Privacy Policy

The controller of the personal data processed on the Website is Благодійна організація «Міжнародний благодійний фонд «Янголи України — Місія Добра» (EDRPOU code 45700794, legal address: 49000, Дніпропетровська обл., м. Дніпро, пр. Дмитра Яворницького, 18), hereinafter the “Charitable Organization” or “we”.

For questions about personal data, you can write to krasnapolsky2022@gmail.com or call +380 93 078 20 28.

This Policy applies to the website of the Charitable Organization at yanholy.com (the “Website”). Pages of third-party services that the Website links to, including the WayForPay payment page, have their own data processing rules.

We process only the data needed to run the Website and keep records of charitable donations. The complete list is below.

Visiting the Website. No cookies are set for visitors to the Website. Technical session cookies are only set for staff of the Charitable Organization who sign in to the Website’s administration panel (addresses starting with /admin): they are needed to sign in, are not sent to other websites and last up to 30 days. To sign in, an administrator’s e-mail address is used, which is stored in the Supabase service. The hosting provider (Vercel) automatically keeps technical logs of requests to the Website: IP address, browser type, time and address of the request. They are needed for the security and operation of the Website. So that the “Sky of Angels” feed updates without reloading the page, the browser connects to the Supabase service, which sees the technical details of the connection (IP address, browser type); that service receives no other data about the visitor from the Website.

Browser local storage (localStorage). The Website may store two records on the visitor’s device:

• yanholy:lang-hint — a mark that the language suggestion has been closed;
• yanholy:motion — the choice of animation mode (“on” or “off”).

These records are stored only in the browser on the visitor’s device, never leave it and are not transferred to the Charitable Organization. They can be deleted in the browser settings.

Payments. Payments are processed by WayForPay. The Charitable Organization does not receive or store bank card details. From WayForPay the Charitable Organization receives the amount, date, status and number of the payment, as well as the email address and phone number if the payer provided them on the payment page. This data is stored in the Supabase database.

Name for the “Sky of Angels” feed. This is optional. If you add a name and tick “Show my name in the Sky of Angels”, the name is stored together with the donation and shown to all visitors of the Website together with the amount and time of the donation. Without the tick the name is not stored, and the feed shows “Anonymous”.

Log of payment system notifications. To verify payments we keep a service log of WayForPay notifications: payment number, status, amount and time. Email, phone number and card number do not go into the log.

The payment page belongs to WayForPay and may use its own cookies; that service’s policy applies to it.

Correspondence. Data that a person sends by email or gives by phone: name, contact details and the content of the message.

We process personal data for the following reasons:

• performance of a contract — accepting and recording charitable donations, refunding mistakenly charged funds, cancelling recurring donations (Public Offer Agreement);
• compliance with legal obligations — accounting and reporting of a charitable organization;
• legitimate interest — the security and stable operation of the Website, including secure sign-in to the administration panel;
• consent — for publishing your name in the “Sky of Angels” feed on the Website. The name is published only with your explicit consent (the tick next to the name field), which you can withdraw at any time: write to krasnapolsky2022@gmail.com and we will remove the name from the feed.

For visitors from the European Union, these grounds correspond to points (b), (c), (f) and (a) of Article 6(1) of the GDPR.

Accounting data on payments is kept for as long as the legislation on accounting and reporting requires.

Payment requests that were not paid (the payment was not started or not completed) are deleted automatically after 7 calendar days.

The service log of payment system notifications is kept for 180 calendar days, after which the records are deleted automatically.

Correspondence is kept for as long as it is needed to reply to the message and for reporting.

Consent to publishing your name remains valid until you withdraw it. After withdrawal, your name is removed from the feed.

Technical logs are kept by the hosting provider for the periods set by its rules.

We share data only with the services without which the Website and payments would not work:

• WayForPay — accepting payments;
• Supabase — database and file storage: donation data, materials of targeted fundraisers, administrator accounts (servers in the European Union, Frankfurt am Main);
• Vercel — hosting of the Website.

Data is not sold and is not shared for advertising.

Data may be disclosed to public authorities only in the cases and in the manner provided by law.

The hosting provider may process technical data on servers outside Ukraine. The database is located in the European Union.

This list is updated if new services are connected.

In accordance with Article 8 of the Law of Ukraine “On Personal Data Protection”, you have the right to:

• know the sources of collection and the location of your personal data and the purpose of its processing;
• access your data;
• demand correction or deletion of data;
• object to processing;
• withdraw consent to processing;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with a court.

If you are in the European Union, you also have rights under the GDPR: access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with the supervisory authority of your country.

To exercise your rights, write to krasnapolsky2022@gmail.com. We may ask you to confirm your identity. We reply within 30 calendar days.

The Website works over a secure HTTPS connection.

We collect the minimum data needed to run the Website and keep records of charitable donations.

Only authorized persons of the Charitable Organization have access to personal data.

The database is closed to visitors of the Website: they have no direct access to it, and the feed publicly shows only the name (with consent), the amount and the time of the donation.

The Website is not intended for children and does not knowingly collect children’s personal data. If you believe that a child has given us their data, write to krasnapolsky2022@gmail.com and we will delete it.

We publish a new edition of the Policy on this page with the date of the edition. It takes effect from the moment of publication.