Data collected
Donor account details, donation contact information, payment references, communication preferences, consent events, blog admin audit metadata, and data-rights request details.
RGPD privacy notice
How Oncia handles personal data.
Policy version 2026-05-05. This notice is written for the Oncia Community Foundation fundraising website and must be reviewed by foundation counsel before public launch.
Purposes
Donation processing, donor service, legal and accounting obligations, newsletter or donor updates when accepted, account security, and RGPD request handling.
What is excluded
The donor and contact flows do not request health data, diagnosis data, treatment details, or other special-category data.
Retention
Donation and accounting records: 7 years. Consent events: while relevant plus audit period. Cookie analytics: configured by provider after consent. Admin logs: 24 months unless legal needs require more.
Your rights
You may request access, rectification, erasure, restriction, objection, portability, or consent withdrawal. Use the data-rights page or contact privacy@oncia-community.org.
Processors
Payment, email, hosting, analytics, and media providers must be configured with data-processing terms before production launch.