Privacy Policy

Depending on how you interact with us, we may process:

• Contact information: your name, email address, and information you include when contacting us.
• Donation information: details made available by our bank or donation provider, such as your name, email address, donation amount, date, payment reference, and any message you include. Bank transfers may also show the sender's account details.
• Cryptocurrency transaction information: public wallet addresses, transaction amounts, and transaction identifiers associated with donations.
• Technical information: information processed by our website service providers, such as IP addresses, browser information, and request logs.
• Website statistics: aggregate reports from Cloudflare Web Analytics, described in Section 3.

Card and Apple Pay payments are completed through Buy Me a Coffee and its payment providers. We do not receive or store your full card number or card security code. Their handling of payment information is explained in the Buy Me a Coffee Privacy Policy.

You can choose not to provide information, but this may prevent us from responding to an enquiry or resolving a donation issue.

We use the information described in this policy to:

• Respond to questions and communicate with supporters.
• Administer donations, resolve payment issues, and maintain financial records.
• Operate the website, troubleshoot problems, and prevent abuse.
• Understand our audience and website usage through aggregate statistics.
• Meet legal obligations and handle legal claims.

Where applicable, we rely on our legitimate interests in communicating with supporters, administering our rescue work, and maintaining a secure website, provided those interests are not overridden by your rights and interests. We rely on legal obligations for records we are required to keep and on consent where it is required.

Hosting

We host this website on Vercel and use Cloudflare for domain management. Our hosting provider may process technical information, including IP addresses and request logs, to deliver and protect the website. Further information is available in the Vercel Privacy Notice and Cloudflare Privacy Policy.

Website analytics

We use Cloudflare Web Analytics to understand how many visits our website receives, which countries visitors come from, and which websites refer them to us, where that information is available.

As part of its standard operation, the service also processes information about pages viewed, browser and device types, and page-loading performance. We use its aggregate reports to understand our audience, not to identify individual visitors. Details of the information available are described in Cloudflare's analytics documentation.

Cloudflare Web Analytics does not use cookies or local storage to collect usage metrics and does not fingerprint individual visitors for analytics. Further information is available on the Cloudflare Web Analytics privacy overview.

Cookies and external services

We do not use advertising pixels or tools that build advertising profiles of our visitors. The cookie-free operation of our analytics service is separate from technical information processed to host and protect the website.

If we introduce cookies or similar technologies that require consent, we will explain their use in this policy, request consent before enabling them, and provide a way to withdraw it. Simply visiting this website does not constitute consent to optional tracking.

When you follow a link to a third-party website, such as Buy Me a Coffee or Facebook, that service processes information under its own privacy policy and cookie settings.

We share information where necessary with providers supporting our website, email communications, donation processing, and financial administration. We may also disclose information when required by law or necessary to establish, exercise, or defend legal claims.

Some providers operate outside Bosnia and Herzegovina, including in the United States. Information may therefore be processed in countries with different data protection laws. Where we arrange international transfers, we are responsible for ensuring that the safeguards required by applicable law are in place. Contact us for information about the safeguards relevant to your data.

Banks, donation platforms, and other services may also process information independently for their own legal, security, and operational purposes, as described in their privacy policies.

We retain personal information only for as long as needed for its purpose, including:

• Contact correspondence for handling your enquiry and relevant follow-up.
• Donation and financial records for applicable accounting, tax, and other legal retention periods.
• Technical logs according to provider settings and operational needs, including troubleshooting and abuse prevention.
• Information needed for disputes or legal claims for as long as reasonably necessary to address them or meet legal requirements.

When information is no longer needed, we delete or anonymize it, unless the law requires continued retention.

Cryptocurrency transactions are recorded on public blockchains. We cannot delete or change records held by those networks. Public wallet addresses and transaction histories may remain visible even if we delete information from our own records.

Depending on applicable law, you may request access to your personal information, correction, deletion, restriction of processing, or data portability. You may also have the right to object to processing based on legitimate interests.

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place lawfully before withdrawal. Some information may still need to be retained to meet legal obligations.

To exercise your rights, email info@helpaska.org. We may request information reasonably necessary to confirm your identity and will respond within the time limits required by applicable law.

You may also lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina or another competent data protection authority.

We may update this policy when our practices or legal requirements change. The latest version will appear on this page with an updated date. Where required, we will provide additional notice of significant changes.