Russian Antiwar Committee
Privacy Policy
This privacy policy describes how we, Russian Antiwar Committee, processes personal information (data) while managing donations within charitable projects. Information about these projects can be found on the website www.antiwarcommittee.info
We respect and protect your privacy and undertake to process your personal information in a fair and lawful manner. We ensure the confidentiality of personal information and implement appropriate technical and organisational measures to safeguard personal information from unauthorized access, unlawful disclosure, accidental loss, modification, destruction, or any other unlawful processing.
Personal information we collect
We currently collect and process the following information about our donors:
- First and last name (also person’s occupation when he/she represents an entity)
- Contact details (email address, address and/or phone number)
- Amounts donated and purpose of donation
- Type of credit/debit card, 4 last digits of credit/debit card, country of issuance, issuer of card, expiry date
- Correspondence with donors
How we get the personal information and why we have it
We process personal information to receive and manage donations within the projects “Sunrise” and “The Ark”, as well as to account for the donations received and used.
Most of the personal information we process is provided to us directly by you.
We also use a third-party payment processor, Stripe, to process all donations made to us on the website www.antiwarcommittee.info. We do not store card details and instead rely on Stripe for this. We obtain limited information from Stripe as indicated above in this privacy policy. The processing of such data by Stripe is covered by their privacy policy which may be viewed here: https://stripe.com/privacy
Stripe’s services in Europe are provided by a Stripe affiliate, Stripe Payments Europe Limited, an entity located in Ireland. In providing its payment processing services, Stripe Payments Europe Limited transfers personal data to Stripe, Inc. in the US. For further information about the safeguards used when your information is transferred outside the European Economic Area, see the section of Stripe’s privacy policy entitled “International Data Transfers.
Under the EU General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) We have contractual obligations – when we receive and manage donations
(b) We have legal obligation – when we account for the donations received and used
Whom we disclose personal information
We may share some personal information with competent authorities (such as tax authorities and law enforcement agencies) and accountants, legal consultants, auditors, or any other service providers, to whom disclosing of the personal information is necessary and lawful. In any case we do not disclose more personal information than is necessary for the purpose of disclosure.
How we store your personal information
Your information is securely stored in EEA.
We keep personal information for a limited time and in any event no longer than necessary for the purposes for which the personal information was collected. After retention period comes to an end, we will then delete the personal information.
Your data protection rights
Under GDPR, you have the following rights:
Your right of access – you have the right to ask us for copies of your personal information.
Your right to rectification – you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – you have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – you have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing – you have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – you have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
If you make a request, we have one month to respond to you. Please contact us at [email protected] if you wish to make a request.
You can also complain to the Lithuanian State Data Protection Inspectorate (website address: www.vdai.lrv.lt) if you are unhappy with how we have used your personal information.