YOUR INFORMATION MATTERS.
This notice explains how WE CHANGE ONE processes participant information worldwide. It applies to the website, contribution checkout, participant register, applications and voting. Local mandatory rights continue to apply.
Information used by the project
The payment form asks for your email and sends it to the checkout service. Stripe processes payment details on its hosted checkout. The site’s payment endpoint does not collect card numbers or security codes.
Payment records may include your email, payment reference, contribution amount, currency, status and timestamps. The participant register stores confirmed payment information for ONE eligibility. Hosting and payment providers also process technical information needed to operate and protect their services.
Purposes and legal bases
Email and transaction information are required to create and reconcile the contribution, issue payment records and administer ONE eligibility. The principal legal bases under the GDPR are steps requested by you and performance of the participation arrangement, compliance with accounting and legal obligations, and the operator’s legitimate interests in security, fraud prevention, accurate counting and project administration. Providing an email is required to contribute and participate; without it, checkout and ONE eligibility cannot be completed. Optional analytics relies on separate consent. Marketing messages require a separate, optional consent and are not currently sent.
Recipients and international transfers
Stripe processes checkout, payment, fraud-prevention and receipt information. Vercel hosts the website and server functions. Supabase stores the participant register. Google Analytics provides optional audience measurement after consent. These providers may process data outside your country. Where data leaves the EEA, the project relies on an applicable adequacy decision or contractual safeguards such as the European Commission’s Standard Contractual Clauses, as offered by the provider. Provider information: Stripe, Vercel, Supabase, and Google. Contact us to request information about the safeguard applicable to a transfer.
Analytics and browser storage
The site remembers your selected language in local browser storage under wco-lang. Optional Google Analytics 4 is used only after you consent, to understand visits and improve the site. Google may process page views, interactions, approximate location derived from IP address, device and browser information. Advertising signals and ad personalization are disabled. Consent is the legal basis for this optional processing. You may change your choice at any time using “Privacy settings”. See the Cookie Policy.
Automated selection and voting
The proposed future process includes random selection of eligible email records to invite ten potential candidates, followed by voting by verified ONES. The final rules must be published before this process opens. You may contact us to request information, report an error or contest an eligibility decision. No automated system is currently used to make credit, employment, insurance or similarly consequential decisions.
Retention
Participant eligibility records are retained for the project’s active rounds and up to 6 years afterwards where needed for accounting, disputes or legal obligations. Support records are normally deleted after 24 months. Data is deleted or anonymised earlier when it is no longer needed and the law permits.
Your rights and requests
Depending on the law that applies, you may have rights to know or access, correct, delete, restrict, object, receive a portable copy, withdraw consent and obtain information about recipients. You will not be discriminated against for exercising a privacy right. Some payment and accounting records may need to be retained despite a deletion request. Send a request to wechangeone.com@gmail.com. We may request proportionate information to verify your identity and will normally respond within one month where the GDPR applies, or within the period required by local law.
EEA residents may complain to their local supervisory authority or to Poland’s Personal Data Protection Office (UODO). UK, Canadian, Brazilian, Californian and other residents may exercise the rights granted by their applicable law through the same email address. WE CHANGE ONE does not sell personal information and does not use it for cross-context behavioural advertising.
Contact the controller
Controller and project operator: WECHANGEONE. Email: wechangeone.com@gmail.com. Address: Aleja Prymasa Tysiąclecia 83A, 01-242 Warszawa, Poland. Do not send card details, security codes or identification documents by telephone.