Privacy and cookies

Who is responsible

The controller of your personal data is Cooperativa Integral Sulitânia, CRL (NIF 518771571), Quinta da Fornalha, 8950-186 Castro Marim, Algarve, Portugal.

For anything about your data, write to hello@syntrociety.org.

When you visit this site

The site is hosted by Vercel Inc. in the United States. To deliver pages and protect the site against abuse, Vercel processes technical data in transit, such as your IP address, browser type and the page you request, and keeps it in access logs for a limited period. The cooperative does not use this data to identify visitors.

Lawful basis: legitimate interest (Art. 6(1)(f) GDPR) in running a secure website. Vercel is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing adequate protection.

When you contribute

Contributions are paid on a page run by Stripe. Stripe collects your payment details, your email address and, depending on the payment method, your name and billing address. The cooperative never sees your full card details.

Stripe Payments Europe, Limited (Ireland) is an independent controller for payment data. See Stripe's privacy policy.

Stripe shares with the cooperative what it needs to record your contribution: the amount, the date, your name and email address where Stripe collects them, and the payment method used. The cooperative uses this to keep its accounts, issue receipts on request and handle refunds.

Lawful basis: legal obligation (Art. 6(1)(c) GDPR) to keep accounting records, and legitimate interest (Art. 6(1)(f) GDPR) in handling your contribution.

When you email the cooperative

Email to hello@syntrociety.org arrives in the cooperative's mailbox at Proton AG in Switzerland. The cooperative uses your message and address only to reply, and keeps them as long as the conversation and any related accounting obligation require.

Lawful basis: legitimate interest (Art. 6(1)(f) GDPR) in answering you. The European Commission recognises Switzerland as providing adequate protection.

When you book a video call

The booking page runs on Proton Calendar, operated by Proton AG in Switzerland. When you book, Proton processes the name and email address you enter so the cooperative can confirm the call.

Lawful basis: legitimate interest (Art. 6(1)(f) GDPR) in arranging the call you asked for. The cooperative deletes booking details once they are no longer needed.

Cookies

This site sets no cookies of its own and stores nothing in your browser: no analytics, no advertising, no tracking. Fonts and images come from this site itself. That is why there is no cookie banner and nothing to accept or refuse.

Stripe's payment page and Proton's booking page are separate websites with their own cookies, which they explain in their own policies. They only apply once you choose to go there.

Sub-processors and other recipients

• Vercel Inc., United States: hosting.
• Stripe Payments Europe, Limited, Ireland: payments, as an independent controller.
• Proton AG, Switzerland: email and call bookings.
• The cooperative's accountant, where needed for its accounts.
• The Portuguese tax authority, where the law requires it.

The cooperative does not sell your data, does not share it for marketing, makes no automated decisions about you and builds no profiles.

This list covers this site. The cooperative's other sites publish their sub-processors at syntrociety.org/sub-processors.

How long data is kept

Payment records are kept for as long as Portuguese tax and accounting law requires. Emails and booking details are kept only as long as needed for the purpose you gave them for. Stripe, Vercel and Proton keep data according to their own policies and legal obligations.

Your rights

Under the General Data Protection Regulation (GDPR) and Portuguese data protection law (Lei 58/2019), you have the right to:

• access your personal data
• have inaccurate data rectified
• have your data erased
• restrict processing
• receive your data in a portable format
• object to processing based on legitimate interest

To use any of these rights, write to hello@syntrociety.org. The cooperative answers within one month.

You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

Changes

When this statement changes, the date at the top of this page changes with it.