Privacy Policy
This privacy policy describes how Nadiya Foundation collects, uses, and protects personal data when you use our online platform or interact with our services. We are committed to protecting your privacy and handling your data in a transparent and responsible manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Who We Are
Nadiya Foundation is the data controller responsible for your personal data collected through our online platform. Our address is:
Nadiya Foundation
15 Ivan Franko Street, Suite 3
Kyiv, Kyiv, 01034
Ukraine
What Data We Collect
We may collect various types of personal data depending on your interactions with our site and services. This may include:
Information you provide directly:
- Contact details such as name, address, phone number, email address.
- Information related to donations, volunteer applications, or requests for assistance.
- Personal details relevant to the humanitarian aid and support services we provide, such as needs, family information, or background information necessary for eligibility or support.
- Communications you send us, such as inquiries, feedback, or reports.
Information collected automatically:
- Technical data such as IP address, browser type, operating system, device type, and other technical information about your visit to our site.
- Usage data such as pages visited, time spent on pages, links clicked, and referring website addresses.
- Information collected through cookies and similar tracking technologies (see the section on Cookies).
How We Use Your Data
We use the personal data we collect for various purposes related to our mission as a humanitarian aid and social services organization, including:
- To process and manage donations and contributions.
- To evaluate and process applications for volunteering or employment.
- To identify, assess, and provide humanitarian assistance, shelter, psychological support, legal aid, and essential goods to internally displaced persons and vulnerable populations.
- To administer and manage social adaptation and community development programs.
- To communicate with you about our work, updates, and opportunities, where you have consented or we have a legitimate interest.
- To respond to your inquiries, requests, and provide support.
- To improve our online platform and services, understand user behaviour, and ensure security.
- To comply with legal obligations and enforce our policies.
Legal Basis for Processing
We process your personal data based on several legal grounds, including:
- Your consent: Where you have given clear consent for us to process your personal data for a specific purpose.
- Performance of a contract: Where the processing is necessary for a contract we have with you, such as processing your volunteer application or providing services you have requested.
- Legal obligation: Where the processing is necessary to comply with a legal or regulatory obligation.
- Vital interests: Where the processing is necessary to protect someone's life.
- Legitimate interests: Where the processing is necessary for our legitimate interests (or those of a third party), provided these interests are not overridden by your fundamental rights and freedoms. This includes interests in managing and operating our organization effectively, providing and improving our services, and ensuring security.
Data Sharing and Disclosure
We may share your personal data with third parties only in limited circumstances and for specific purposes:
- Service Providers: We may share data with trusted third-party service providers who perform functions on our behalf, such as payment processing, data hosting, communications services, or IT support. These providers are contractually bound to protect your data and use it only for the purposes we specify.
- Partners: We may share data with partner organizations involved in delivering humanitarian aid or support services, but only where necessary for the coordinated provision of assistance and with appropriate safeguards.
- Legal Requirements: We may disclose your data if required by law, court order, or government request, or to protect our rights, property, or safety, or the rights, property, or safety of others.
- With Your Consent: We may share your data with other third parties when you have given us explicit consent to do so.
We do not sell, rent, or trade your personal data.
Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include data encryption, firewalls, access controls, and regular security audits. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. The specific retention period depends on the type of data and the purpose of processing.
Your Data Protection Rights
Under GDPR and other applicable laws, you have several rights regarding your personal data:
- Right to be informed: You have the right to receive clear and transparent information about how we process your data. This policy serves that purpose.
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to erasure (right to be forgotten): In certain circumstances, you have the right to request that we delete your personal data.
- Right to restrict processing: In certain circumstances, you have the right to request that we limit how we use your personal data.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Right to object: You have the right to object to the processing of your personal data in certain situations, particularly where the processing is based on legitimate interests or for direct marketing.
- Rights related to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
If you wish to exercise any of these rights, please contact us using the contact details provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).
You also have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data infringes applicable law.
Cookies and Tracking Technologies
Our online platform may use cookies and similar tracking technologies to collect information about your browsing behavior. Cookies are small text files placed on your device. They help us operate our site, analyze usage, and improve your experience. You can typically manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of our site.
International Data Transfers
As we operate internationally and work with partners in different countries, your personal data may be transferred to and processed in countries outside of the European Economic Area (EEA) or your home country. When we transfer your data internationally, we take steps to ensure it is protected by appropriate safeguards, such as relying on adequacy decisions of the European Commission or implementing standard contractual clauses approved by the European Commission.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by posting the new policy on this page. We encourage you to review this policy periodically.
Contacting Us
If you have any questions about this privacy policy or our data practices, or if you wish to exercise any of your rights, please contact us by mail at the following address:
Nadiya Foundation
15 Ivan Franko Street, Suite 3
Kyiv, Kyiv, 01034
Ukraine