Privacy Policy: GDPR
At WONSA, we care about your privacy and it is our responsibility to protect your
personal data in accordance with the GDPR (General Data Protection Regulation). This
policy explains how we collect, use, and safeguard your personal data when you use our
website and webshop.
Collection of Personal Data – Only When You Share It
We only collect personal data when you actively share it with us, for example by
providing your email address or subscribing to our newsletter. You may withdraw your
consent at any time by contacting us or unsubscribing from our newsletter.
- Email communication: If you share your email, we only use it to respond to your inquiries or to send you relevant information you requested.
- Newsletter service: We use Brevo as our newsletter provider. By subscribing, you consent to your personal data, including your email address, being transferred to Brevo for processing according to their Privacy Policy.
- Courses: If you register for a course via our website, we may need to store certain contact details in our learning system (Moodle). These details are only used to manage course participation and communication related to the training. You may always register with a new email address if you wish to remain anonymous. You can contact us to request deletion of your data after a course has ended, though some data may need to be stored while the course is ongoing in order for us to provide the service correctly.
Webshop Usage and Orders
When you make a purchase through our webshop (WooCommerce), additional data
processing applies:
- Order information: We collect necessary information such as your name, billing address, email address, and payment details. This data is required to process your order, deliver digital products (such as course enrollments), and manage invoicing.
- Please note that certain order and payment records must be stored for a number of years in accordance with legal requirements, such as accounting and tax regulations. This means that even if you request deletion of your data, we may be obliged to retain specific transaction details for the legally required retention period. After this period, the data will be securely deleted.
- Payment processing: Payments are securely handled by third-party payment providers (such as Stripe, PayPal, or other supported gateways). We do not store your full payment details on our servers.
- Moodle enrollment: If your purchase relates to an online course, WooCommerce and Moodle are linked through our integration. This means that your name and email may be transferred securely to Moodle to create your course access.
Cookies
We do not use cookies to profile visitors, target ads, or sell information to third parties.
We use cookies only to retain website functionality and user experience. By continuing to
use the site, you consent to our use of cookies. You can change your browser’s cookie settings
at any time or set regular cookie deletion.
Third-Party Providers
We do not share your personal data with third parties, except where necessary to provide
our services. Examples include:
- Brevo for newsletter distribution.
- WooCommerce payment gateways (e.g., Stripe/PayPal) for secure payment processing.
- Moodle integration to provide access to purchased courses.
These third parties process your personal data in accordance with their own privacy policies and
GDPR requirements.
Your Rights under GDPR
You have the right to e.g.
- Request access to your personal data.
- Correct inaccurate data.
- Request deletion of your data.
- Request restriction of processing or object to processing.
We cannot delete data that we are legally required to retain, for example under
accounting law when invoicing is involved. To exercise your rights, please contact us at
info@wonsa.org.