Privacy Policy

Protecting your personal data matters to us. In accordance with Art. 13 of the General Data Protection Regulation (GDPR), this policy explains how we process data when you visit the Hawk Foundation website or place an order.

1. Controller

Hawk Foundation, 1317 Mesilla St NE, Albuquerque, NM 87110, USA, Email: contact@hawkfoundation.org

2. What data we process and why

Orders and contact: name, email address, delivery address and, where applicable, phone number, to process your order and answer your inquiries. Legal basis: Art. 6(1)(b) GDPR (contract).

Payment: online payment is not yet enabled. Once active, payment and billing data are processed directly by Stripe. We do not store full card numbers. Legal basis: Art. 6(1)(b) GDPR.

Server log data: when you access the website, technically necessary data such as IP address, date and time, page visited and browser type are processed to provide the website securely. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Retention obligations: we retain order and invoice data where required by law. Legal basis: Art. 6(1)(c) GDPR.

3. Recipients

We do not sell, trade or rent your data. Data is shared only where necessary:

• Stripe – payment processing (once online payment is enabled) (Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., USA). Privacy notice: stripe.com/privacy
• Shipping providers – name and delivery address for delivery
• Hosting provider that technically provides the website
• Authorities – only where legally required

4. Transfers to third countries

As a US-based organization, we process data in the United States. Transfers take place only under the conditions of Art. 44 et seq. GDPR.

5. Storage period

We store data only as long as necessary for the respective purpose. Order and accounting data are kept at least as long as statutory retention periods require.

6. Cookies

This website currently uses only technically necessary cookies or storage technologies (§ 25(2) TDDDG). We do not use tracking or advertising cookies. If non-essential cookies or analytics are used in the future, we will first obtain your consent via a cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

7. Your rights

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
• Complaint to a data protection supervisory authority, e.g. in your place of residence (Art. 77 GDPR)

Write to us at contact@hawkfoundation.org. We respond within one month.

8. Data security

The website is transmitted encrypted via TLS. Payments run through Stripe's PCI-DSS-compliant infrastructure. However, no transmission over the internet is completely secure.

9. Minors

Our offer is not directed at children under 16. We do not knowingly collect data from children; if we learn of it, we delete it.

10. Changes

We update this policy when our offer or the legal situation changes. The version published here applies.