Personal data and cookies

Effective date: 23 April 2026 · Version: 1.0

1. Data controller

The controller is Power of Kindness z. s., registered office Opavska 390, 793 68 Dvorce, Czech Republic, Company ID 24923869, registered in the associations register maintained by the Regional Court in Ostrava, file number L 22684.

No Data Protection Officer has been appointed.

2. What data we process

• identification and contact data you provide directly,
• message content sent by contact form or e-mail,
• technical data related to website requests and communication security,
• data required for donation administration, accounting and legal obligations.

3. Website visits and technical logs

When visiting the website, we may process IP address, request time, requested page, response status, browser/device details, referrer and language preferences when provided by the browser.

Purpose: website operation, security and abuse prevention, troubleshooting and aggregate traffic statistics. Legal basis: legitimate interest in secure and reliable operation.

4. Contact form

When you submit the contact form, we process data needed to receive and handle your message, including technical metadata for delivery and security.

Legal basis: legitimate interest in communication handling and website protection; where relevant, pre-contractual steps at your request.

5. Donations, contracts and related administration

For donations, confirmations and related legal/accounting records, we process only data necessary for receipt, evidence and compliance with legal obligations.

6. Data sources

• directly from you via website forms, e-mail or communication,
• banking, accounting and contractual records,
• public registers or public authorities where legally required.

7. Recipients of personal data

Data may be shared in necessary scope with hosting and infrastructure providers, IT service providers, e-mail service providers, accounting/legal advisors, banks/payment providers and public authorities where required by law.

For anti-bot protection and form security we use Cloudflare Turnstile as a processor in necessary technical scope.

8. Transfers outside EU/EEA

We primarily process data within EU/EEA. If transfer outside EU/EEA is exceptionally necessary, it is done in compliance with applicable law and with appropriate safeguards.

9. Retention periods

• operational/security logs: typically up to 30 days, unless a longer period is justified for security or technical reasons,
• contact messages: typically up to 12 months after the communication is closed, unless a follow-up matter arises,
• donation/accounting/tax documents: usually up to 10 years where required by law,
• legal claims data: for the period necessary to protect legal rights.

10. Your rights

You may request access, correction, erasure, restriction, objection, portability (where applicable), and withdrawal of consent where processing is based on consent. You may also lodge a complaint with the Czech Data Protection Authority (UOOU).

11. Cookies, session storage and similar technologies

We minimize data stored in user devices and do not use advertising, marketing or profiling cookies.

Only strictly necessary technical storage may be used for website function, security and basic session behavior (for example temporary dismissal of the information strip).

12. Traffic statistics

We may use aggregate operational statistics for website operation, performance and security diagnostics, without advertising profiling.

13. External links and social media

When you open external links (for example social media), further processing is governed by the privacy policy of the third-party service.

14. Security and data minimization

We apply proportionate technical and organizational safeguards and disclose only the minimum necessary information, including reasonable limitations for sensitive locations and security details.

15. Updates of this document

This document may be updated when services, legal requirements or data processing practices change. Current version is always published on this page.