Privacy Policy
Last updated: October 28, 2026
This policy explains how 28. Jun collects and uses personal data when you visit 28jun.org, donate, subscribe to our newsletter, volunteer or contact us. We collect only what we need, we never sell your data, and you can contact us at any time about your data.
1. Who we are (data controller)
28. Jun operates through the following organizations, which jointly decide how your data is used on this website:
- Srbi Za Humanost (28. Jun), Dr Svetislava Kasapinovića 25, 21000 Novi Sad, Serbia. Belgrade office: Čika Ljubina 12/5, 11000 Belgrade, Serbia.
- 28 Jun Inc, a U.S. 501(c)(3) nonprofit organization, EIN 39-2514987. This entity receives and processes donations made to it.
- 28. Jun, a federal not-for-profit corporation in Canada, Corporation No. 822217-7.
Contact for all privacy questions: info@28jun.org
2. What data we collect
| When | Data |
|---|---|
| Donating by card or PayPal | Name, email, billing address, donation amount and frequency, date, and an optional dedication or message. Card details are entered directly with Stripe or PayPal; we never see or store your full card number. |
| Monthly donations / donor dashboard | Login details and your donation history, so you can manage or cancel recurring gifts. |
| Bank transfers | Name, account number, amount, date and payment reference, as provided by our bank (Raiffeisen Banka a.d. Beograd). |
| Newsletter | Email address, name if you give it, and whether you opened emails or clicked links. |
| Volunteering / membership (volunteers@28jun.org) | Whatever you send us: name, contact details, CV, country/city, skills and motivation. |
| Contacting us (email or forms) | Name, email and the content of your message. |
| Visiting the website | IP address, browser and device type, pages visited, and cookie identifiers (see section 7). |
| Families and beneficiaries we help | Covered by separate notices given directly to them; not by this website policy. |
3. Why we use it and our
legal basis
| Purpose | Legal basis (GDPR Art. 6 / Serbian ZZPL Art. 12) |
|---|---|
| Processing donations, sending receipts, managing recurring gifts | Performance of a contract / your request |
| Keeping donation and accounting records; tax receipts; anti-money-laundering and bank requirements | Legal obligation |
| Sending our newsletter and appeals | Your consent (you can unsubscribe at any time) |
| Answering your messages; assessing volunteer and member applications | Our legitimate interest in running the organization, or steps at your request |
| Preventing fraud and keeping the site secure | Legitimate interest |
| Analytics and advertising cookies | Our legitimate interest in understanding how the site is used and measuring our campaigns |
We do not use your data for automated decisions that have legal or similarly significant effects on you.
4. How long we keep it
- Donation and accounting records: as long as tax and accounting law requires, generally up to 10 years.
- Newsletter: until you unsubscribe. After that we keep only your
email on a suppression list so we don’t contact you again. - Volunteer applications: up to 2 years after the application, or for the length of your membership plus 2 years.
- Messages: up to 2 years after the conversation ends.
- Analytics data: up to 14 months.
5. Who we share it with
We share data only with service providers who process it on our behalf, under contract, and only as needed:
- Payment processors: Stripe, PayPal and Raiffeisen Banka a.d. Beograd.
- Website and donation platform: our hosting provider GoDaddy and the GiveWP donation plugin.
- Email and newsletter: Google Workspace (email) and MailerLite (newsletter).
- Analytics and advertising: Google (Google Tag Manager / Google Analytics) and Meta (Facebook Pixel), for measuring site use and our campaigns.
- Accounting: Canwest Accounting Ltd. (bookkeeping and financial statements).
- Authorities: when the law requires it, for example tax authorities, the National Bank of Serbia or courts.
We never sell or rent your data, and we do not share donor lists with other
organizations.
6. International transfers
Our organizations and providers are based in Serbia, the European Union, the United States and Canada, so your data may be transferred outside your country. When data leaves the EU/EEA or Serbia, we rely on adequacy decisions (including the EU–U.S. Data Privacy Framework where the provider is certified) or on the European Commission’s Standard Contractual Clauses. You can ask us for a copy of these safeguards.
7. Cookies
We use:
- Necessary cookies, to run the site, the donation form and the donor dashboard.
- Analytics cookies (Google), to understand how the site is used.
- Marketing cookies (Meta Pixel), to measure our campaigns.
You can block or delete cookies at any time in your browser settings. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout and manage Meta advertising in your Meta ad settings.
8. Your rights
Under the EU GDPR and the Serbian Law on Personal Data Protection (ZZPL), you have the right to:
- access your data and get a copy of it;
- correct inaccurate data;
- have your data deleted, unless we must keep it by law (e.g. donation
records); - restrict or object to processing, including objecting to direct marketing at any time;
- data portability;
- withdraw your consent at any time, without affecting earlier processing.
To use any of these rights, email info@28jun.org. We reply within one month.
You may also complain to a supervisory authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs); in the EU, the data protection authority of your country.
9. Children
Our website, donations and newsletter are not intended for children under 16. We do not knowingly collect their data online. If you think a child has given us data, contact us and we will delete it.
10. Security
We use HTTPS encryption, PCI-compliant payment processors and access controls, and we limit staff and volunteer access to personal data to what each person needs. No system is completely secure. If a breach is likely to put you at risk, we will inform you and the authorities as the law requires.
11. Changes to this policy
We may update this policy from time to time. The latest version
is always on this page, with the date at the top. If a change is significant, we will tell newsletter subscribers by email.
12. Contact
28. Jun / Srbi Za Humanost
Dr Svetislava Kasapinovića 25, 21000 Novi Sad, Serbia
Belgrade office: Čika Ljubina 12/5, 11000 Belgrade, Serbia
28 Jun Inc, U.S. 501(c)(3), EIN 39-2514987
Email: info@28jun.org