Privacy and Personal Data

On all of our websites, we strive to collect the absolute minimum amount of personal data and avoid using marketing tools that do not respect your privacy. Our e-shop is no exception, but slightly different rules apply here compared to our other websites, so we’ve clearly outlined them for you.

Personal Data

On the e-shop, we have to handle personal data a bit differently than on our other fundraising websites. We need to store it with your order and also provide it to couriers or shipping services for delivery purposes. We are also required to retain your personal data in the system for potential claims and accounting. Unfortunately, this involves sharing your data with a few specific third parties.

‍

Shopify Inc.

Shopify is a Canadian company that powers our e-shop. If you place an order with us, your personal data will be stored in Shopify's system under our account. Only we handle it there. Access is limited to authorized members of our team, and we do not share your data for marketing purposes with any third party.However, we must inform you that Shopify has its own advertising system through which it may allow third parties to target ads based on your anonymized profile. Even in such cases, your personal data is not shared with others.

[Privacy Policy – Shopify]

‍

ČSOB (Czechoslovak Commercial Bank, a.s.)

If you pay by bank transfer, we see your account number and, if configured in your banking settings, your name. These details are accessible to employees of the foundation and, in some cases, technical staff. We strictly do not share this data with anyone, it is not stored in third-party services, and it is not needed for the operation of the website.

[Privacy Policy – ČSOB]

‍

Printify Inc.

Some of our products are produced and delivered by Printify Inc. We provide this company with information about your order and the data necessary for delivery to your address. Your personal data remains in the system for the duration of the order and our account’s existence. According to their privacy principles, your personal data is not processed for marketing purposes.

[Privacy Policy – Printify]

‍

Printful Inc.

Some of our products are produced and delivered by Printful Inc. We provide this company with information about your order and the data necessary for delivery to your address. Your personal data remains in the system for the duration of the order and our account’s existence. According to their privacy principles, your personal data is not processed for marketing purposes.

[Privacy Policy – Printful]

‍

Delivery Services

To deliver your order to your address, we must provide your personal data to shipping companies and couriers—typically Česká pošta and Packeta Ltd. Your data is used solely for delivery and is not used for marketing purposes. For international deliveries, your personal data may also be shared with other contractual carriers of Printify and Printful.

[Privacy Policy – Česká pošta]

[Privacy Policy – Packeta]

‍

Sendgrid (Twilio Inc.)

If you consent to receiving newsletters during your order, we use the Sendgrid service to send you an email approximately once a month.

[Privacy Policy – Sendgrid]

Cookies

Cookies are small data files stored in your browser's memory to help the website function properly. Some types of cookies are very aggressive and can track you across different websites. Others are harmless and ensure that the site loads correctly or provides a feature that requires coordination between the server and your browser.

‍

On our e-shop, we use two types of cookies. The first are essential cookies, which are necessary for the proper functioning of the site and do not compromise your privacy. The second are marketing cookies, which are only used if you give your consent and are employed for marketing purposes.

‍

Essential Cookies

Plausible

We use Plausible to monitor our traffic. Unlike Google Analytics, Plausible does not use invasive tracking methods. The company is based in Europe, and among all the analytics tools available, Plausible offers the best combination of privacy, accuracy, and technical quality. We pay for this service from the foundation’s budget.

‍

Google API

For some features, we use Google Cloud services where certain code is stored—for processing payments and other essential functions. This is a paid hosting service necessary for our website to function.

‍

Amazon CloudFront

We use the CloudFront service to store code for payment processing and other essential features. This is a paid hosting service required for the site to operate. No personal data is processed through this storage.

‍

JQuery

Minor functionalities (not related to your personal data) use JavaScript. jQuery is the service where these scripts are stored, and our website occasionally downloads bits of code from it.

‍

JSDelivr

Similar to jQuery, JSDelivr hosts some JavaScript functions unrelated to your personal data, which the website may download as needed.

‍

Google Static (Google Fonts)

For visual design, we use a font library provided by Google. This tool temporarily downloads the font used on our site to your browser to display the site correctly and attractively.

‍

Marketing Cookies

Facebook (META Inc.)

To promote our e-shop on Facebook and Instagram, we use Meta’s advertising tools, which measure and target our ads within their ad system. These tools work with your online identity and compare your visit to our site with your activity on Facebook, Instagram, and WhatsApp. Based on that, they may show you ads from other companies or organizations. However, your name, address, or other personal data is not shared with anyone.

‍

Google (Alphabet Inc.)

To promote our e-shop in Google search and through the AdSense advertising network, we use tools from Alphabet that measure and target our ads. These tools use your online identity and compare your visit to our site with your internet activity, including searches on Google, YouTube viewing, and use of other products and services. As with Meta, your name, address, or other personal data is not shared.

We have to, because at this point it's no longer possible to fulfill the purpose of our e-shop (raising enough funds to run campaigns for Ukraine) without more precise ad targeting. We've tried it—it doesn't work. We need to be visible on Facebook, Instagram, and elsewhere. And most importantly: when we use tracking pixels, we only pay for actual purchases. That is absolutely essential for our e-shop to generate enough funds to keep the foundation running.

If you do not want Google and Meta to include you in their advertising statistics, keep your Privacy setting on ESSENTIAL ONLY. For added assurance, you can use dedicated tools. To analyze and manage settings, you can use a service like Ghostery, and instead of unsecured browsers, consider using Firefox, Safari, or Brave, which allow for much better control over your privacy settings. The downside may be that some websites or their features might not function properly. However, our website will work without any issues.