Privacy
Minimal data by design
This public website has no accounts, forms, comments, uploads, analytics or advertising trackers. It does not store visitor-submitted information in an application database.
Information that may be processed
Hosting infrastructure may process technical request data such as Internet Protocol address, time, requested address and security signals in order to deliver and protect the site.
If you choose to email us, the association and its email provider process the sender details and message content needed to receive, respond to and document the enquiry.
PayPal is contacted only after you activate the donation control or follow the direct donation link. PayPal then processes technical, device and payment information under its own privacy notice; this website does not receive your card or PayPal credentials.
Purpose, basis and retention
- Site security and delivery: legitimate interests in operating a secure public website.
- Email correspondence: steps requested by the sender, legitimate interests in answering enquiries, and legal obligations where applicable.
- Donations: the action requested by the donor, with PayPal providing the hosted payment service.
- Records are retained only for as long as needed for the enquiry, safeguarding, accountability or applicable legal duties.
- No automated decision-making or visitor profiling is performed by the application.
Your rights
You may request access, rectification, erasure, restriction, portability or objection where the law provides those rights. Write to admin@bravesteps.org. You may also complain to the Spanish Data Protection Agency.
Spanish Data Protection Agency