隱私權政策
我們是誰
DTU is a volunteer-run initiative that supports the development and delivery of defense technology for Ukraine.
Our website is https://
Contact for privacy matters: info@
2. What this policy covers
This policy explains what personal data we collect through our website and related channels (volunteer applications, donations, contact forms, newsletter, comments, events), why we collect it, how we protect it, who can access it, and what rights you have.
3. Data we collect
3.1 Volunteer / membership application
When you apply via the DTU Membership Application form, we collect:
- Full real name
- Signal handle and/or ID
- Phone number (with country code)
- Email address
- LinkedIn profile link and other social media profiles
- Location / time zone
- How you found us
- Languages you communicate in
- Free-text description of your background and capabilities, and how you would like to support DTU
- Your answer on whether you support Ukraine’s territorial integrity and efforts to help Ukraine end the war on its own terms
- Your confirmation that you agree to the DTU Code of Conduct and OPSEC Guidelines
3.2 Information you send us directly
If you email us or use our contact form, we collect your name, email address, the content of your message and any attachments, and anything else you choose to share.
3.3 Cookies
We use:
- Strictly necessary cookies, e.g. to keep the site working, remember language choice, and (for administrators) log-in sessions.
- Comment cookies, only if you opt in to save your name, email and website for your next comment (they last one year).
- Analytics / third-party cookies: [list or state “none”].
- Embedded content (videos, social posts) from sites such as YouTube or X may set their own cookies and collect data about you when you interact with it. See their policies.
3.4 Media
Do not upload images containing embedded location data (EXIF GPS) to our site. Anyone can download images from the site and extract such data.
4. Why we use your data and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Review and process volunteer applications; vet applicants for community safety | Application data (3.1) | Legitimate interests (protecting the community and mission); for political-opinion data, your explicit consent |
| Onboard and communicate with volunteers (including via Signal) | Contact data, Signal ID | Legitimate interests / steps at your request |
| Reply to inquiries | Contact data, message | Legitimate interests |
| Process and record donations, issue receipts | Donation data | Contract / legal obligation |
| Send newsletter | 電子郵件 | Consent |
| Operate, secure and improve the website; prevent spam and abuse | Technical data, cookies | Legitimate interests; consent where required for non-essential cookies |
| Comply with law, respond to lawful requests, protect rights | Any relevant data | Legal obligation / legitimate interests |
5. Who can access your data
- Volunteer application data is accessible only to DTU’s leadership team and designated administrators on a need-to-know basis. It is not shared outside DTU leadership, except as described below.
- Service providers who process data on our behalf, such as website hosting, email, form handling, payment processing, newsletter, anti-spam and (if used) analytics providers: [list providers if possible]. They may use data only to provide services to us.
- Authorities and legal requests: we may disclose data where required by law or to protect safety.
- Business or organizational changes: if DTU is restructured or merges, data may transfer to a successor organization bound by this policy.
We do not sell your personal data, and we do not use it for advertising.
We do not publish volunteers’ names or details without their permission. Members are encouraged to use Signal callsigns, and we ask that members do not share others’ information outside DTU without consent.
6. How we protect your data
We use measures appropriate to the sensitivity of the data, including [access controls and least-privilege access for leadership only, multi-factor authentication, encryption in transit (HTTPS) and at rest, secure messaging for volunteer communications, regular updates and patching, restricted export of form submissions]. If we become aware of a breach likely to put you at risk, we will notify affected individuals and the relevant authorities as required by law.
7. How long we keep your data
| Data | Retention |
|---|---|
| Volunteer applications (accepted) | For as long as you are an active volunteer, then [12] months |
| Volunteer applications (not accepted) | [6] months after decision, then deleted |
| Contact messages | [24] months after last contact |
| Donation records | [7] years, or as required by tax and accounting law |
| Newsletter subscriptions | Until you stay subscribed |
| Comments and metadata | Until deleted at your request or by moderation |
| Server and technical logs | [30-90] days |
8. Your rights over your data
- Depending on where you live (for example, in the EEA, UK, or California), you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data;
- request deletion;
- restrict or object to certain processing, including processing based on legitimate interests;
- data portability;
- withdraw consent at any time;
- not be discriminated against for exercising your rights (California).
9. Changes to this policy
We may update this policy. The “Last updated” date above shows the latest version. For material changes, we will notify affected volunteers and subscribers where reasonably possible.
