Petition privacy notice – 19 October 2026
Roma Security Now: European Institutions Must Act! — Petition privacy notice, version 19 October 2026.
Who is responsible?
Roma Center e.V., Am Leinekanal 4, 37073 Göttingen, Germany. For questions, access, correction, deletion or withdrawal of consent, contact mail@roma-center.de and identify the email address used to sign. We may need to verify that you own that address.
What we collect and why
We collect your full name, country and email address, your support for this petition, the consent text and its version, and submission and confirmation dates. We use these records to verify and count signatures, prevent duplicate or abusive submissions, administer the petition and present it to the institutions below. Supporting a petition may reveal political opinions. We do not ask for your ethnicity, postal address or telephone number.
Your choice and consent
Signing is voluntary. We rely on your consent under Article 6(1)(a) GDPR and your explicit consent under Article 9(2)(a) GDPR where your support reveals political opinions. The name, country, email and consent fields are required to register a signature. An email verification link expires after 48 hours. Your signature counts only after you open that link and explicitly confirm it. Signing does not subscribe you to a newsletter.
Who can receive the data?
Authorized Roma Center administrators can access signature records. To present the petition, confirmed names, countries and confirmation dates may be supplied to the Council of Europe, European Parliament, European Commission and European Council, addressed as stated in the petition. Email addresses are used for verification and administration and are excluded from the signature list delivered to these institutions. Personal details are not published on this website or provided for advertising.
Website hosting and email service providers, including HostArmada, may need technical access to operate the service. Information about the website’s technical processing is also available in the general website privacy notice. Contact Roma Center for details of the providers, hosting locations and any applicable international-transfer arrangements. Recipient institutions process data they receive under their own applicable privacy rules.
How long are records kept?
Unconfirmed requests are removed after seven days. Confirmed signature records are removed from the active petition database after 365 days from confirmation, or earlier when a verified withdrawal or erasure request is processed, unless an applicable legal obligation requires otherwise. Daily automated cleanup may run on the next scheduled cycle. Hosting backup copies rotate separately and may retain deleted records for up to 30 further days. A delivered signature list may already be held by the recipient institutions; we will explain the steps available if you contact us after delivery.
Security and abuse prevention
Access to individual records and exports is restricted to administrators. Verification tokens are stored as hashes, expire and are used once. The petition plugin does not store raw IP addresses in its signature database; it uses short-lived hashed identifiers to limit abusive requests. Hosting and email systems may maintain separate technical logs. Social sharing buttons are ordinary links; using them takes you to the selected provider.
Your rights
You may withdraw consent at any time by contacting mail@roma-center.de. Withdrawal does not affect the lawfulness of processing before withdrawal. Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction and data portability, and object where an applicable right to object exists. You may lodge a complaint with a competent supervisory authority, including the State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen). We do not use petition records for automated decisions or profiling.