Privacy Policy

1. Who We Are

Omonoia Foundation is the social impact arm of OMONOIA FC, registered in Cyprus. Our website address is https://omonoiafoundation.com.cy. For any privacy-related inquiries, contact us at [email protected].

2. What Personal Data We Collect and Why

We collect personal data in the following situations:

Volunteer Applications When you apply to become a volunteer, we collect: your name, email address, phone number, address, city, program interests, availability, experience, and motivation. This data is used to process your application and contact you about volunteer opportunities.

Support Requests When you submit a support request, we collect: your name, email address, phone number, organization (optional), type of support needed, details about your request, and timeline. This data is used to assess and respond to your request.

Donations When you make a donation through our payment gateway (JCC Payment Systems), your payment information is processed directly by JCC. We do not store credit card details on our website.

Website Analytics We use cookies and similar technologies to understand how visitors use our website. See our Cookie Policy for more details.

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Consent: When you submit a form, you consent to the processing of your data for the stated purpose.
  • Legitimate Interest: To improve our website, programs, and services.
  • Legal Obligation: To comply with applicable laws and regulations in Cyprus and the European Union.

4. How Long We Keep Your Data

  • Volunteer applications: Retained for 2 years after submission, or until you request deletion.
  • Support requests: Retained for 1 year after resolution.
  • Analytics data: Retained for 26 months.
  • Donation records: Retained as required by Cyprus tax law.

5. Who We Share Your Data With

We do not sell your personal data. We may share your data with:

  • Service providers: Email hosting, payment processing (JCC), and website hosting providers who assist in operating our services.
  • Legal authorities: When required by law or to protect our legal rights.

All third-party providers are required to protect your data in accordance with GDPR.

6. Your Rights Under GDPR

As an EU/EEA resident, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your personal data (“right to be forgotten”).
  • Restriction: Request that we limit the processing of your data.
  • Portability: Request your data in a portable format.
  • Objection: Object to the processing of your data.
  • Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (SSL/TLS), secure server infrastructure, and access controls.

8. International Data Transfers

Your data may be processed by service providers outside the EU/EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Children’s Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights:

Omonoia Foundation Email: [email protected] Website: https://omonoiafoundation.com.cy

12. Supervisory Authority

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy).