World4Humans is the name of a project, not a separate legal entity. This notice describes processing connected with the website and its public channels in the current configuration.
To make the site available and secure, the hosting infrastructure may process technical data normally associated with a web request, such as IP address, device/browser information, requested URL, date and time, and network data. The site is hosted on Google Firebase Hosting. World4Humans does not use this data to build advertising or behavioural profiles.
Privacy and security in FirebaseIf you write to info@world4humans.com, the sender address, your name if provided, the message content, and any attachments or other data you choose to provide are processed. They are used to read, assess and respond to the communication, manage contributions or reports, and retain the necessary record of the exchange.
The newsletter uses Brevo. The required data is the email address; subscription is based on consent and double opt-in and can be withdrawn through the unsubscribe link. The form is hosted by Brevo and protected by Cloudflare Turnstile against automated sign-ups. Brevo processes the data on behalf of the controller under its data-processing terms.
Brevo GDPR informationCloudflare Turnstile privacy and operationCloudflare Web Analytics is active for aggregate statistics on website performance and use. In the approved configuration it does not use cookies or localStorage to identify visitors, and the provider states that it does not collect or use visitors’ personal data.
How Cloudflare Web Analytics worksFinancial support uses an external Payment Link: checkout takes place on PayPal, and no PayPal payment form or script is embedded in the World4Humans site. The site does not collect card numbers, bank details or payment credentials. The controller may receive from PayPal the transaction data needed to administer support, such as the payer’s name and contact details when made available, amount and currency, date, status and transaction identifier. These data are used to reconcile the payment, handle requests and refunds, document the transaction and meet applicable obligations. PayPal independently processes the data needed to provide its payment service, prevent fraud, comply with regulatory duties and manage its relationship with the user under its own privacy statement.
PayPal privacy statementIn the current configuration, the World4Humans runtime does not use cookies, localStorage or equivalent identifiers for profiling, advertising or non-essential measurement, so no cookie-consent banner is shown. The newsletter form is hosted by Brevo in a separate iframe and uses Cloudflare Turnstile as an anti-bot measure. Turnstile is configured without pre-clearance: the widget returns the token needed for verification and is not used by World4Humans for profiling or advertising. Hosting and form providers may still process technical data necessary to deliver and protect their respective services. When active, the PayPal channel is a simple external link: it does not load PayPal cookies, iframes or scripts on World4Humans pages. If automatic return after checkout is configured, PayPal redirects to a normal World4Humans page. World4Humans does not use that redirect as a source of card numbers, bank details, credentials, the amount, or transaction identifiers, and returning to the page is not treated on its own as sufficient proof of payment. Any PayPal cookies or similar technologies apply after the user moves to the PayPal domain and are governed by PayPal.
The cookie/privacy assessment was repeated when the Brevo form and Turnstile were enabled. It must be repeated again before changing CAPTCHA mode, enabling pre-clearance, embedding other services, or introducing technology that uses additional cookies or identifiers. If the regime changes, the notice and consent mechanism must be updated before activation.
Data is retained for as long as needed for the purpose for which it was collected and afterwards only where necessary to document the exchange, protect a legal right or comply with a legal obligation. For the newsletter, when active, the address remains on the list until consent is withdrawn, except for minimal data needed to document the withdrawal or prevent unwanted mailings.
Data may be processed by technical providers necessary to the service, particularly the hosting provider and the email provider; Brevo enters the newsletter flow when the form is used; PayPal enters the support flow only when that channel is active and the user chooses to open the external checkout. Some providers may process data outside the European Economic Area under the safeguards and transfer mechanisms provided by their applicable agreements.
Where provided by the GDPR, you may request access, rectification, erasure, restriction of processing, portability and objection; where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. The applicability of each right depends on the type of processing and its legal basis.
To exercise these rights, write to info@world4humans.com. You may also lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.
Italian Data Protection AuthorityWorld4Humans does not use data collected through the website or public email address for solely automated decisions that produce legal or similarly significant effects on a person.
The data controller is Marco Vassura, the natural person who determines the purposes and means of processing connected with the World4Humans project.
For privacy requests or to exercise your rights, write to info@world4humans.com.
