GDPR Privacy Notice (EU/EEA Data Subjects)
Document Reference: OMF-NOT-GDPR-001
Organization: OneMum Foundation n.o.
Effective Date: 03.08.2026
Last Updated: 13.08.2026
—
This GDPR Privacy Notice supplements our general Privacy Policy and applies specifically to individuals residing in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. It outlines how OneMum Foundation n.o. (“Data Controller,” “we,” “us,” or “our”) collects, processes, and protects your personal data under the General Data Protection Regulation (Regulation (EU) 2016/679) and equivalent UK legislation.
1. The Data Controller
For the purposes of the GDPR, the “Data Controller” responsible for your personal data is:
Organization: OneMum Foundation n.o.
Address: Lermontovova 911/3, 81105 Bratislava, Slovakia
Data Protection Contact/DPO: Data Protection Officer
Email: hello@onemum.org
2. Lawful Bases for Processing Your Data
Under the GDPR, we must have a valid legal foundation to process your personal information. We rely on the following lawful bases:
A. Performance of a Contract
When you make a donation, we need to process your payment information and contact details to execute the transaction and fulfill our commitment to you.
Data processed: Name, billing address, payment details, email address.
B. Legal Obligation
We are required by local and international tax and non-profit accounting laws to maintain records of financial transactions, including donor details, for auditing and tax reporting purposes.
Data processed: Donation amounts, dates, and donor contact information.
C. Explicit Consent
We rely on your clear, affirmative consent to send you marketing communications, newsletters, or to place non-essential tracking cookies on your device.
Data processed: Email address, cookie data.
Note: You have the right to withdraw your consent at any time.
D. Legitimate Interests
We may process your data when it is in our legitimate organizational interest to do so, provided it does not override your fundamental privacy rights. This includes analyzing website traffic to improve our donation platform or screening transactions to prevent fraud.
3. Your Rights Under the GDPR
If you are located in the EEA, UK, or Switzerland, you possess specific rights regarding your personal data. You may exercise these rights at any time by contacting us at hello@onemum.org:
The Right to Access: You can request a copy of the personal data we hold about you.
The Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
The Right to Erasure (“Right to be Forgotten”): You can ask us to delete your personal data. (Note: We may be legally required to retain certain financial transaction records for tax and auditing purposes, even if you request deletion).
The Right to Restrict Processing: You can request that we pause the processing of your personal data under certain conditions (e.g., if you contest the accuracy of the data).
The Right to Data Portability: You can request that we transfer the data we have collected directly to another organization, or directly to you, in a structured, commonly used, and machine-readable format.
The Right to Object: You have the right to object to our processing of your personal data, particularly for direct marketing purposes.
Rights related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which significantly affects you.
We will respond to all legitimate requests within 30 days of receipt. We may need to request specific information from you to help us confirm your identity before processing your request.
4. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it.
Financial Data: Records of donations and related tax documents are generally kept for 10 years to comply with legal and accounting obligations.
Marketing Data: If you subscribe to our newsletter, we keep your email address until you withdraw your consent or unsubscribe.
5. International Data Transfers
OneMum Foundation n.o. is based in Slovakia. If you are accessing our Site from the EEA, your data may be transferred to, stored, and processed in countries outside the EEA.
When we transfer your data internationally, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as:
Utilizing third-party service providers (like Stripe or Mailchimp) that have binding corporate rules or use standard contractual clauses (SCCs) approved by the European Commission.
6. How to Lodge a Complaint
If you believe that our processing of your personal data infringes upon data protection laws, you have the legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.
List of EU Data Protection Authorities: https://www.edpb.europa.eu/home_en
7. Contact Us
To exercise any of your GDPR rights, or if you have any questions regarding this notice, please contact our Data Protection representative:
Email: hello@onemum.org
Subject Line: GDPR Data Request