Privacy Policy

1. Preamble and Responsible Controller

We, the CHARITABLE ORGANIZATION UMAN CHARITABLE FOUNDATION SERCE DRUHA (hereinafter referred to as 'we' or 'us'), take the protection of your personal data very seriously. This declaration informs you about how we process data within our online services in accordance with the EU General Data Protection Regulation (GDPR). The responsible controller within the meaning of Art. 4 No. 7 GDPR is: 30 Sholom-Aleichem St, Uman, Cherkasy Region, 20300, Ukraine, E-mail: kateklymenko03@gmail.com, Board of Directors: YANINA MYKOLAIVNA TYKHOVSKA

2. Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent (Art. 6 para. 1 lit. a GDPR): if you voluntarily submit data to us (for example, via a Google Form).

Performance of a contract (Art. 6 para. 1 lit. b GDPR): for coordinating volunteer activities or processing donations.

Legitimate interest (Art. 6 para. 1 lit. f GDPR): to ensure IT security and analyze website traffic.

3. Data Collection on Our Website (Google Sites)

Our website is provided through Google Sites (Provider: Google Ireland Limited, Dublin, Ireland).

Hosting: Google automatically records IP addresses and technical log files, which are technically necessary for the correct display of the website.

Google Cloud CDN: for faster delivery of our content, we use Google's Content Delivery Network. The legal basis is our legitimate interest in the safe and efficient provision of services (Art. 6 para. 1 lit. f GDPR).

4. Volunteer Registration (Google Forms)

We use Google Forms for the registration of volunteers.

Scope of data: we collect data such as name, email address, and phone number.

Purpose: exclusively for organizing our charitable projects and establishing contact.

Retention period: data is deleted as soon as cooperation ceases or you withdraw your consent.

5. Data Security

Following the example of the DRK e.V. (German Red Cross), we apply technical and organizational security measures (TOMs) to protect your data from manipulation, loss, or unauthorized access. Since our website is built on Google Sites, we utilize the high security standards of Google's infrastructure (encryption via HTTPS).

6. Your Rights (Data Subject Rights)

In accordance with the GDPR, you have the following rights:

Right of access (Art. 15): you can find out what data we store about you.

Rectification and erasure (Art. 16, 17): you can correct errors or request the deletion of your data.

Right to object (Art. 21): you can object to the processing of your data at any time.

Right to lodge a complaint: you have the right to lodge a complaint with a competent data protection supervisory authority.