PRIVACY POLICY

Your privacy is important to us. This Privacy Policy (“Policy”) explains how SupportNet MTÜ (non-profit organisation registered in Estonia, Reg. code 80580193, VAT ID EE102633142, legal form Mittetulundusühing, Estonia pst 5a, 10143 Tallinn, phone +372 5649 4134, e-mail donations@supportnet.ee) (“we”, “us”, “our”) collects, uses and protects personal data when you visit or interact with https://supportnet.ee and https://prisonersofrussia.org (together, the “Sites”).
The terms “You”, “Your”, “Yours”, “User” refer to any natural or legal person accessing the Sites. This Policy is governed by our Terms of Service . Questions or requests? Write to donations@supportnet.ee.

1. DATA WE COLLECT

  • Data you provide (supportnet.ee) – name, surname, e-mail, billing address, phone, donation amount; cardholder information is forwarded directly to payment processors (Stripe, PayPal, EveryPay) and never stored on our servers.
  • Technical & log data (both Sites) – IP address, timestamp, browser & operating-system details, referrer URL.
  • Cookies – supportnet.ee sets essential WooCommerce cookies (e.g. woocommerce_cart_hash, wp_woosession_*) to enable checkout. prisonersofrussia.org sets no cookies. We use no analytics or advertising trackers.

2. WHY WE USE YOUR DATA

  • Process donations & issue receipts – GDPR Art 6(1)(b).
  • Prevent fraud & secure the Sites – Art 6(1)(f).
  • Send donor updates / newsletters (opt-in only) – Art 6(1)(a).
  • Comply with legal obligations (tax, AML) – Art 6(1)(c).

3. RECIPIENTS & INTERNATIONAL TRANSFERS

We share data only when necessary:
  • Payment processors – Stripe Inc. (USA), PayPal Holdings Inc. (USA), EveryPay AS (EE). Transfers to the USA are protected by EU Standard Contractual Clauses (SCC 2021/914) and additional safeguards.
  • Hosting & CDN – Zone Media OÜ (EE) and Cloudflare Inc. (USA, SCCs).
  • Public authorities where law requires.
We never sell or rent your personal data.

4. RETENTION

Donation and accounting records are stored 7 years (Estonian bookkeeping law). Security logs are kept 2 years. Data processed solely on consent (e.g. newsletter e-mails) are erased once consent is withdrawn.

5. SECURITY

We implement industry-standard safeguards – TLS encryption, access controls, regular audits. No Internet transmission is 100 % secure; contact us immediately if you suspect misuse of your data.

6. YOUR RIGHTS

  • Access a copy of your data.
  • Rectify inaccurate or incomplete data.
  • Erase data where legally possible.
  • Restrict or object to processing in certain cases.
  • Data portability (machine-readable copy).
  • Withdraw consent at any time (future processing only).
  • Lodge a complaint with Andmekaitse Inspektsioon (Tatari 39, 10134 Tallinn, info@aki.ee) or your local authority.

7. CHANGES TO THIS POLICY

We may update this Policy from time to time. Material changes will be posted on the Sites and, where appropriate, notified by e-mail. Date of latest revision: 10 July 2025.

8. ACCEPTANCE

By continuing to use the Sites you acknowledge that you have read and understood this Policy. If you do not agree, please refrain from using the Sites.

© 2025 SupportNet MTÜ | Reg. 80580193 | VAT EE102633142

Scroll to Top