Privacy policy

Wild Geese, z.s. ("Wild Geese", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit wildgeese.ngo (the "Website") or interact with our services. This policy complies with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and applicable Czech data protection law.

1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
Wild Geese, z.s.
Czech Republic
Website: wildgeese.ngo

 

2. What Data We Collect
We collect only the minimum data necessary for the purposes described below. The categories of personal data we may collect are:
Name — to identify you and personalise communications
Email address — to respond to enquiries, send application updates, newsletters, or donation receipts

 

3. How We Collect Your Data
We collect personal data directly from you when you:
Submit a volunteer application form
Subscribe to our newsletter
Make a donation
Post a comment on our blog or news section
Contact us by email or through a contact form
We may also automatically collect certain technical data (such as IP address, browser type, and pages visited) through cookies and analytics tools. Please see our Cookie section below.

4. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 GDPR:
Consent (Art. 6(1)(a)) — for newsletter subscriptions and non-essential cookies. You may withdraw consent at any time.
Legitimate interests (Art. 6(1)(f)) — for processing volunteer applications and responding to enquiries, where our interest in running our programmes does not override your rights.
Legal obligation (Art. 6(1)(c)) — where we are required to retain records under applicable law.

5. How We Use Your Data
We use your personal data for the following purposes:
To process and evaluate volunteer applications
To send you our newsletter (if you have subscribed)
To process donations and communicate with donors
To moderate and publish blog comments (your name/username may be publicly visible)
To respond to your queries and communications
To maintain the security and integrity of the Website
To comply with our legal obligations

6. Cookies and Analytics
We use cookies and similar tracking technologies to improve the Website experience and to measure the effectiveness of our advertising campaigns (including Google Ads). Cookies we may use include:
Essential cookies — necessary for the Website to function
Analytics cookies — to understand how visitors use the Website (e.g. Google Analytics)
Advertising cookies — to track conversions from our Google Ads campaigns
You can control cookies through your browser settings or via our cookie consent banner. Withdrawing consent for non-essential cookies will not affect the functionality of the Website.

7. Sharing Your Data
We do not sell your personal data. We may share it with:
Service providers acting as data processors on our behalf (e.g. email delivery services, analytics platforms, donation payment processors), bound by data processing agreements
Public authorities, where required by law
All third-party service providers are required to process your data only on our instructions and in accordance with GDPR.

8. International Transfers
Some of our service providers may be located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or we rely on adequacy decisions.

9. Data Retention
We retain your personal data only for as long as necessary:
Volunteer application data — for the duration of the selection process and up to 2 years thereafter, in case of future programme opportunities
Newsletter subscriber data — until you unsubscribe
Donation records — as required by Czech accounting and tax law (typically 5–10 years)
Blog comments — for as long as the post is published
We will securely delete or anonymise your data when it is no longer required.

10. Your Rights Under GDPR
As a data subject, you have the following rights:
Right of access — to obtain a copy of your personal data we hold
Right to rectification — to correct inaccurate or incomplete data
Right to erasure — to request deletion of your data ('right to be forgotten'), subject to legal obligations
Right to restriction — to request that we limit processing of your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests
Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us through the contact form on the Website. We will respond within 30 days. You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (UOOU), www.uoou.cz.

11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no data transmission over the internet can be guaranteed to be completely secure.

12. Children's Privacy
The Website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us so we can delete it promptly.

13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be published on this page with an updated effective date. We encourage you to review this page periodically.

14. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:
Wild Geese, z.s.
Website: wildgeese.ngo