Privacy Policy

1. Introduction

Vigtherius Ordo ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, make donations, or interact with our services.

2. Data Controller

The data controller responsible for your personal data is:

Vigtherius Ordo (Austria)
Unterer Stadtplatz 11, 6330 Kufstein, Austria
ZVR-Zahl 1965287887
Email: privacy@vigtherius.org

3. Data We Collect

We may collect the following types of personal data:

• Contact messages: Name, email, subject, chosen office and message, stored in a restricted team inbox to answer your request.
• Digital orders: Purchased titles, payment reference, delivery consent and private download authorization. Card details are handled by the payment provider.
• Newsletter: Email, consent version and confirmation time. New subscriptions require email confirmation; you may unsubscribe at any time.
• Identity Data: Name, title, date of birth
• Contact Data: Email address, phone number, postal address
• Financial Data: Payment card details (processed securely via Stripe)
• Transaction Data: Donation amounts, dates, and project allocations
• Technical Data: IP address, browser type, time zone, device information
• Usage Data: Information about how you use our website

4. How We Use Your Data

We use your personal data for the following purposes:

• Processing your donations and issuing tax receipts
• Sending you updates about our projects and impact (with your consent)
• Responding to your inquiries and providing support
• Improving our website and services
• Complying with legal and regulatory obligations
• Preventing fraud and ensuring security

5. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Contract: To fulfill donations and membership services
• Consent: For marketing communications and newsletters
• Legal obligation: For tax documentation and regulatory compliance
• Legitimate interests: For fraud prevention and service improvement

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Donation records: 7 years (legal requirement for tax purposes)
• Newsletter subscriptions: Until you unsubscribe
• Account information: Until you request deletion

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limited processing of your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmission
• Secure payment processing through Stripe (PCI DSS compliant)
• Regular security audits and updates
• Access controls and authentication systems

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: