Privacy Policy

Last updated: 16 September 2026

This is an English translation provided for convenience. In case of any discrepancy, the Romanian version prevails.

1. Data controller

The Skete of Saint Neagoe-Vodă Basarab, Vlădești, Argeș County, Romania, e-mail sfneagoebasarab@gmail.com.

2. What data we process and why

Online donations (Stripe): your name, e-mail address and the amount donated, as you enter them on the Stripe page. Card details are processed only by Stripe; we do not receive them. Legal basis: carrying out the donation (Art. 6(1)(b) GDPR) and accounting obligations (Art. 6(1)(c)).
Bank transfer: the payer’s name and IBAN, as they appear on the bank statement. Legal basis: accounting obligations.
Correspondence: the data you send us by e-mail or phone, so that we can reply. Legal basis: legitimate interest.
Publishing donors: we do not publish donors’ names anywhere. The names on the bricks illustrated on the website are a design element, not real people. Donations are anonymous on the website.
Visiting the website: we do not use traffic analytics or advertising tools. Fonts are loaded from Google Fonts, which passes your IP address to Google — see the Cookie Policy.

3. Who we share data with

Stripe Payments Europe Ltd. (payment processor), our bank, our accountant or accounting service providers and, where the law requires it, the authorities. We do not sell or pass on data to third parties for marketing purposes.

4. How long we keep data

Financial and accounting documents — for the period required by law (currently 5 years for supporting documents and 10 years for financial statements). Correspondence — for as long as needed to reply, then for no more than 2 years.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent. Write to us at the contact address; we will reply within 30 days at the latest. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

6. Security

The website is served over HTTPS. Payments are made on Stripe’s PCI DSS certified infrastructure. Access to the Stripe account and to bank statements is restricted to the people responsible.