Privacy policy
Who we are. The controller is Rekko Ente del Terzo Settore ETS, Salita Speroni 2, 16036 Recco (GE), Italy, tax code 96001980109, registered in the Italian Third Sector Register (RUNTS no. 169323). For any privacy request write to rekkoguatemala@gmail.com or to our certified email rekko@pec.it.
What we collect and why
| When | Data | Why | Legal basis | How long |
|---|---|---|---|---|
| You sign up for the newsletter | email, name (optional), language, sign-up page, consent record | to send you project news and ways to help | consent (GDPR art. 6.1.a) | until you unsubscribe; then we keep only your email on a do-not-contact list |
| You give or sponsor a programme | name, email, address, amount, frequency; tax code only if you ask for a tax receipt | to process your gift, send your receipt, meet accounting and tax duties | contract (art. 6.1.b) and legal obligation (art. 6.1.c) | 10 years from the gift |
| You email us | what you send | to reply | legitimate interest (art. 6.1.f) | up to 24 months after our last contact |
| You visit the site | technical data (IP address, browser, pages requested) | to run and protect the site | legitimate interest | per our provider’s technical periods (Cloudflare) |
| You visit and accept statistics or marketing cookies | see the Cookie policy | to measure site use and campaigns | consent | see Cookie policy |
Payments are handled by Donorbox and its payment providers: we never see or store your card details. We do not use your gift data for anything else without your consent.
Who receives your data. Only providers working for us under contract: Cloudflare (hosting, security, statistics), HubSpot (forms and newsletter), Donorbox (donations), Google (statistics and campaign measurement, only with your consent). Rekko Guatemala (Asociación Rekko Guatemala, Antigua Guatemala), which runs the programmes on the ground, helps us answer messages and manage sponsorships and receives only what it needs. We never sell your data.
Data outside the EU. Some providers are based in the United States; transfers rely on the EU-US adequacy decision (Data Privacy Framework) for participating providers, or on the European Commission’s standard contractual clauses. Data shared with Rekko Guatemala is limited to what is needed for your request or sponsorship.
Your rights. You can ask for access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. You can withdraw consent at any time (link in every email, “Cookie preferences” at the bottom of every page), without affecting what happened before. We reply within one month. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority where you live.
Children. This site is not intended for people under 14.
Security. The site uses encrypted connections only (HTTPS) and access to data is limited to the people who need it.
Changes. If we change this policy we update the date below; if the change concerns cookies, we ask for your consent again.
Last updated: 2 November 2026 · version 2026-11-v1