Skip to content

Privacy policy

How it works

Darujme.cz is a donation portal operated by the Via Foundation ("we" or "our foundation"). Its purpose is to provide organizations ("organizations") with a space to collect donations for various philanthropic, charitable or public-benefit projects and to give donors a simple and secure way to donate.

Through Darujme.cz, you can contribute to a specific organization's projects. You select a project, enter the donation amount and fill in basic information about yourself. By clicking the donation button (usually labeled "Donate", although it may also carry other labels such as "Contribute", "Support" and the like), you make a pledge to provide a donation to the selected nonprofit organization. Once the organization you have chosen receives your donation in its bank account, a donation agreement is concluded between you and the selected organization. Our Foundation facilitates the provision of the donation; we pass the information about you and your donation on to the organization, which is the contracting party, in particular so that it can thank you and inform you about how the donated funds are used, record your donation in its accounts and issue you a donation certificate that can be claimed as a deduction in your tax return. Donation payments are received and distributed to organizations through the Darujme.cz Fund, which our Foundation established for this purpose. The Darujme.cz Fund has no legal personality of its own and is managed by our foundation.

Darujme.cz also allows users to register user accounts. In their account, users can view an overview of their donations and edit certain details. Users can also support philanthropic, charitable and public-benefit projects on Darujme.cz by sharing them and thereby helping to collect donations for them through so-called personal fundraisers. We call such users ambassadors.

A user account is also required for access if you are an administrator of an organization registered on Darujme.cz.

DONOR

Data controller

The operator and data controller of the personal data collected through Darujme.cz is Nadace Via, Company ID (IČO): 67360114, with its registered office at Dejvická 306/9, 160 00 Praha 6 – Dejvice, registered in the Register of Foundations kept by the Municipal Court in Prague under file no. N 395.

Why we process your personal data

We use personal data primarily to facilitate the donation process between you and the selected organization and to transfer the donation you have sent to the organization. We receive information about the payment of the donation from payment institutions. This processing is carried out for the purpose of performing the donation agreement that you conclude, when making a donation, directly with the selected organization you have decided to support. Our foundation acts as an intermediary in the donation process.

If you have made a donation in response to an ambassador's fundraiser, we will make your name and the donation amount available to the ambassador. We carry out this processing on the basis of the legitimate interest of third parties – the ambassadors.

We also process personal data for the purpose of matching donation payments. If a payment is incorrectly identified (for example, the variable symbol is missing), we may use recent historical information for matching and contact you to verify the donation payment. In this way, we avoid having to return incorrectly identified payments and ensure maximum convenience for you and the organizations. We carry out this processing on the basis of the legitimate interest of the controller.

On the basis of the controller's legitimate interest, we also process your personal data for the purposes of compiling statistics and archiving in the event of disputes or complaints.

Legal regulations further require us to archive certain personal and other data, in particular for accounting purposes, such as first name, surname, address, donation amount and the number of the bank account from which the donation was sent.

How does sharing personal data with organizations work?

We pass your personal data on to the organization to which you are making the donation. The organization is a party to the donation agreement that you conclude through Darujme.cz. We provide organizations with your contact and identification details and information about the donation made and its payment. Organizations are also controllers of your personal data. This means that they have their own terms of personal data processing. Our foundation is not liable for how organizations handle personal data, but it requires organizations, for every project they create in the Darujme.cz system, to inform donors about how they process personal data (note: as a rule, this only covers the scope necessary for concluding the donation agreement, thanking you and informing you about the use of your donation).

The donation forms of some organizations may require you to provide additional personal data. In these cases, the organizations alone are the data controllers. Our Foundation does not use this information in any way; we only store it in order to fulfill the functions of the system. If you check a box during the donation process consenting to the processing of personal data, this is consent given directly to the organization. Organizations are responsible for setting up these consents. We recommend that you read the information on how the organization processes donors' personal data before making a donation.

Who else may have access to personal data?

We make your name and the donation amount available to the ambassador if you have supported their project. Otherwise, we only make your personal data available to trusted data processors.

Where we store personal data

We use secure electronic storage located in member states of the European Union. This is important because EU countries provide a uniformly high level of protection for personal data. This strengthens the security of your data.

Personal data retention period

We archive information about each donation for 3 calendar years from the date it was made, in case of a complaint or dispute, and then anonymize it. If you have made several donations through Darujme.cz, we only ever archive the donations made in the last 3 years, unless legal regulations require a longer retention period. For a limited period, we may use the archived data for payment matching.

For recurring donations, we retain the data for three years from the last payment received.

I am also a user – how is the processing of my donation different?

Information about the donations you have made will automatically be displayed in your user account. The display of donations is then not limited by the 3-year retention period. Your user account will contain your complete donation history, provided that the information about a donation was not deleted before you created your user account.

What rights you have

Under legal regulations, you have the right to ask us to provide you with information or to carry out certain operations with your personal data. Our foundation is responsible for handling requests concerning personal data processed in the course of facilitating a donation, as described in this document. If your request concerns the processing of personal data by an organization, please contact that organization directly.

  • Right of access: You have the right to obtain a copy of the personal information we hold about you and certain information about how we use it.

  • Right to rectification: If you believe that the information we hold about you is inaccurate, you can ask us to update or change it.

  • Right to object: You have the right to object to processing that we carry out on the basis of a legitimate interest. For example, you can ask us not to make your name available to the ambassador. If we do not have a compelling legitimate ground for the processing, we will no longer process the personal data for that purpose.

  • Right to data portability: In certain circumstances, you have the right to ask us to provide you with your personal data in a machine-readable format. For example, you can ask us to provide you with a list of the donations you have made through Darujme.cz. You can also ask us to transfer the data to a third party.

  • Right to erasure: In certain circumstances, you have the right to ask us to erase your data, for example if the personal data is no longer necessary for the original purpose. However, this must be balanced against other factors and our legal obligations

  • Right to restriction of processing: In certain circumstances, you have the right to ask us to stop using your personal data, for example if you believe that it is inaccurate or if you believe that there is no need for us to continue using your personal data.

A request may only be submitted by you or, where applicable, by your authorized representative. If we are not certain of the identity of the person making the request, we may ask you for additional information in order to verify your identity.

In some cases, our obligation to comply with a request depends on the purpose for which we process your data. Some rights can only be exercised for certain processing purposes, or exceptions apply.

How to exercise your rights

For matters relating to the processing of personal data or requests to exercise your rights, you can contact us at: podpora@darujme.cz.

If you are not satisfied with our response or believe that we are processing your data improperly or unlawfully, you can lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů). Further information about the Office for Personal Data Protection and its complaint procedures can be found here: www.uoou.cz.

USER

Data controller

The operator and data controller of personal data in connection with ambassadors' user accounts is Nadace Via, Company ID (IČO): 67360114, with its registered office at Dejvická 306/9, 160 00 Praha 6 – Dejvice, registered in the Register of Foundations kept by the Municipal Court in Prague under file no. N 395.

Why we process your personal data

Your user account will store information about all donations you have made through Darujme.cz for as long as your user account exists. When you create a user account, we will also load into it the donations you have made through Darujme.cz in the last 3 years, provided they are associated with the same e-mail address you used to register the account.

If you are logged in to the Darujme.cz system and wish to make a donation, we will automatically pre-fill your identification and contact details in the donation form to make the process as easy as possible for you.

Through your account, you can share organizations' projects and, for example, start a personal fundraiser for them. This makes you an ambassador of the project, which you can promote within your community while setting goals for how much you want to help raise for the project. In your account, you will have access to information about the donations with which donors have supported your personal fundraiser.

We process personal data in this way with your consent. You can withdraw your consent at any time by canceling your user account.

Our system may store certain technical information about how you use our service, such as logs. We process this information in order to secure our systems. This processing is carried out on the basis of the legitimate interest of our foundation as the controller.

Registration and login via social networks (FB, Google, Apple, LinkedIn)

To make registration and login easier, we allow you to use authentication via third-party services (Single Sign-On):

  • Facebook Login (Meta Platforms Ireland Ltd.)

  • Google Sign-In (Google Ireland Limited)

  • Sign in with Apple (Apple Distribution International Ltd.)

  • LinkedIn Sign-In (LinkedIn Ireland Unlimited Company)

If you log in via these services, the platform in question will, subject to your approval, pass on to us only basic data:

  • E-mail address (used to identify the account, log in and deliver service e-mails and donation certificates)

  • First name and surname (for identification and pre-filling details for donations or campaigns)

  • The platform's unique user ID (for securely matching the account on subsequent logins)

  • Profile picture / avatar (if passed on by the platform, used only for display in your profile)

We do not obtain or process your passwords, friend/contact lists or the content of your posts from these services.

Who we share personal data with

We only make your personal data available to trusted data processors. You are always in control of where and how you publish your ambassador projects – personal fundraisers.

Where we store personal data

We use secure electronic storage located in member states of the European Union. This is important because EU countries provide a uniformly high level of protection for personal data. This strengthens the security of your data.

Personal data retention period

We retain the information in your user account and about you for as long as the account exists. If you cancel your account, we will delete its contents within 1 month. Deletion from backups is subject to the backup retention periods. We retain technical information about the use of the system for a maximum of 6 months. We will retain information about the donations you have made in accordance with the retention periods for donations made. You can find more information in the "DONOR" section.

What rights you have

Under legal regulations, you have the right to ask us to provide you with information or to carry out certain operations with your personal data.

  • Right to withdraw consent: We process the data in your user account on the basis of consent. You can withdraw your consent at any time. We treat the cancellation of a user account as a withdrawal of consent. If you withdraw your consent for only some of your personal data, this may impair the functioning of your account.

  • Right to erasure and Data Deletion Instructions: In certain circumstances, you have the right to ask us to erase your data (e.g. if it is no longer needed or you withdraw your consent). You can have the data obtained through social network login (Facebook, Google, Apple, LinkedIn) deleted by:

    1. Canceling and deleting your account directly in your profile settings on Darujme.cz.

    2. Sending a request to podpora@darujme.cz with the subject line "Request for personal data deletion / FB data deletion". We will completely delete your data obtained from social networks as well as your account within 30 days (with the exception of data that we are required by law to archive, e.g. accounting records).

    3. By removing access for the Darujme.cz app directly in the privacy and app settings of the respective social network (e.g. on Facebook under Settings & privacy -> Settings -> Apps and websites).

  • Right of access: You have the right to obtain a copy of the personal data we hold about you and certain information about how we use it.

  • Right to rectification: If you believe that the information we hold about you is inaccurate, you may ask us to update or amend it.

  • Right to data portability: You have the right to ask us to provide you with your personal data in a machine-readable format. For example, you may ask us to provide you with a list of the donations you have made through Darujme.cz. You may also ask us to transfer the data to a third party.

  • Right to restriction of processing: Under certain circumstances, you have the right to ask us to stop using your personal data, for example if you believe that it is inaccurate or if you believe that there is no need for us to continue using your personal data.

  • Right to object: You have the right to object to processing that we carry out on the basis of legitimate interest.

A request may only be submitted by you or, where applicable, by your authorized representative. If we are not certain of the identity of the requester, we may ask you for additional information in order to verify your identity.

In some cases, our obligation to comply with a request depends on the purpose for which we process your data. Some rights can only be exercised for certain purposes of processing, or exceptions apply.

How to exercise your rights

For any matters relating to the processing of personal data or requests to exercise your rights, you can contact us at: podpora@darujme.cz.

If you are not satisfied with our response or believe that we are processing your data improperly or unlawfully, you may lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů). Further information about the Office for Personal Data Protection and its complaint procedures is available here: www.uoou.cz.

ORGANIZATION ADMINISTRATOR

Data controller

The operator and data controller of the personal data of organization administrators is Nadace Via, Company ID (IČ): 67360114, with its registered office at Dejvická 306/9, 160 00 Prague 6 – Dejvice, registered in the Register of Foundations maintained by the Municipal Court in Prague under file No. N 395.

Why we process your personal data

We process your personal data for the purpose of performing the contract we have concluded with your organization, typically for mutual communication and to give you secure access to the administration of your organization in the Darujme.cz system. The Darujme.cz database records activity in user accounts, for example by means of logs, in order to ensure the security of our systems.

The processing is carried out on the basis of the legitimate interest of the data controller.

You can also sign in to the administrator account via social networks (Facebook, Google, Apple, LinkedIn) under the conditions described in the “USER” section.

Who we share personal data with

We make your personal data available only to trusted data processors.

Where we store personal data

We use secure electronic storage located in member states of the European Union. This is important because EU countries provide a uniformly high level of protection for personal data. This strengthens the security of your data.

Retention period of personal data

We process your personal data for as long as you are an administrator of the organization's user account. We may retain our communication with you for a longer period for the purpose of performing the contract with the organization, or logs in order to ensure the security of our systems.

What if I am also an ambassador or want to become one?

In your user account, you can activate all the features available to any other user of the system – for example, start a personal fundraiser.

If you cease to be an administrator of the organization, your user account will be retained, but all administrator access rights will be removed from the account.

What rights you have

Under the applicable legislation, you have the right to ask us to provide you with information or to carry out certain operations with your personal data.

  • Right of access: You have the right to obtain a copy of the personal data we hold about you and certain information about how we use it. This right may be limited in order to protect the information of third parties.

  • Right to rectification: If you believe that the information we hold about you is inaccurate, you may ask us to update or amend it.

  • Right to object: You have the right to object to processing that we carry out on the basis of legitimate interest. If we do not have a compelling legitimate ground for the processing, we will no longer process the personal data for that purpose.

  • Right to erasure: Under certain circumstances, you have the right to ask us to erase your data, for example if the personal data is no longer necessary for the original purpose. However, this must be balanced against other factors.

  • Right to restriction of processing: Under certain circumstances, you have the right to ask us to stop using your personal data, for example if you believe that it is inaccurate or if you believe that there is no need for us to continue using your personal information.

  • Right to data portability: This right does not apply to you, as it only arises in the case of processing for the performance of a contract concluded with you or processing based on consent. We do not carry out such processing.

A request may only be submitted by you or, where applicable, by your authorized representative. If we are not certain of the identity of the requester, we may ask you for additional information in order to verify your identity.

In some cases, our obligation to comply with a request depends on the purpose for which we process your data. Some rights can only be exercised for certain purposes of processing, or exceptions apply.

How to exercise your rights

For any matters relating to the processing of personal data or requests to exercise your rights, you can contact us at: podpora@darujme.cz.

If you are not satisfied with our response or believe that we are processing your data improperly or unlawfully, you may lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů). Further information about the Office for Personal Data Protection and its complaint procedures is available here: www.uoou.cz.

List of data processors

To ensure the operation of the Darujme.cz portal and the performance of contractual obligations between the Via Foundation, recipients and providers, the Via Foundation uses the following personal data processors:

  • Amazon Web Services, Inc.
    with its registered office at 410 Terry Avenue North, Seattle, WA 98109-5210, USA,
    for the purpose of technical processing and storage of the Darujme.cz portal's data and the operation of its technical solution.

  • Apploud s.r.o.
    with its registered office at V Celnici 1031/4, 110 00 Prague 1,
    Company ID (IČO): 01552877, VAT ID: CZ01552877,
    for the purpose of the development, enhancement, operation and technical administration of the Darujme.cz system.

  • Google Ireland Limited
    with its registered office at Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland,
    for the purpose of user authentication and sign-in (Google Sign-In), traffic measurement, analysis of the use of the Darujme.cz portal and evaluation of marketing campaigns.

  • Meta Platforms Ireland Limited
    with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland,
    for the purpose of user authentication and sign-in (Facebook Login), traffic measurement, marketing analytics and evaluation of social media campaigns.

  • Apple Distribution International Ltd.
    with its registered office at Hollyhill Industrial Estate, Hollyhill, Cork, Ireland,
    for the purpose of user authentication and sign-in (Sign in with Apple).

  • LinkedIn Ireland Unlimited Company
    with its registered office at Wilton Plaza, Wilton Place, Dublin 2, Ireland,
    for the purpose of user authentication and sign-in (LinkedIn Sign-In).

  • Microsoft Ireland Operations Limited
    with its registered office at One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland,
    for the purpose of traffic measurement, analysis of user behavior on the Darujme.cz portal, creation of heatmaps, session recording and evaluation of the use of the portal by means of the Microsoft Clarity tool.

  • Seznam.cz, a.s.
    with its registered office at Radlická 3294/10, 150 00 Prague 5,
    Company ID (IČO): 26168685,
    for the purpose of traffic measurement and evaluation of marketing campaigns through the Sklik advertising system.

  • SmartEmailing, a.s.
    with its registered office at Netroufalky 797/5, 625 00 Brno,
    Company ID (IČO): 29210372, VAT ID: CZ29210372,
    for the purpose of ensuring operational and informational communication and fulfilling the statutory obligations of the data controller.

  • Ecomail.cz, s.r.o.
    with its registered office at Na Zderaze 1275/15, 120 00 Prague 2,
    Company ID (IČO): 02762943,
    for the purpose of exporting personal data to an e-mail communication tool, based on the settings of the specific organization.

  • Celonis SE (Make.com)
    with its registered office at Theresienstraße 6, 80333 Munich, Germany,
    for the purpose of automated transfer of personal data between the Darujme.cz portal and third-party systems, according to the settings of the specific organization.

  • Foxentry s.r.o.
    with its registered office at Purkyňova 99, 612 00 Brno,
    Company ID (IČO): 06670331,
    for the purpose of automatic completion, verification and validation of data entered by users into forms on the Darujme.cz portal.

Some of the services listed above are used only if a specific organization actively sets them up on Darujme.cz (e.g. analytics, marketing or integration tools)