Privacy policy
This policy explains what personal data Asociace MOST UA-CZ z.s. processes, for what purposes, and what rights you have under the General Data Protection Regulation (GDPR).
Data controller
Asociace MOST UA-CZ z.s., Company ID (IČO) 23342471, registered office: Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic. Contact for data matters: asociace.most.ua.cz@gmail.com or data box 8gfjn8y.
What data we process and why
We only process data needed for a specific purpose:
- Email enquiries — name, email address and message content; legal basis: our legitimate interest in replying to you (Art. 6(1)(f) GDPR).
- Contributions — payment is processed by Stripe Payments Europe Ltd.; we receive the name, email and amount; legal basis: performance of a contract and statutory accounting obligations (Art. 6(1)(b), (c) GDPR).
- Membership applications — data provided in the application; legal basis: steps prior to membership (Art. 6(1)(b) GDPR).
- Google Analytics 4 — cookies and pseudonymised usage data; legal basis: exclusively your consent given via the cookie banner (Art. 6(1)(a) GDPR).
Cookies
Your analytics choice is stored locally in your browser (localStorage, key most-cookie-consent); it is not a cookie, is never sent to our server, and requires no consent. Google Analytics 4 cookies (_ga, _ga_*) are set only after you consent and are stored for up to 13 months. You can withdraw or change consent at any time using the “Cookie settings” button in the footer of every page — the banner reappears and analytics is switched off.
Who we share data with
Data is processed by our processors: Stripe Payments Europe Ltd. (payments), Resend, Inc., USA (delivery of emails from application forms), Google Ireland Ltd. (analytics, with consent), Google LLC, USA (the Gmail mailbox that receives applications), Vercel, Inc., USA (site hosting), Neon, Inc., USA (content management system database) and Cloudflare, Inc., USA (storage of uploaded files). Transfers outside the EEA rely on the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework. We do not sell personal data or share it with third parties for advertising.
Retention
Correspondence — up to 2 years after the communication ends. Applications for membership, volunteering, the leadership programme and the grant programme (name, email, message) — up to 3 years after the review concludes; deleted earlier on request. Accounting records of contributions — for the periods required by Czech law (5–10 years). Analytics data — up to 14 months.
Your rights
You have the right of access, rectification, erasure, restriction of processing, objection and data portability, and the right to withdraw consent at any time. To exercise your rights, write to asociace.most.ua.cz@gmail.com. You may also lodge a complaint with the Czech supervisory authority — Úřad pro ochranu osobních údajů (uoou.gov.cz).