This page explains, in plain language, what happens to your data when you use the OncoGuide donation pages. Our principle: collect as little as possible – ideally, nothing.
Processing happens in your browser
The forms on the donation pages (calculator, contract data, Form 230 data) run exclusively in your browser, on your device. Documents are generated locally. The data you enter – including the CNP (personal numeric code) for Form 230 – is not sent to, stored by, or visible to us or anyone else.
If you close the page, the data is gone. We use no tracking cookies, no analytics, and we have no servers receiving anything.
The copy sent to the association – only with your consent
After generating a document, we offer the option to email us a copy so we can track the incoming payment. This sending:
- happens only if you choose it, via an explicit consent checkbox;
- leaves from your own email client, directly to the association’s address – the document passes through no other service;
- makes the association a controller, in the GDPR sense, of the data in the received copy (name, identification data).
Received copies are kept in the association’s private archive (locally and in private storage), strictly for donation records and the related legal obligations. They are not shared with anyone and not used for any other purpose.
The no-personal-data notification
When you send a copy (and only then), the page may send a minimal technical notification to the association: the document type, the page language, and the moment of generation. This notification contains no personal data whatsoever – no names, no amounts, no CNP.
The notification goes through a Cloudflare Pages Function and Resend, the delivery service also used by our contact form. It contains only the donation-flow type and page language – no document or donor information. The providers may retain operational logs according to their own policies, but this notification does not contain your personal data.
Form 230 sent by post – we file it with ANAF for you
If you choose the simplest route – mailing us the signed paper original of Form 230 – the association takes it from there, per the official procedure (ANAF Order 103/2025 ):
- we transmit to ANAF, electronically, the centralizing statement with the form’s data (name, personal identification number, amount) by the legal deadline of 25 May – the association’s legal obligation as beneficiary entity;
- we keep the paper original, to present it to the tax authority on request, for as long as the law requires;
- your data is used exclusively for this filing and the legally required records: it is not entered into other systems, not shared with anyone besides ANAF, and not used for any other purpose.
Legal basis: the beneficiary entity’s legal obligation under the ANAF procedure, triggered by your choice to send us the form. For any question about your form, write to us via the contact page .
Your rights
For any request about your data (access, rectification, deletion of a sent copy), write to us via the contact page . We answer every message.
In short
| What | Where it goes |
|---|---|
| Data entered in the forms | Your browser only; gone when you close the page |
| Generated documents (contract, Form 230) | Downloaded to your device |
| The copy to the association | Only with your explicit checkbox, from your own email, into the association’s private archive |
| The technical notification | No personal data; Cloudflare Pages and Resend |