Privacy policy

Effective from 22 September 2026

This is a translation of the Czech original. If the two versions differ, the Czech version prevails.

This policy explains how we handle personal data when you subscribe to news on the ahiṃsā samāja website. We try to collect as little data as possible and to use it only for what you entrusted it to us for.

1. Who is the data controller

The controller of personal data is Filip Hanák (a natural person), who runs the Ahiṃsā Samāja project.

Contact for all questions about personal data protection: [email protected].

2. What data we process

• Email address that you enter in the form.
• Proof of consent: the fact that you ticked the consent box and confirmed your subscription by clicking the link in the confirmation email (double opt-in), including the time.
• Email engagement data: whether an email was opened and whether a link in it was clicked. We use it to know whether the newsletter interests you.
• Technical data (e.g. IP address and browser data) processed when the form is submitted, when verifying that the form is filled in by a human (Cloudflare Turnstile), and in the operating logs of service providers.
• Aggregate website traffic data (Cloudflare Web Analytics): the page viewed, the referring page, device type, browser and country of the visit. No cookies are stored, we do not identify individual visitors and we do not track them across websites.
• Click data on shortened links (address go.ahimsa-samaja.eu): time, approximate location, device and browser type and referring page. We use it for aggregate measurement of which links people are interested in; we do not identify individual visitors from it.

We do not collect your name, phone number or address. We do not carry out automated decision-making or profiling.

3. What we use it for and on what basis

Purpose: sending news about events and life in the Ahiṃsā Samāja community.

Legal basis: your consent (Art. 6(1)(a) of the General Data Protection Regulation, GDPR). You can withdraw your consent at any time; withdrawal does not affect the lawfulness of processing before it.

Measuring traffic and clicks: we process aggregate website traffic statistics (Cloudflare Web Analytics) and clicks on shortened links (Short.io) on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in knowing how many people visit the website and which links and events interest them. You can object to this processing at [email protected].

Protecting the form from abuse: we process technical data during verification on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in securing the website and preventing the form from being abused, for example to send emails to strangers.

4. How long we keep the data

For as long as the subscription lasts, that is until you withdraw consent (unsubscribe). After you unsubscribe we remove your email address. We may keep it only on a list of unsubscribed addresses so that the newsletter is not sent to you again by mistake, and we may keep the records of granting and withdrawing consent for as long as legal regulations or the protection of our legal claims require.

5. Who we share the data with

The data is processed by the following providers, who act as our processors:

• Brevo (operated by Sendinblue SAS, France) — managing the subscriber list and sending emails.
• Cloudflare, Inc. (USA) — running the website, technical processing of the submitted form, verifying that the form is filled in by a human (Turnstile service) and aggregate website traffic statistics (Web Analytics service).
• Short.io (operated by Short.cm Inc., USA) — link shortening and click statistics. Links to events and social networks go through the address go.ahimsa-samaja.eu; when you click, Short.io records technical data about the visit (time, approximate location, device and browser type, referring page) in aggregate click statistics.

Where data is transferred outside the European Economic Area (in particular Cloudflare and Short.io in the USA), this is done on the basis of the European Commission's adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses. We do not sell the data or pass it on to other parties for their own purposes.

6. Cookies and traffic measurement

This website does not use analytics or marketing cookies. We measure traffic with Cloudflare Web Analytics, which does not use cookies or any other storage on your device and does not build a visitor profile. Clicks on shortened links are measured by Short.io (see above) on their server side, without cookies on this website. The form is protected by Cloudflare Turnstile, which processes technical data about your browser during verification and may use the browser's technical storage necessary for the verification. It serves to tell humans from automated programs. The window offering newsletter subscription remembers in your browser's storage only that you closed it or subscribed, so that it is not shown to you repeatedly. This data never leaves your device and cannot be used to identify you.

7. How you can unsubscribe and what rights you have

You can cancel your subscription at any time by clicking the unsubscribe link in the footer of each newsletter, or by email at [email protected].

You have the right to:

• access your data and have it corrected,
• erasure and restriction of processing,
• data portability,
• object to processing and withdraw consent at any time,
• lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, Czech Republic).

8. Changes to this policy

We may amend this policy, for example when the services we use change. You will always find the current version on this page with its effective date.

This policy is informational and was prepared for the operation of a small community website; it does not replace individual legal advice.