This Policy explains how [LEGAL_NAME] processes personal data in accordance with the Law of the Republic of Armenia on the Protection of Personal Data.
Data controller
The data controller is [LEGAL_NAME], registration number [REG_NUMBER], address [ADDRESS]. Contact for data matters: [DATA_CONTACT], [EMAIL], [PHONE].
Categories of data processed
- Identification and contact data: name, email, phone.
- Membership and donation records: tier, amounts, dates, renewal status.
- Transaction references from the payment provider (not card data).
Purposes of processing
- Processing membership payments and donations.
- Issuing receipts and confirmations.
- Administering membership and the alumni community.
- Meeting accounting, tax, and legal obligations.
Legal grounds
Processing is carried out on the basis of the data subject’s consent, the necessity to perform the services requested (membership, donation), and compliance with legal obligations.
Card data and payment security
All card payments are processed through the ArCa payment system operated by our payment provider. Card details are entered on the provider’s secure payment page. [LEGAL_NAME] does not receive, process, or store cardholder data (full card number, expiry date, CVV). Payment processing complies with the applicable security standards of the payment system.
Data subject rights
Data subjects may, at any time:
- obtain information about the processing of their data;
- request correction of inaccurate data;
- request deletion or blocking of data where grounds for processing no longer apply;
- withdraw consent. Requests are submitted to [DATA_CONTACT] at [EMAIL] and are handled within the timeframes established by law.
Data storage and protection
Personal data is stored on secured systems with access limited to authorized persons. We apply organizational and technical measures appropriate to the risk. Data is retained only as long as necessary for the stated purposes and legal requirements.
Transfers
Personal data may be processed by service providers acting on our behalf (e.g. hosting, payment processing) under appropriate confidentiality and security obligations.
Contact
[DATA_CONTACT] — [EMAIL] — [PHONE] — [ADDRESS].