Privacy Policy & GDPR

Last updated: August 2026

1. Who We Are

This website is operated by:

Angelus – Cahaya Anak
Non-profit organization registered in the Slovak Republic
Reg. No.: VVS/1-900/90-72216
ID: 56 971 320
Tax ID: 2122546624

Website: angelus-foundation.org
Contact: info@angelus-foundation.org

Angelus – Cahaya Anak is committed to protecting personal data and respecting the privacy of visitors, supporters, donors, partners, and other individuals who communicate with us.

Personal data is processed in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable Slovak data protection law.

2. Personal Data We May Process

Depending on how you interact with us, we may process limited personal data such as:

your name;

your email address;

information you voluntarily provide when contacting us;

information necessary to communicate with donors, supporters, partners, or institutions;

limited technical information necessary for the secure and reliable operation of the website.

We aim to collect only personal data that is reasonably necessary for the relevant purpose.

3. How We Use Personal Data

Personal data may be processed for purposes including:

responding to enquiries and communications;

communicating with donors, supporters, institutions, and potential partners;

administering donations and maintaining records where required;

operating, maintaining, and securing our website;

preventing spam, fraud, abuse, or security incidents;

complying with applicable legal, accounting, regulatory, or administrative obligations.

We do not sell or rent personal data.

We do not use personal data collected through this website for commercial advertising or behavioral profiling.

4. Legal Basis for Processing

Depending on the circumstances, personal data may be processed on one or more of the following legal bases:

Consent — where you have voluntarily provided consent for a specific purpose.

Legitimate interests — where processing is reasonably necessary for communication, website security, administration, or the legitimate activities of the Foundation, provided that those interests do not override your rights and freedoms.

Legal obligation — where processing is necessary to comply with applicable law.

Contractual or pre-contractual necessity — where processing is necessary in connection with an agreement or steps requested before entering into an agreement.

5. Donations

Donations to Angelus – Cahaya Anak may be made by direct bank transfer using the banking details published on our Donate page.

The Angelus website does not request or collect payment card details.

When you make a bank transfer, your bank, the receiving financial institution, and other financial service providers involved in the transaction may process personal and financial information according to their own legal obligations and privacy policies.

Angelus may receive information associated with a donation that is made available through the banking transaction, such as the donor’s name, account or transaction information, amount, currency, payment reference, and other information transmitted with the payment.

Such information may be retained where necessary for accounting, transparency, fraud prevention, legal compliance, and the proper administration of donations.

6. Cookies and Website Technology

Our website may use cookies or similar technologies that are necessary for basic website functionality, security, language preferences, or other functions requested by the visitor.

Where consent is legally required for a non-essential cookie or similar technology, such technology should not be activated before the required consent has been obtained.

We currently do not use Google Analytics for visitor analytics.

Visitors can also control or delete cookies through their browser settings.

7. Third-Party Services

Our website may rely on technical service providers necessary for its operation, such as website hosting, domain, security, email, or infrastructure providers.

These providers may process limited personal data where technically necessary to provide their services.

Where we use processors to process personal data on our behalf, we seek to use providers offering appropriate data protection and security safeguards.

8. Data Sharing

We may disclose personal data where reasonably necessary to:

service providers supporting the operation and security of our website and communications;

financial or accounting service providers where relevant to donations or financial administration;

professional advisers where necessary;

public authorities or other parties where disclosure is required by applicable law.

We do not disclose personal data to third parties for their independent advertising or commercial profiling purposes.

9. International Data Transfers

Some technical, communication, banking, or infrastructure providers may process data outside the European Economic Area.

Where GDPR rules governing international transfers apply, personal data must be transferred using an applicable lawful mechanism and appropriate safeguards.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for any period required by applicable legal, accounting, regulatory, or administrative obligations.

Communication that no longer needs to be retained may be deleted when it is no longer reasonably required.

Financial and donation-related records may be retained for the period required under applicable accounting, tax, and other legal obligations.

11. Your Rights

Where the GDPR applies, you may have the right to:

request access to your personal data;

request correction of inaccurate or incomplete personal data;

request erasure of your personal data where applicable;

request restriction of processing where applicable;

object to processing where applicable;

request data portability where applicable;

withdraw consent at any time where processing is based on consent;

lodge a complaint with the competent data protection authority.

Requests concerning your personal data may be sent to:

info@angelus-foundation.org

We will respond without undue delay and within the period required by applicable data protection law.

12. Supervisory Authority

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

For Angelus – Cahaya Anak in the Slovak Republic, the supervisory authority is:

Office for Personal Data Protection of the Slovak Republic

13. Security

We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Our website uses HTTPS encryption for data transmitted between visitors’ browsers and the website.

No internet-based system can provide absolute security, and our security measures may be reviewed and updated as our website and operations develop.

14. Children’s Privacy

The public Angelus website is intended to provide information about Angelus, EduAI, donations, and our activities.

The website is not the EduAI learning system and is not intended to collect educational profiles or educational records from children.

If the future EduAI pilot or EduAI applications process personal data relating to children, that processing will be governed by appropriate dedicated privacy, safeguarding, security, and data-governance measures applicable to the EduAI system and its deployment.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our website, activities, service providers, or legal obligations change.

The current version and date of the latest update will be published on this page.

16. Contact

For questions regarding privacy or the processing of personal data, please contact:

Angelus – Cahaya Anak
Slovak Republic

Email: info@angelus-foundation.org
Website: angelus-foundation.org