Privacy Policy

1. Data Controller and Contact Details

Data controller: FundCollector — Bruno Alesiani

Website: https://fundcollector.net

Contact: contact us

2. Where We Host and Process Your Data

The Site is hosted on servers located in Italy (European Union). Hosting and technical maintenance
are performed by our external service providers, who act as data processors on our behalf and are bound by
confidentiality and data protection obligations.

3. Types of Personal Data We Collect

We collect and process the following categories of personal data, depending on how you interact with the Site:

3.1 Contact & Support Data

Name, email address, subject and message content submitted via contact or support forms. These messages are
delivered to our email and are also stored on the Site’s database for management purposes.

3.2 Technical and Usage Data

Anonymized or pseudonymized analytics data (e.g. page views, visit duration) collected by Google Analytics and
Google Search Console scripts installed on this Site.

3.3 Cookies and Similar Technologies

Cookies managed via our cookie plugin — see our Cookie Policy
for details.

3.4 Account Data (Future Functionality)

If you register on the Site in the future we will collect the personal data necessary to create and manage your
account (username, email, billing details if you purchase a paid plugin version, etc.).

3.5 Plugin Usage Data

When you use the FundCollector WordPress plugin on your website:

• Donor information: The plugin processes donor data (name, email, donation amounts, payment
  information) on your WordPress installation. This data is stored in your database, not ours.
• We do not collect: We do not have access to or collect any donor information, transaction
  details, or personal data processed by the plugin on your website.
• Data controller: When you use the plugin, you are the data controller for any
  donor information collected through your donation forms.

4. Legal Bases for Processing (GDPR)

• Consent: When you explicitly consent to tracking or marketing cookies (e.g., if advertising
  or remarketing features are activated in the future).
• Performance of a contract / pre-contractual measures: Where processing is necessary to
  provide services you request (for example, to manage purchases or support requests once user accounts or
  paid plugin functionality are active).
• Legitimate interests: For purposes such as responding to contact/support requests,
  maintaining site security, and improving the Site (we always balance our interests with your privacy
  rights).
• Legal obligations: Where we must retain information to comply with applicable laws (for
  example accounting or tax retention obligations if/when purchases occur).

5. Purposes of Processing

• To reply to contact and support requests submitted through the Site.
• To provide, operate, and improve the Site and its content.
• To manage accounts, purchases, licenses and support (if and when user registration and paid versions become
  available).
• To analyze Site traffic and usage with Google Analytics and Google Search Console.
• To provide advertising and remarketing services if you opt in to such services in the future (e.g., Google
  Ads, Meta Ads).
• To meet legal and regulatory obligations.

6. Sharing and Disclosure of Data

We may share personal data with:

6.1 Technical Service Providers

For hosting, maintenance, and email delivery.

6.2 Third-Party Analytics and Advertising Services

Such as Google Analytics, Google Search Console, and, in the future, Google Ads or Meta Ads (if activated).

6.3 Legal and Regulatory Authorities

When required by law, or to protect our rights or the safety of users.

6.4 International Transfers

Where third parties are located outside the EU/EEA, we will only transfer data if appropriate safeguards are in
place (for example, EU Standard Contractual Clauses or adequacy decisions), or when otherwise permitted under
applicable law.

7. Cookies, Analytics and Advertising

The Site currently runs Google Analytics and Google Search Console scripts. These
services collect technical and usage information which we use in aggregated or pseudonymized form to understand how
the Site is used and to improve it. The Site’s cookie management is handled by a separate plugin; see our Cookie Policy for details.

If we enable advertising or remarketing features in the future (e.g., Google Ads, Meta Ads), those services may use
cookies and identifiers to show targeted ads. You will be informed and asked for consent where required.

8. Data Retention

8.1 Contact & Support Messages

Stored for a default period of 3 years from the date of submission unless you request earlier
deletion. This retention period allows us to provide effective support and address any recurring issues while
complying with GDPR data minimization principles.

8.2 Account and Purchase Data (Future)

Retained while the account is active and for a period thereafter as required by law (for bookkeeping/tax purposes) —
up to 10 years where applicable in accordance with Italian law (Art. 2220 c.c. of the Italian Civil
Code, which mandates retention of accounting records for 10 years).

8.3 Analytics Data

Retention periods are managed in the respective third-party tools.

8.4 Early Deletion

If you want us to delete or restrict processing of your personal data sooner, please contact us.

9. Security Measures

We implement appropriate technical and organizational measures designed to protect personal data against accidental
or unlawful destruction, loss, alteration, unauthorized disclosure or access. Measures include:

• HTTPS encryption
• Restricted access to administration panels
• Regular updates of the Site and its plugins
• Secure server configurations
• Password protection and authentication

While we strive to protect personal data, no system can be guaranteed completely secure; please contact us if you
suspect unauthorized access to your data.

10. Your Rights Under the GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

10.1 Right of Access

You have the right to access your personal data and receive information about how we process it.

10.2 Right to Rectification

You have the right to rectification of inaccurate or incomplete personal data.

10.3 Right to Erasure (“Right to be Forgotten”)

You have the right to request erasure of your personal data (subject to legal obligations that may require us to
retain certain information).

10.4 Right to Restriction of Processing

You have the right to request restriction of processing in certain circumstances.

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

10.6 Right to Object

You have the right to object to processing based on legitimate interests or direct marketing.

10.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time, without affecting the
lawfulness of processing based on consent before its withdrawal.

10.8 How to Exercise Your Rights

To exercise these rights, contact us. We will
respond within one month as required by GDPR.

11. Complaints

If you believe your rights under the GDPR have been violated, you may lodge a complaint with the competent
supervisory authority. As our operations are located in Italy, this is the Italian Data Protection
Authority (Garante per la protezione dei dati personali): https://www.garanteprivacy.it.

12. Children

The Site is not intended for children under 16. We do not knowingly collect data from children. If you believe a
child has provided data without consent, please contact us for deletion.

13. Automated Decision-Making and Profiling

We do not perform automated decision-making or profiling that produces legal or similarly significant effects. If we
introduce such processing in the future, we will inform you and request consent where required.

14. Privacy Considerations for Plugin Users

If you install and use the FundCollector plugin on your WordPress website:

14.1 You Are the Data Controller

When you collect donations through the plugin, you become the data controller for any personal data
collected from your donors. You are responsible for:

• Providing your own privacy policy to donors
• Obtaining necessary consents for data processing
• Complying with GDPR and other applicable data protection laws
• Implementing appropriate security measures
• Handling data subject requests (access, deletion, etc.)

14.2 Data Stored Locally

All donor data collected through the plugin is stored in your WordPress database, not on our servers. You
maintain full control and ownership of this data.

14.3 Third-Party Payment Processors

When donors make payments through PayPal or other payment gateways integrated with the plugin, those transactions
are subject to the privacy policies of those third-party services. Please review:

• PayPal Privacy Statement

14.4 Your Responsibilities

For guidance on your obligations as a data controller when using the plugin, please refer to our Terms and Conditions, specifically the sections on
User Responsibilities and Data & Privacy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when
this Policy was last revised. We encourage you to review this Policy periodically for any changes. Changes to this
Privacy Policy are effective when they are posted on this page.

16. Third-Party Links

The Site may contain links to third-party websites. This Policy does not apply to those websites. Please consult
their privacy policies separately.

17. Relationship with Terms and Conditions

This Privacy Policy should be read in conjunction with our Terms and Conditions. While this Policy focuses on
how we handle your personal data, the Terms and Conditions cover:

• Software licensing (GPL v2)
• Disclaimers and warranties
• Limitations of liability
• Your responsibilities as a plugin user
• Legal compliance requirements

Together, these documents form the complete legal framework for using FundCollector and its services.

18. How to Contact Us

This Privacy Policy aims to describe our data processing practices in clear, plain language. It is not a
substitute for legal advice. If you require a version of this Policy tailored to a different jurisdiction or
including additional legal references, we can prepare a customized version on request.