1. General Information
1.1. The privacy policy of the project the Ark (hereinafter “Privacy Policy”) explains how the Ark processes personal data of (a) Users of the website https://​kovcheg​.live/ (hereinafter “Website”), (b) Donors, collectively referred to as “Data Subjects”, and individually as a “Data Subject”.
1.2. Personal data, or data, refers to any information that can directly identify Data Subjects, such as a name, email address, or that is indirectly linked to a Data Subject, such as language preferences or correspondence.
1.3. The Ark processes data in accordance with the EU General Data Protection Regulation EU 2016/​679 (hereinafter “GDPR”) and applicable data protection laws.
1.4. By contacting the Ark or cooperating with the Ark through the Website, the Data Subject acknowledges that they have read and understood the Privacy Policy.

2. Data Controller
2.1. For any questions related to the processing of Personal Data and the exercise of their rights, the Data Subject can contact the Ark via email at [email protected].

3. Data processed by the Ark
3.1. Data of Donors:
During the donation process, the Ark collects the name and email address of the Donor, the donation amount, and consent to the Donation Agreement and User Agreement.
Payment is processed by the payment service provider based on their own agreements and processes data according to their own privacy policy.
The Ark receives and stores transaction data, such as the date and time of the transaction, its amount, card name, and the last 4 digits of the card.
Purpose of processing Personal Data: to accept the donation and send a receipt.
Basis for processing: Fulfillment of the contract and compliance with legal requirements.

3.2. Data on Website Usage
The Ark collects information about the User’s use of the Website.
These data include information about the User’s actions on the Website, such as:
* personal language settings;
* visits and interactions with the Website.
Purposes of processing:
To provide the website and personalize settings. Basis for processing: Fulfillment of the contract.
To identify site functionality issues and improve its operation. Basis for processing: Legitimate interest.
Processing data based on legitimate interest means that the Ark uses data for the following purposes:
* for the development and improvement of the Website;
* to ensure the security and usability of the Website.
The Ark may combine, compile into reports, and analyze any information it collects for the specified purposes. Before this, the Ark anonymizes the collected information. Anonymized information can be used for any purpose. Anonymized information does not identify the Data Subject and is not subject to this Privacy Policy.

4. Cookies
Cookies (including similar technologies) are files created by visited websites that allow collecting information about the User’s device and their actions on the visited sites (hereinafter “cookies”).
The Ark uses the following categories of cookies:
* Necessary — help make the Website usable by providing basic functions such as page navigation and secure access to the Website;
* Preferences — allow remembering the User’s personal settings. For example, the choice of website language;
* Analytical — help understand how Users interact with the Website by collecting and reporting anonymized information.
The Ark does not collect or transmit information for marketing purposes.
For the above purposes, the Ark uses Google Analytics services (hereinafter “Analytics Services”).
The Data Subject can disable Google Analytics cookies by using the direct link: Google Analytics opt-out.

5. Data Transfer
The Ark may transfer information to the following categories of persons:
Analytics service providers
To ensure the proper functioning of the website, remembering Data Subjects’ settings;
Payment service providers
To process payments (donations);
Other service providers
The Ark may engage various service providers to achieve the purposes specified in this Privacy Policy.

6. Data Storage
The Ark stores Personal Data of Data Subjects for the time necessary for (1) fulfilling legal and contractual obligations, (2) exercising our legitimate interests, or (3) for the duration of your consent, as specified in this Privacy Policy.
Once the information ceases to serve these purposes, the Ark deletes it.
At the request of the Data Subject, the Ark will delete and/​or anonymize Personal Data without undue delay, but no later than 30 days. The Ark has the right to retain some Personal Data in cases where we have a legitimate right or requirement to retain such Personal Data, for example, if:
* The Ark is required to retain data to fulfill legal, tax, and accounting obligations and/​or any other legal obligations. The Ark will retain necessary data for the required period;
* it is necessary to exercise the legitimate interests of the Ark.

7. Data Subject Rights
7.1. Right to access Personal Data — The Data Subject has the right to request a copy of their Personal Data and/​or the manner in which Personal Data is stored.
7.2. Right to rectification — The Data Subject has the right to request changes or corrections to their Personal Data if they are inaccurate.
7.3. Right to erasure — The Data Subject has the right to request the deletion of all or part of their Personal Data, for example, if:
* they are no longer needed for any processing purposes;
* consent was used as the legal basis for their processing;
* there is no legal requirement for further processing of Personal Data.
7.4. Right to object — The Data Subject has the right to object to the processing of their Personal Data based on their specific situation and/​or to object to the processing of data for direct marketing purposes.
7.5. Right to object to automated processing — The Data Subject has the right to object to a decision based on automated processing. This means that the Data Subject has the right to request a manual review of their Personal Data if they believe that automated processing of Personal Data may not take their unique situation into account.
7.6. Right to data portability — The Data Subject has the right to request a copy of their Personal Data in a structured, commonly used, and machine-​readable format (e.g., xml, csv). Additionally, the Data Subject has the right to request the direct transfer of their specified Personal Data to another operator/​controller.
7.7. Right to lodge a complaint — The Data Subject has the right to lodge a complaint with a supervisory authority, particularly in the Member State of the European Union where they usually reside, work, or where the alleged violation occurred.
7.8. To exercise any of the rights, the Data Subject can contact the Ark via email: [email protected]. Before fulfilling the request, the Ark must identify the Data Subject.

8. Personal Data Breach
A personal data breach, if not properly and timely addressed, may lead to physical, material, and/​or non-​material risks to the rights and freedoms of Data Subjects. Therefore, as soon as the Ark becomes aware of a personal data breach, the Ark is committed to promptly, but no later than 72 hours, notify the Data Protection Officer, except in cases where such a breach does not risk the rights and freedoms of Data Subjects. If such notification cannot be made within 72 hours, the reasons for the delay must be outlined in the notification.

9. Cross-​border Data Transfer
The Ark may transfer Personal Data to controllers (operators) and data processors outside the European Union (“EU”) or European Economic Area (“EEA”) for the purposes specified in this Privacy Policy.
In such cases, the Ark commits to including in agreements with controllers and data processors outside the EU or EEA, the Standard Contractual Clauses (SCC) issued by the European Commission as a mechanism for transferring data from EU countries.

11. Changes to the Privacy Policy
The Ark may make changes to this Privacy Policy from time to time. The most recent version of the Agreement will be posted on the Website. By continuing to use the Website, the Data Subject acknowledges that they have read and agree with the updated Privacy Policy.