Privacy Policy

1. Who We Are

This website, nedorinpoche.org, is operated by VSI Nyolo Nedo Foundation. The Foundation is the data controller for personal data it receives directly through this website, by email and in connection with donations.

For privacy questions or requests, contact admin@nedorinpoche.org.

2. Personal Data We May Process

• Donation information: email address, donation amount, selected project, payment status, date, transaction identifiers and limited payment or billing information made available by Stripe. We do not receive or store your complete card number or card security code.
• Communications: your name, email address and the content of messages you send to us.
• Technical and security information: IP address, browser and device information, timestamps, requested pages and security logs generated when you access the website.
• Administrative information: login and activity data relating to authorised website administrators.

3. Why We Use Personal Data

• To process and record donations, direct them to the selected activity and send payment confirmations.
• To respond to enquiries and provide requested information.
• To maintain the website, prevent fraud, protect security and diagnose technical problems.
• To comply with accounting, tax, anti-fraud and other legal obligations.

Legal bases

Depending on the situation, processing is based on taking steps at your request, our legitimate interests in operating and protecting the Foundation and its website, compliance with legal obligations, or your consent where consent is specifically requested.

4. Donations and Stripe

Card donations are processed by Stripe. When you use a Stripe payment page, Stripe collects and processes payment data under its own terms and privacy practices. Stripe may provide us with transaction and contact information needed to administer your donation.

Learn more in Stripe’s Privacy Policy and our Donation Information.

5. Cookies and Similar Technologies

The website may use cookies or similar technologies that are necessary for security, administration and core website functions. Authorised WordPress administrators may receive login and preference cookies. External services reached through links, including Stripe, may use their own cookies under their own policies.

We do not use optional advertising cookies through this website at the time of this policy. If optional analytics or marketing technologies are introduced, this policy and any required consent mechanism will be updated.

6. Service Providers and Other Recipients

Personal data may be shared only as necessary with payment processors, website hosting, email, security and backup providers, professional advisers, banks, auditors and public authorities where required by law. These recipients may act as processors or independent controllers depending on their role.

7. International Transfers

Some service providers may process data outside the European Economic Area. Where required, transfers are protected through an adequacy decision, standard contractual clauses or another lawful safeguard. Please consult the relevant provider’s privacy notice for details.

8. Retention

Donation and accounting records are kept for the period required by applicable accounting, tax and legal obligations. Enquiries are kept only as long as reasonably necessary to respond and maintain appropriate records. Technical and security logs are retained for a limited period appropriate to security and troubleshooting needs.

We may retain information for longer where necessary to establish, exercise or defend legal claims.

9. Your Rights

Subject to applicable law, you may request access to your personal data, correction, erasure, restriction, portability, or object to certain processing. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

To exercise your rights, email admin@nedorinpoche.org. We may need to verify your identity. You also have the right to lodge a complaint with Lithuania’s State Data Protection Inspectorate or another competent supervisory authority.

10. Security and External Links

We use reasonable organisational and technical measures intended to protect personal data. No internet transmission or storage system can be guaranteed completely secure.

This website contains links to external websites. Their operators are responsible for their own privacy practices, and we encourage you to read their policies.

11. Changes to This Policy

We may update this policy when our services, providers or legal obligations change. The current version and its update date will be published on this page.