Youth Connect EU-Ukraine
Your data rights

Privacy Policy

This privacy policy explains what data Youth Connect EU-Ukraine collects, why we collect it, and what we do with it. We only store what we need to run the platform — and we respect your rights under the European Union's General Data Protection Regulation (GDPR).

About This Privacy Policy

This policy covers the Youth Connect EU-Ukraine platform (you.rotineret.ro and related domains). It explains what information we collect about you, why we collect it, how long we keep it, and what rights you have under European data protection law.

Who Is Responsible for Your Data?

The Data Controller — the organisation responsible for your personal data — is the National Youth Foundation (FNT), a Romanian non-profit organisation. FNT designs, builds and operates this platform on behalf of the Youth Connect EU-Ukraine partnership.

Fundația Națională pentru Tineret (FNT)

Str. Christian Tell nr. 22, București, Romania

Email: [email protected]

What Personal Data Do We Collect?

Youth Connect EU-Ukraine collects only the personal data necessary to operate the platform. Here's what we collect:

Email address (for login)

When you log in, you enter your email address. We send you a one-time password (OTP) code via email. The email address and hashed code are stored briefly (codes expire after 10 minutes and are deleted once used). We also maintain a session cookie to keep you logged in.

Organisation profile

If you represent a youth organisation, you can create an organisation profile on the platform. You control what information you provide: organisation name, country, contact details, and description.

Uploaded resources

When your organisation submits a resource (a guide, toolkit, report, etc.), we store your submission — the file, title, description, and metadata — while it awaits moderation. Once approved, the submission becomes public (your organisation is credited).

Application submissions

When you submit an application to take part in a programme or event, we store the information you provide (name, email, country, and your motivation for applying). This data is used for managing your application and facilitating participation.

Newsletter emails

When you subscribe to the newsletter, we store your email address and a record that you gave explicit consent. You can unsubscribe at any time. We export the subscriber list as CSV for newsletter sending (no automated sending from the platform itself).

How We Use Your Data

  • • To enable you to log in and manage your account (emails, session cookies)
  • • To process and moderate submissions from your organisation (resources, applications, opportunities)
  • • To notify you about the status of your submissions and applications
  • • To manage newsletter subscriptions and send newsletters (with your explicit consent only)
  • • To comply with legal obligations (e.g., data access requests, safeguarding concerns)

Cookies and Tracking

Youth Connect EU-Ukraine does NOT use analytics, tracking cookies, or any non-essential cookies. We respect your privacy by design.

Session cookie (strictly necessary): The platform uses one session cookie to keep you logged in. This cookie is essential for the platform to function and does not track you across the web.

Your Rights Under GDPR

Under the European Union's General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access

    You have the right to request a copy of all personal data we hold about you.

  • Right to rectification

    If your personal data is inaccurate or incomplete, you have the right to correct it.

  • Right to erasure ('right to be forgotten')

    You have the right to request that we delete your personal data, subject to legal obligations (e.g., records needed for safeguarding).

  • Right to restrict processing

    You can request that we limit how we use your data while we investigate a concern or await your decision.

  • Right to data portability

    You have the right to receive your personal data in a common, machine-readable format and to transmit it to another organisation.

  • Right to object

    You have the right to object to our processing of your data — particularly for newsletter emails, where you can opt out at any time.

How to Exercise Your Rights

To exercise any of the rights above, contact the Data Controller directly:

Email: [email protected]

Address: Str. Christian Tell nr. 22, București, Romania

How Long Do We Keep Your Data?

We keep personal data only as long as necessary:

  • • Login emails and session records: Until you delete your account or 2 years of inactivity (whichever comes first)
  • • Submitted resources and applications: For the duration of the project (until 31 August 2027) and up to 1 year after for records
  • • Newsletter subscriptions: Until you unsubscribe

How We Protect Your Data

We take data security seriously. All data is stored on a secure server (FNT's virtual private server in Romania, protected by standard security controls). Passwords are hashed and never stored in plain text. We do not share your data with third parties except as required by law or for service delivery (e.g., Microsoft Graph for sending OTP emails — see below).

Questions About Your Data?

If you have questions about this privacy policy or how we handle your data, contact us:

Data Protection Officer (DPO)

Fundația Națională pentru Tineret (FNT)
Str. Christian Tell nr. 22, București, Romania
Email: [email protected]

Last updated: July 2026