Privacy policy

In short

This site sets no cookies and collects nothing you type: it has no forms. Until you click something, it contacts no outside service except Cloudflare, which runs the site and counts visits anonymously. The map and the video load from Google only when you click them.

Who is responsible for your data

The site yi.org.ua is run by Young and Initiative NGO (registration number (EDRPOU) 37686325; address: 8 Serhiivska St, 75700 Skadovsk, Ukraine). Please send questions about privacy to admins@lighthouse.org.ua.

Running the site — Cloudflare

To show you a page, Cloudflare, Inc., which hosts the site, processes your IP address and the technical details of the request: your browser, the page address and the time. The purpose is to show you the site and protect it from attacks; the legal basis is the NGO's legitimate interest in keeping the site working and secure.

Cloudflare acts as a processor under a data processing agreement and keeps this data for its own retention periods (Cloudflare's policy). The NGO keeps no logs of visitors' IP addresses.

Visit statistics — Cloudflare Web Analytics

A small Cloudflare script counts page views, countries, referring sites and loading speed — without cookies and without recognising individual visitors. The purpose is to show donors how many people read the site; the legal basis is the NGO's legitimate interest. Cloudflare keeps the detailed data for seven days and only aggregated figures after that.

You can opt out with the button below or in the strip at the bottom of the site: the script then no longer loads on this device.

The map and the video — Google

The map in "The place of strength" is at first only a picture, and the video only a still with a play button. When you click them, Google loads them (the map from Google Maps, the video from YouTube): it receives your IP address and browser details and may read its own cookies if you use Google services. The legal basis is your consent, given by the click. The NGO shares responsibility with Google for this transfer only; after it, Google processes the data under its own policy.

Donations

The "Support us" button leads to a WayForPay page: the site itself never sees payment details, and WayForPay processes them as an independent controller under its own rules.

After a donation, the NGO receives from WayForPay and the bank the details it needs for its accounts: the payer's name, the amount, the date, and sometimes an email address or account number. The purpose is bookkeeping and reporting; the legal basis is a duty under Ukrainian accounting law and, for donors in the EU, the NGO's legitimate interest in meeting it. We keep this data for as long as accounting law requires.

Links to other sites

Links to Facebook, Instagram, WhatsApp, YouTube and Google Drive send nothing until you click them; after that, those services' own rules apply.

Transfers outside Ukraine

Cloudflare and Google are US companies. Transfers to them from the EU are covered by the EU's adequacy decision (the EU–US Data Privacy Framework), and Cloudflare's data processing agreement adds the EU standard contractual clauses.

Your rights

You can ask the NGO which of your data it processes, have it corrected or erased, restrict its processing and withdraw your consent. Apart from donation records, the site keeps nothing about you, so most requests will be about those.

You have the right to object to processing based on legitimate interest — to the visit statistics with the button below, to anything else by writing to admins@lighthouse.org.ua.

Where to complain

First to us, at admins@lighthouse.org.ua: we will reply within 30 days. If you are not satisfied with the answer, you can turn to the Ukrainian Parliament Commissioner for Human Rights; if you live in the EU, to your country's data protection authority; if you live in the UK, to the UK regulator.

What the site does not do

It sets no cookies, shows no advertising, builds no profiles of visitors and makes no automated decisions. The only thing it stores in your browser is your choice about the privacy strip and the statistics (in localStorage, not in a cookie).

Changes

When this policy changes, so does the version date at the top of the page.