Skip to content
HEAVENFOUNDATION
Donate INT · EN

Privacy policy

Version of 13 October 2026.

1. Who processes your data

The data controller is the HEAVEN ON EARTH Foundation (Fundație „HEAVEN ON EARTH”), IDNO 1016620002738, registered office: 2 Negreșteni St., apt. 1, Chișinău, Republic of Moldova (“the Foundation”, “HEAVEN Foundation”). You can reach us through the contact form or at office [at] heavenfoundation.eu.

2. What data we process and why

  • Messages sent through the contact form: name, email, phone (optional), subject, message. We use them to reply to your request (GDPR Art. 6(1)(b)) and, where relevant, on the basis of our legitimate interest in communicating with people who write to us.
  • Donations (once online giving is active): name, email, amount and date, to record the donation, send you a confirmation and meet our accounting and legal obligations.
  • Technical data: IP address and technical request information, kept temporarily by our hosting provider for security and to protect against automated (spam) messages.

3. How long we keep data

Contact messages are kept for up to 12 months after the last correspondence. Messages automatically identified as spam are deleted after 30 days. Donation data is kept for the period required by accounting law.

4. Who we share data with

We never sell or rent data. We use providers that process data on our behalf: Cloudflare (website hosting and email forwarding) and Google (the team’s mailbox). These providers may process data outside the European Economic Area under the safeguards required by law (standard contractual clauses). Data may be disclosed to authorities only where the law requires it.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you may withdraw your consent at any time. To exercise any of them, write to us through the contact form. You also have the right to lodge a complaint with a data protection authority: in the Republic of Moldova, the National Centre for Personal Data Protection; in the EU, the authority of your country.

6. Children

We never publish photos, names or stories of children without the written consent of their parents or legal guardians.

7. Cookies

This website does not use tracking or advertising cookies. Details in our Cookie policy.