Privacy Policy

GDPR & Cookies

Last updated: 10 August 2026

1. Introduction

One Global Vision and Solution, z.ú. (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit or interact with www.ecocitii.com (the “Website”), contact us or use our online services.

2. Data Controller

One Global Vision and Solution, z.ú.

17. listopadu 237
530 02 Pardubice I – Zelené Předměstí
Czech Republic
Identification No.: 21282382

For privacy-related questions or to exercise your data-protection rights, please contact us through our Contact Page.

3. Personal Data We Collect

Depending on how you use the Website and the services available on it, we may collect and process the following categories of personal data:

Information you provide directly to us. This may include your name, email address, telephone number, organisation, postal or billing address, the content of messages, enquiries, comments, feedback, ratings or other communications submitted through the Website, by email or through other communication channels.

Account and membership information. If you create or use a user account, member area or supporter profile, we may process your name, email address, login identifier, account preferences, profile information, membership status, communications, activity related to your account and other information you choose to provide. Your password is managed through the relevant authentication service; we do not have access to your password in plain text.

Donation, subscription and transaction information. If you make a donation, purchase a subscription or make another payment through the Website, we may process information necessary to administer the transaction, such as your name, contact details, billing details, donation or purchase amount, currency, date, payment status, transaction reference, subscription status and transaction history. Payment-card details are processed directly by the relevant payment service provider and are not stored by us, unless explicitly stated otherwise at the point of payment.

Technical, device and log information. We may process technical information automatically generated when you use the Website, including your IP address, browser type and version, operating system, device type, language settings, connection data, referring URL, access date and time, security logs and approximate geographic location derived from your IP address.

Website usage information. We may collect information about how you use the Website, including pages visited, page-response times, time spent on individual pages, navigation paths, interactions with Website content and methods used to leave the Website.

Cookie and online identifier information. Where you provide consent for non-essential cookies or similar technologies, we may process cookie identifiers, online identifiers, browser and device data, Website-interaction data and advertising-related information.

Public profile and community information. Where the Website allows users to create a public profile, follow content or interact with other users, information that you choose to publish—such as your display name, profile details, comments, ratings, follows or supporter activity—may be visible to other visitors or users in accordance with the relevant Website settings. Please do not publish personal data that you do not wish to make public.

We do not intentionally collect special categories of personal data, such as data revealing racial or ethnic origin, political opinions, religious beliefs, health information or biometric data, through the Website. Please do not provide such information unless it is necessary and specifically requested by us.

4. Purposes and Legal Bases

We process personal data only where we have a valid legal basis under the General Data Protection Regulation (“GDPR”).

We process technical information, including IP addresses, browser type, device information and security logs, to operate, maintain, secure and protect the Website, prevent misuse and ensure its reliable functioning. This processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.

Where you contact us through the Website, by email or otherwise, we process your name, contact details and the content of your communication in order to respond to your enquiry, communicate with you and, where relevant, take steps at your request before entering into a contractual relationship. The legal basis for this processing is Article 6(1)(b) GDPR where processing is necessary for pre-contractual steps or performance of a contract, or Article 6(1)(f) GDPR where processing is necessary for our legitimate interest in responding to enquiries and managing communications.

We may process website-usage data, such as pages visited, time spent on the Website, interactions with website content, browser and device data, in order to analyse Website performance, identify technical issues and improve the content, functionality and user experience of the Website. Where this processing involves non-essential analytics cookies or similar technologies, we do so only on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Where you consent to marketing cookies, we may process cookie identifiers, online identifiers, device and browser information, website-interaction data and advertising-related information. We use this information to measure the effectiveness of advertising campaigns, create audience segments, optimise marketing activities and, where applicable, display more relevant advertising through third-party platforms. This processing is based solely on your consent pursuant to Article 6(1)(a) GDPR.

We may also process personal data where necessary to comply with legal obligations, respond to lawful requests from public authorities, or establish, exercise or defend legal claims. The legal basis for such processing is Article 6(1)(c) GDPR, where a legal obligation applies, and/or Article 6(1)(f) GDPR, where processing is necessary for our legitimate interests in protecting our legal rights.

We process account, membership, donation, subscription and transaction information to create and administer user accounts, manage supporter relationships, process donations, provide paid subscriptions or other requested services, issue confirmations and maintain transaction records. This processing is necessary for the performance of a contract or to take steps at your request before entering into a contract under Article 6(1)(b) GDPR. We may also process certain transaction and accounting data to comply with our legal obligations under Article 6(1)(c) GDPR.

Providing personal data is voluntary. However, if you do not provide information that is necessary to respond to an enquiry, create or maintain an account, process a donation, subscription or payment, or comply with applicable legal requirements, we may be unable to provide the requested service or complete the relevant transaction.

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

5. Cookies and Similar Technologies

The Website uses cookies and similar technologies. Cookies are small text files or similar identifiers stored on, or accessed from, your device. They help the Website function securely and, where you consent, allow us to analyse usage and measure marketing activities.

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are necessary for the secure and proper functioning of the Website, including security, network management, fraud prevention, session management and saving your cookie-consent preference.

Strictly necessary cookies cannot be disabled through our cookie settings because they are required to provide the Website or a service specifically requested by you.

Functional Cookies

Functional cookies allow the Website to remember choices you make, such as language or display preferences. These cookies are used only if you provide your consent, unless they are strictly necessary for a service expressly requested by you.

Analytics Cookies

Analytics cookies help us understand how visitors use the Website, measure traffic, identify technical problems and improve content and performance. Analytics cookies are activated only after you provide your consent.

Marketing Cookies

Marketing cookies may be used to measure advertising effectiveness, create audience segments and show more relevant advertising on third-party platforms. These cookies are activated only after you provide your consent.

You can accept, reject or change your cookie preferences at any time through [Cookie Settings/button]. Rejecting optional cookies will not prevent you from using the core functions of the Website.

6. Recipients of Personal Data

We may share personal data only where necessary and only with appropriate recipients, including:

Website hosting, technical infrastructure and support providers;
IT, cybersecurity and maintenance service providers;
Professional advisers, such as legal, accounting or audit advisers;
Competent public authorities where disclosure is required by law;
Analytics and marketing providers, where you have consented to the relevant cookies.
Payment service providers and financial institutions involved in processing donations, subscriptions or other payments

Depending on the services enabled on the Website, these providers may include:

Wix.com Ltd., which provides website hosting and website-related technical services;
Wix Payments and its payment-processing partners, where used to process donations, subscriptions or other payments;
Google services, including Google Analytics;
Meta services, including Meta Pixel;
LinkedIn services, including LinkedIn Insight Tag.

Some of these providers may process personal data as our processors, while others may process data as independent controllers for their own purposes. Their processing is governed by their respective privacy policies.

Relevant third-party policies include:

7. International Transfers

Some of our service providers may process personal data outside the European Economic Area (“EEA”), including in Israel and the United States.

Where personal data are transferred outside the EEA, we ensure that an appropriate transfer mechanism under Chapter V GDPR is used. This may include:

A European Commission adequacy decision;
The EU–US Data Privacy Framework, where the relevant US recipient is certified;
Standard Contractual Clauses adopted by the European Commission, together with supplementary safeguards where necessary.

8. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

As a general rule:

Contact requests and correspondence are retained for up to 24 months after the last communication.
Account and membership data are retained for the duration of the membership and for up to 24 months after its termination or account closure, unless a longer retention period is required by applicable law or necessary to establish, exercise or defend legal claims. A member may request deletion of their personal data at any time, subject to applicable legal exceptions.
Donation, subscription, payment and accounting records are retained for the period required by applicable tax, accounting and other legal obligations.
Technical and security logs are retained for up to 12 months, unless a longer period is necessary to investigate a security incident or protect legal claims.
Cookie-related data are retained for the period stated in the Cookie Declaration or by the relevant provider.
Data necessary to establish, exercise or defend legal claims may be retained for the applicable statutory limitation period.
Data processed on the basis of consent are retained until consent is withdrawn, unless another lawful basis applies.

9. Your rights

Subject to the conditions set out in applicable law, you have the right to:

Request access to your personal data;
Request correction of inaccurate or incomplete personal data;
Request deletion of your personal data;
Request restriction of processing;
Object to processing based on our legitimate interests;
Receive the personal data you have provided to us in a structured, commonly used and machine-readable format, where applicable;
Withdraw consent at any time;
Lodge a complaint with a supervisory authority.

In the Czech Republic, the competent supervisory authority is:

Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
www.uoou.gov.cz

10. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

The Website is hosted on the Wix platform. Wix provides technical security measures such as encrypted communications, secure infrastructure and access controls. However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

11. Children

The Website is not intended for children under 15 years of age. We do not knowingly collect personal data from children through the Website.

Where consent is required for the processing of personal data in relation to online services, a child under 15 years of age may provide valid consent only where consent is given or authorised by a person holding parental responsibility.

If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete such information where required.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements or technical services.

The latest version will always be available on this page and will display the date of the most recent update. Where required by law, we will provide additional notice of material changes.