Privacy policy

    Information under GDPR Articles 13 and 14 on personal data processing.

    Last updated: October 22, 2026

    1. Data controller

    Controller: Unity of Mind Association, tax ID 40389200, registered office 3 Ciocârliei Street, Măgurele, Ilfov, Romania, place of activity 17 Temișana Street, Sector 1, Bucharest. Privacy contact: contact@unityofmind.eu. The form on the Contact page is the main channel for requests. To exercise GDPR rights or ask legal questions, use the same form or e-mail contact@unityofmind.eu.

    2. Data we process

    • Via the contact form: name, email address, phone number (optional), selected service or enquiry subject, message, and acknowledgement that you have read this notice. Your name, email and message are needed to respond; you can submit a request without a phone number.
    • Technical data when submitting the form: anti-abuse verification token (Cloudflare Turnstile), IP address, and browser metadata where needed for security.
    • Cookie preferences: choices saved in the cookie banner / settings (stored locally in your browser).
    • After analytics consent: page visits, interactions, browser and device information, cookie identifiers and successful contact form submissions. The submission event does not include your name, email, phone number, subject or message.
    • Data voluntarily sent by e-mail if you contact us directly.

    3. Purposes and legal bases (GDPR)

    • Handling appointment requests — Art. 6(1)(b) GDPR (steps at your request before providing services). Responding to general enquiries — Art. 6(1)(f) GDPR (our legitimate interest in answering requests). The optional phone number is used to discuss your enquiry and arrange an appointment, not for advertising calls.
    • The form checkbox acknowledges this notice; it is not marketing consent. Consent to non-essential cookies is managed separately and is not required to submit the form.
    • Abuse and spam prevention on the form — Art. 6(1)(f) GDPR.
    • Legal compliance — Art. 6(1)(c) GDPR.
    • Strictly necessary cookies — Art. 6(1)(f) GDPR; non-essential cookies (analytics, functional, marketing) — Art. 6(1)(a) GDPR and Romanian Law no. 506/2004.

    4. Minors

    For enquiries about a child, a parent or legal guardian should complete the form using their own contact details. Briefly describe the enquiry without national ID numbers, diagnoses, medical documents or other sensitive details. The form is for initial contact; information needed for assessment or therapy is agreed separately with the specialist, with the appropriate notice. Data not needed for the enquiry should not be retained in the initial correspondence.

    5. Recipients and processors

    We do not sell personal data. Requests are accessible to authorised association staff handling them and to providers needed to operate the services, within their respective roles:

    • Vercel Inc. — hosting for www.unityofmind.eu (possible US transfer with appropriate safeguards, e.g. SCCs).
    • Cloudflare, Inc. — Turnstile service for contact form protection.
    • Google — Google Analytics 4 for usage statistics and successful contact request measurement, and Google Tag Manager for tag management, after analytics consent. Collection can be stopped through Cookie settings.
    • ClausWeb (CLAUS WEB SRL, Romania) — hosting of the form delivery service and the contact@unityofmind.eu mailbox. If provided, your phone number is included in the enquiry email and is not displayed publicly.

    6. Transfers outside the EEA

    Where transfers outside the EEA occur, we apply safeguards under Articles 44–49 GDPR. You may request further information at our contact address.

    7. Retention

    • Form messages are delivered by email. Enquiries that do not lead to an appointment, including related correspondence and contact details, are kept for no more than 3 months after the last exchange of messages and are then deleted. Further retention is justified only by an applicable legal obligation or a documented need to establish, exercise or defend a legal claim. Records of services provided and financial or accounting records are handled separately according to their purpose and applicable obligations.
    • Cookie preferences: up to 12 months or until consent is withdrawn/changed.
    • Security-related technical data: limited period proportionate to abuse prevention.

    8. Your rights

    Under GDPR you have rights of access, rectification, erasure, restriction, portability (where applicable), objection, and withdrawal of consent. Contact contact@unityofmind.eu or use the contact form. We respond without undue delay and within one month of receiving your request. For complex or numerous requests, this may be extended by two further months; we inform you of the extension and reasons within the first month.

    9. Supervisory authority

    You may lodge a complaint with ANSPDCP (Romanian DPA): www.dataprotection.ro.

    10. Security

    We apply reasonable safeguards: HTTPS, anti-abuse checks on the form, limited data access, and security updates.

    11. Automated decisions

    We do not use solely automated decisions with significant legal effects regarding the contact form.

    12. Updates

    We update this policy when legal, technical, or operational changes occur. The published website version applies.