Privacy Policy
1. Introduction
At the White Hawk Society for Personal Support, we respect the privacy of website visitors, members, volunteers, donors, service users, event participants and other persons with whom it communicates. This policy explains which personal data we process, for which purposes, on which legal bases and which rights you have under the EU General Data Protection Regulation (GDPR).
The policy applies to the website https://www.beli-jastreb.eu and for related communication with the association by e-mail, telephone, forms or in person.
2. Data controller
The controller of personal data is
Društvo za razvoj osebne pomoči Beli jastreb
(At the White Hawk Society for Personal Support)
Cesta v Gorice 25/01
1000 Ljubljana
Slovenia
e-mail: [email protected], phone: +386 (0)70 570 771.
3. General principles
We process personal data legally, fairly and transparently. We process it only for specified, explicit and legitimate purposes and only to the extent necessary for each purpose. We do not sell or rent data. We pass them on to third parties only when this is necessary for the performance of the service, the operation of the website, the fulfillment of a legal or contractual obligation, the protection of rights or when there is another appropriate legal basis for this.
4. Website visits and cookies
When visiting the website, technical data such as IP address, time of visit, requested URL, user agent or browser, referring page and basic error data may be processed in the server logs. The purpose of the processing is to ensure the functioning of the website, security, error correction and prevention of abuse. The legal basis is a legitimate interest according to Article 6(1)(f) GDPR.
Cookies are small text files that a website stores on your device. Necessary cookies are necessary for WordPress to function, security, login, save settings or perform functions requested by the user. As a rule, consent is not required for such cookies. Analytical, advertising, marketing or similar non-necessary cookies are only used if they are actually enabled on the website and if you give valid consent to them when requested.
You can change or withdraw your consent to non-essential cookies at any time in the cookie settings on the website or in your browser settings. If you turn off cookies, some website features may not work properly.
5. Contact forms, email and telephone
If you write to us via the contact form, e-mail, phone or other contact method, we process the data that you provide us yourself, in particular the name, e-mail address, telephone number, the content of the message and any other data that you include in the message. We process this information to reply to your message, answer your questions and handle your request. As a rule, the legal basis is a legitimate interest according to Article 6(1)(f) GDPR, when the communication is related to an agreement or the performance of a service, it can also be Article 6(1)(b) GDPR.
6. Comments
If you submit a comment on the website, we process the data you enter in the comment form as well as the technical data required by WordPress for publishing, moderation and anti-spam. The email address is not made public. The legal basis for the publication of a comment is your active submission of a comment and a legitimate interest in managing the discussion, moderating and protecting the website according to Article 6(1)(f) GDPR.
7. News and notices
If you subscribe to e-newsletters or other notices from the association, we process the e-mail address and the data necessary to prove consent and carry out the sending. The purpose is to send notifications about the association's work, volunteering, events, activities and other content for which you have applied. The legal basis is consent according to Article 6(1)(a) GDPR. You can unsubscribe at any time via the link in the message or by sending a notification to [email protected].
We may keep proof of consent and opt-out even after opt-out, when this is necessary to demonstrate compliance. The legal basis for such limited storage is a legitimate interest according to Article 6(1)(f) GDPR.
8. Events, volunteering, advice and individual support
When registering for events, engaging in volunteer work, consulting, providing information or other forms of assistance, we may process data that is necessary to carry out a specific activity. This can be name and surname, contact information, information about the organization, participation, signature on the attendance sheet, agreements on volunteer work, information about the work performed and other information that is necessary depending on the nature of the activity.
When it is necessary for you to provide us with sensitive personal data, for example information about your health, social or financial situation, in order to provide help or advice, we process it with particular care, only to the extent necessary and on an appropriate legal basis, for example on the basis of your express consent, contractual relationship, legal obligation or other basis permitted by the GDPR and current Slovenian legislation.
When volunteering, we process data in accordance with the Act on Volunteering, the Agreement on Volunteering and other applicable regulations. When we have to report the implementation of the program to financiers or competent authorities, we only provide information that is necessary to fulfill contractual, legal or supervisory obligations.
9. Donations
If you make a donation to the association, we process data that is necessary for making the payment, recording the donation, accounting treatment, fulfilling legal obligations and possible communication with the donor. These can be first and last name or title, contact information, amount, purpose of payment, transaction information and information provided by the bank or payment provider. The legal basis is the execution of a donation or related communication according to Article 6(1)(b) GDPR, legal obligations according to Article 6(1)(c) GDPR and legitimate interest according to Article 6(1)(f) GDPR.
10. Recipients and processors of data
To the extent necessary, personal data may be processed by authorized persons of the association and by external providers who help us with website hosting, WordPress maintenance, security, e-mail, forms, analytics, sending notifications, payment or banking services, accounting and other support services. When these providers act as processors, we arrange the appropriate personal data processing relationship with them.
The website may contain links to social networks, maps, embedded content or other external services. These providers may process personal data as independent controllers, and their own privacy policies apply.
11. Transfers to third countries
If we use the services of providers from the United States of America or other third countries, personal data may be transferred outside the European Economic Area. Such a transfer is carried out only when there is an appropriate legal basis for it, for example, a European Commission decision on adequacy, the provider's participation in the EU-U.S. Data Privacy Framework, Standard Contractual Clauses or other mechanism permitted by the GDPR.
12. Retention period
We keep personal data for as long as is necessary for the purpose for which it was collected, or as long as required by regulations, contractual obligations, financiers or the protection of rights. We keep contact messages for as long as is necessary to deal with the matter and for a reasonable time after completion, if this is necessary for evidence or protection of rights. Data on donations and accounting documents are kept in accordance with accounting and tax regulations. We store data on volunteering, programs and projects in accordance with applicable legislation, contracts with financiers and the association's internal rules.
13. Data security
We protect personal data with organizational and technical measures that reduce the risk of unauthorized access, disclosure, loss, alteration or destruction of data. Only persons who need the data to perform their tasks have access to personal data. Physical documentation is kept in rooms or cabinets with limited access, and electronic data in systems with limited access and appropriate security measures.
14. Your rights
In accordance with the GDPR, you have the right, under the conditions set out in the law, to access personal data, correct inaccurate data, delete it, restrict processing, transfer data, object to processing based on legitimate interest, and revoke consent when processing is based on consent. Revocation of consent does not affect the lawfulness of the processing prior to revocation.
You can send your request to [email protected] or to the association's address. We respond to requests without undue delay and within the deadlines set by law.
If you believe that the processing of personal data does not comply with the law, you can complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-mail: [email protected], website: https://www.ip-rs.si.
15. Changes to this policy
We may update the Policy from time to time when actual circumstances, the Services, the Site or the law change. The current version is published on this website.
In Ljubljana, June 6, 2026
At the White Hawk Society for Personal Support
Besim Pepaj, President of the Executive Council