legal and Regulatory Requirements

In certain cases, RUF may be legally obligated to retain your Personal Information for longer periods, such as for tax, accounting, or other regulatory purposes. In these instances, RUF will retain your Personal Information in accordance with the relevant legal and regulatory requirements.

2.7.3 Data Anonymization

Where possible, RUF may choose to anonymize your Personal Information so that it can no longer be associated with you. Anonymized data is not subject to GDPR requirements and may be retained indefinitely for statistical, research, or other purposes, without any impact on your privacy.

3. Information RUF Shares and With Whom

3.1 Aggregated Information Sharing

RUF may share aggregated demographic information with RUF’s partners and third parties. Aggregated demographic information is generally collected from numerous persons and does not correlate to any specific individual. Aggregated information is not linked to your Personal Information and cannot be used to identify you. 

3.2 Personal Information Sharing

3.2.1 Information Sharing to Date

RUF does not sell the Personal Information of visitors to the Website and has not done so in the preceding twelve months to date. However, RUF does disclose, and in the preceding twelve months to date has disclosed, Personal Information voluntarily provided by visitors to the Website, including name, address, email address, telephone number, credit card number, debit card number, and bank account number, as necessary to third-party servicers and processors in order to provide services to Website visitors, as more fully discussed below.

3.2.2 Third-Party Services

RUF may partner with third parties to provide specific services to Website visitors. When you sign up for these services, RUF may share your name or other contact information as necessary for the third party to provide these services. These parties are not allowed to use your Personal Information except for the purpose of providing these services. Furthermore, while RUF will never rent or sell your email address to outside parties, RUF may occasionally ask your permission to share your email address with third parties so that you can receive information or communications from those parties.

3.2.3 Donation Transactions

As discussed in Section 2.2, all donation transactions originated on the Website are processed by third-party PCI DSS-compliant payment processors. Your Personal Information may be disclosed to such payment processors. The transactions are handled by established third party-banking, processing agents, and distribution institutions. They receive the information needed to verify and authorize your credit card or other payment information and to process your donation. These companies are authorized to use your Personal Information only as necessary to provide their services to you and to comply with their legal obligations, such as to provide RUF with your Personal Information, including your name, address, phone number, email address, and amount donated for tax or other reporting purposes. 

3.3 Other Possible Disclosures

In addition to the other disclosures stated herein, RUF may share your Personal Information for the following purposes and with the following parties, as applicable: 

1. To comply with applicable laws, regulations, legal processes, government-enforced orders, or data security assessments.
2. To enforce applicable terms of service, protect RUF’s legal rights, or defend against legal claims.
3. To prevent, defend against, and otherwise address technical or security issues, including suspected or potential fraud.
4. To guard against harm (whether actual or potential) to the legal rights, property, or safety of RUF, visitors to the Website, or the general public as required or permitted by law.
5. To facilitate communications with social media platforms. These social media platforms may have their own data collection, use, and sharing practices that may also be applicable to your Personal Information. You should review their applicable privacy policies and methods for changing the privacy or sharing settings on such services.
6. To effectuate a merger, divestiture, restructuring, reorganization, dissolution or other transfer of some or all of RUF’s assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which users’ Personal Information held by RUF is among the assets transferred.
7. To fulfill the purpose for which you provide it. For example, if you provide RUF with an email address for the purpose of RUF sending you a regular newsletter, RUF may use it to regularly send you newsletters.
8. To achieve any other purpose to which you expressly consent.
   

   4. Your Privacy Rights 

Subject to the limitations set forth in Sections 4.9 and 4.10 you have the following rights with respect to your Personal Information.

4.1 Your Right to Opt Out

You may have the right to opt out of RUF’s data collection for certain purposes. If you would prefer that RUF not collect Personal Information about your Website visits, you may opt out by contacting us by using the information provided in Section 7. 

4.2 Your Right of Confirmation and Access

You may have the right to confirm whether RUF is processing your Personal Information and to access your Personal Information, subject to certain limitations. You may also have the right to request additional information related to the categories of information collected, sources of information collected, purpose for information collection, categories of third parties to whom information is disclosed, and the specific pieces of information collected. You may request such confirmation, access, or additional information by contacting us using the information provided in Section 7.

4.3 Your Right to Correction

You may have the right to correct inaccuracies in your Personal Information, subject to certain limitations. To request changes to the content of your Personal Information, you may contact us by using the information provided in Section 7. Please note that RUF is not responsible for updating information shared with third parties.

4.4 Your Right to Data Deletion

You may have the right to have your Personal Information you may have provided to RUF deleted, subject to certain limitations. You may request that RUF delete your Personal Information by contacting us by using the information provided in Section 7.

4.5 Your Right to Data Portability

You may have the right to obtain your Personal Information in a portable and, to the extent technically feasible, readily usable format, to allow you to transmit your Personal Information to another controller without impediment, subject to certain limitations. You may request your Personal Information in such a format by contacting us by using the information provided in Section 7.

4.6 Your Right to Limit Use and Disclosure of Sensitive Information 

You may have the right to request that the use and disclosure of sensitive information, if any, be limited to those uses which are necessary to perform the services or provide the goods for which the information was provided and other authorized uses. You may request such limitations on use and disclosure by contacting us by using the information provided in Section 7.

4.7 Your Right to Object

You have the right to lodge a complaint with a supervisory authority.  Please contact RUF as outlined in Section 7 to inquire about the appropriate supervisory authority for your jurisdiction. 

4.8 Your Rights Related to Automated Decision-Making and Profiling

You have a right not to be subject to a decision based solely on automated processing, including profiling, which produce legal effects concerning you and similarly significantly affects you. You can object to your Personal Information being used in this way. RUF is permitted to use automated decision-making and profiling if the decision:

1. is necessary for entering into, or performance of, a contract between you and us;
2. is authorized by EU or a member state law to which RUF is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
3. is based on your explicit consent.

Where RUF engages in automatic decision-making or profiling in connection with a contract between us or pursuant to your explicit consent, RUF implements suitable measures to safeguard your rights and freedoms and legitimate interests, including the right to obtain human intervention from us in the course of decision-making process, and the opportunity to express your point of view and to contest the decision.

4.9 Limitations on Access

We may restrict your right to access your Personal Information in the following situations.

4.9.1 Manifestly unfounded or excessive requests

If your access request is repetitive or clearly intended to cause inconvenience or disruption, or if the request is overbroad or too generalized, RUF may refuse to comply or charge a reasonable fee to cover our administrative costs.

4.9.2 Protection of the rights and freedoms of others

If providing access to your Personal Information would negatively impact the privacy rights, trade secrets, or intellectual property of others, RUF may limit or deny your request.

4.9.3 Legal compliance

If RUF is legally required to withhold your Personal Information, such as in cases of ongoing legal proceedings or regulatory investigations, or if disclosure would violate our contractual obligations, RUF may limit or refuse your access request.

4.9.4 Prevention, investigation, or prosecution of criminal offenses

We may limit your access to Personal Information data if doing so is necessary for the prevention, investigation, or prosecution of criminal offenses or the execution of criminal penalties.

4.9.5 Regulatory supervision and enforcement

If providing access to your Personal Information would hinder the performance of tasks aimed at ensuring regulatory compliance or enforcement, RUF may limit your access request.

4.10 Limitations on Deletion and Modification

There are certain circumstances in which RUF may be legally required or permitted to refuse or limit your request to delete or modify your Personal Information. This section outlines the legitimate reasons for not honoring your data erasure and modification requests, including contractual obligations and other legitimate grounds.

4.10.1 Contractual Obligations

If your Personal Information is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract, RUF may be unable to delete or modify your data.

4.10.2 Legal Compliance 

If RUF is legally obligated to retain your Personal Information for purposes such as tax, accounting, or other regulatory requirements, RUF may refuse or limit your erasure or modification request.

4.10.3 Assertion, Exercise, or Defense of Legal Claims

We may refuse or limit your erasure or modification request if your Personal Information is necessary for the establishment, exercise, or defense of legal claims.

4.10.4 Other Legitimate Interests

If the retention of your Personal Information is in furtherance of archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, under certain circumstances; public health reasons consistent with the exceptions for processing special categories of Personal Information such as health information; exercising official authority vested in us; performing a task carried out in the public interest; exercising the right of freedom of expression and information; or otherwise in RUF legitimate interests under the law, RUF may refuse or limit your erasure or modification request of your Personal Information.

5. Additional Notices

5.1 Changes to Online Privacy Policy

In the event of any change to RUF’s Online Privacy Policy, notice of such changes will be posted on the Website. Any changes to this Online Privacy Policy will become effective when RUF posts the revised Online Privacy Policy on the Website. Your use of the Website following these changes means that you accept the revised Online Privacy Policy.

5.2 Third-Party Websites’ Privacy Policies

When you click on links on the Website that take you to third-party websites, you will be subject to these third parties’ privacy policies. RUF cannot be responsible for the actions of any third-party websites and encourages you to read the posted privacy policies of each website you visit, whether you are linking from the Website or browsing on your own.

5.3 Children Under Thirteen

The Website is not intended for children under thirteen (13) years of age. No one under thirteen years of age is permitted to provide any information to or on the Website, and RUF does not knowingly collect Personal Information from children under thirteen years of age. If you are under thirteen years of age, do not use or provide any information to the Website, register on the Website, make any purchases or donations through the Website, use any features of the Website including any interactive or public comment features, or provide any information about yourself to RUF, including your name, address, telephone number, email address, or any screen name or user name you may use. If RUF learns it has collected or received Personal Information from a child thirteen years of age without verification of parental consent, RUF will delete that information. If you believe RUF might have any information from or about a child thirteen years of age, please contact us by using the information provided in Section 7. 

6. US State Privacy Rights

6.1 California

To learn more about California residents' privacy rights, visit https://oag.ca.gov/privacy/ccpa. California's "Shine the Light" law (Civil Code section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us by using the information provided in Section 7. 

6.2 Colorado, Connecticut, Virginia, and Utah

Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:

• Confirm whether RUF processes their Personal Information.
• Access and delete certain Personal Information.
• Data portability.
• Opt-out of Personal Information processing for targeted advertising and sales.
• Correct inaccuracies in their Personal Information, taking into account the information's nature and processing purpose.
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights or to appeal a decision regarding your rights under these states’ laws, please contact us by using the information provided in Section 7. 

6.3 Nevada

Nevada provides its residents with a limited right to opt-out of certain Personal Information sales. Residents who wish to exercise these sale opt-out rights may contact us by using the information provided in Section 7. However, please know RUF does not currently sell data triggering that statute's opt-out requirements.

7. Contact RUF

To obtain further information concerning the terms of this Online Privacy Policy, to exercise your privacy rights as detailed herein, or to appeal a decision RUF makes in response to a submitted request, please contact:

Mihai Lehene

[email protected] 

+17732898696