Privacy Policy

When we refer to “PII” in this Policy, we are referring to personally identifiable information that may identify you. PII also includes terms such as Personal Data, as defined by the applicable Serbian Personal Data Protection Law (Official Gazette of the RS, No. 87/2018)("PDPL"), European Union’s General Data Protection Regulation (“EU GDPR”), the United Kingdom’s General Data Protection Regulation (“UK GDPR” and together with the EU GDPR, the “GDPR”), “Personal Information” as defined by the Personal Information Protection Law (“PIPL”) of the People’s Republic of China (but excluding the Special Administrative Regions of Hong Kong and Macau) (“China” or the “PRC”) and similar terms as provided under other applicable laws.

A. Information that you provide to us.

We collect information that you provide us. We may collect this information when you sign up to receive email, fill out a form, send us an email, communicate with us via social media, or request information. We also collect information about you when you make a donation, participate in our programming, and when you otherwise interact with us or our Service. The information we collect may include information that may identify you, such as (but not limited to) your name, email address, physical address, phone number, date of birth, payment information, and only where strictly necessary for your specific application and/or participation in a Contest and therefore only as it relates to your relationship with sports and as permitted by applicable law, information such as race/ethnicity, gender, if you have any disability (physical, intellectual, or developmental, but only as it relates to your relationship with sports and only if you are applying and/or participating in certain Contests), preferred language, your image, and voice, payment information, or other information that you may choose to provide us. If you participate in a, and progress beyond the initial stages of the, Contest, we may also collect a copy of your government issued ID, birth certificates, proof of address, evidence of relationship to the applicant, and, where applicable, letters of support, in order to verify: your identity; and that you meet any eligibility criteria for that Contest.

Part of the purpose of the Site is to share materials you make available. Anything you publicly post, including PII, may be viewable by other users or other visitors to the Site, who may not protect your post(s), or treat it(them) as confidentially as we will, despite our reasonable efforts.

B. Information that we collect automatically.

We also automatically collect certain information when you visit the Site. For instance, we log information about your visit to the Site, including the browser that you use, access times, pages viewed, your IP address, and the page that you visited before coming to the Site. We may also collect information about your device, such as the model of phone or computer that you use, the operating system, device identifiers, and mobile network information.

Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site.

We also use various technologies to collect information, which may include sending cookies to your computer or mobile device. Cookies are small data files stored on your hard drive or in device memory that help us to improve the Site and your experience, see which areas of the Site are popular, and count visits. We may also collect information using tracking pixels, which are also known as web beacons. Tracking pixels are electronic images that may be used on our Site or in our emails. They help deliver cookies, count visits, understand site usage, and determine whether an email has been opened and acted upon.

We use these technologies in accordance with applicable law. Where required under applicable law (including the GDPR and PDPL), we will obtain your prior consent before using non-essential cookies or similar technologies. You can manage your preferences, and withdraw your consent, at any time through your browser settings (more detail on this can be found in Section 3 or through our cookie management tool, available on the Site). Please note that disabling, or refusing to consent to, certain non-essential technologies may affect non-essential functionality of the Site.

For instance, we may use the following pixels:

Meta Pixel. Our Site uses the Meta Pixel provided by Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA (previously, Facebook Inc.) (referred to in this Policy as “Meta”). Meta Pixel is a tool that uses cookies (and similar technologies) to help measure the effectiveness of our communication and, where permitted, to support advertising and to serve you ads on your social media account, based on your browsing behavior. The Meta Pixel will only be activated following your prior consent (or if required, the consent of your Parent(s) (as defined below)). You may grant, configure, or withdraw your consent at any time through the cookie settings panel available at our Site. To find out more information about how Meta may use your information, we encourage you to visit: https://transparency.meta.com/, and its privacy policy, https://www.facebook.com/about/privacy/.

X Pixel. We use X Pixel (provided by X Corp., 865 FM1209, Suite A, Bastrop, TX 78602, USA (previously Twitter) (“X”)). As used in our Site, the X Pixel tool uses cookies (and similar technologies) to set a unique ID for users that allows third-party advertisers to target users with relevant advertisements. In jurisdictions where consent is required for these technologies, the X Pixel will be used only after the user (or their Parents, as applicable) has provided the required consent through our cookie or consent management tools). To find out more information about how X may use your information, we encourage you to visit: https://x.com/en/privacy and https://business.x.com/en/help/ads-policies/campaign-considerations/policies-for-conversion-tracking-and-custom-audiences. In addition, you can change settings for X Pixel see – https://help.x.com/en/rules-and-policies/x-cookies.

PLEASE NOTE THAT CERTAIN PIXEL PROVIDERS MAY TRANSMIT INFORMATION ABOUT YOU TO UNRELATED THIRD PARTIES, IN ACCORDANCE WITH THEIR OWN PRIVACY POLICIES.

In addition to the cookie settings panel available on our Site, you can also find more information on how to manage targeting and advertising cookies, you can go to the Your Online Choices page, the Network Advertising Initiative page, and the Digital Advertising Alliance’s Consumer Choice page.

When you visit the Site we collect your IP address, which may allow us to approximate your geographic location. Under the GDPR, IP addresses are considered personal data, as they may allow the identification of a natural person directly or by reasonable means - including by reference to information held by or accessible to third parties, such as ISPs (internet service providers). Accordingly, IP addresses are collected and processed in accordance with the legal bases and purposes described in this Policy.

C. Non-Personal Information.

“Non-Personal Information” is information which doesn’t identify you, or has been aggregated or de-identified (to the appropriate legal standard), about you, including but not limited to links and materials posted, enrollment history, purchase history, the type of device you used and its operating system, browser information, the pages accessed most frequently, how pages are used, applications downloaded, search terms entered, and similar Non-Personal Information.

D. Aggregate Information.

We may also collect other information, such as the date and time of any request, language preference, referring website, the website you go to after visiting our Site, and the domain name of your Internet provider. Such information may qualify as PII (if not aggregated or de-identified to the relevant legal standard, or if it is paired with otherwise identifiable information about you), in which case, we will treat it as such, under the terms of this Policy.

E. Financial Information.

Although it may appear that we collect financial information from you on the Service in relation to donations, such information actually collected, stored, and processed by a third-party service provider (“Payment Processor”) to process payments from (Payoneer (Privacy Policy)), and donations to (via Donorbox (Privacy Policy), (Stripe (Privacy Policy), or PayPal (Privacy Policy)), the Service. The Payment Processor may collect financial information such as banking information, bank account and routing number, credit card number, name, CVV code, and/or Credit Card date of expiration, from you on the Service. We do not store and do not access your financial information, though we are able to direct processing with respect to such information and we may retain limited information related to your transactions (such as confirmations or records) as necessary for administrative, legal, or accounting purposes. Additional financial information may be needed if you (or your child) choose to participate in one or more Contests that we may offer to determine eligibility and to comply with applicable law. This information may include, but is not limited to, tax records and pay stubs to verify income, but will depend on the terms of the Contest in question, and will be laid out clearly for you in the specific Contest terms.

F. Information that we collect from other sources.

We may also obtain information from other sources and combine that with information we collect through the Site or through other interactions with you. For example, we offer an optional integration with certain social media platforms (“Platforms”), if you choose to enable such integration and either create or log into your account through a Platform, we will have access to certain information from that Platform, such as your name, account information and friends lists, in accordance with the authorization procedures determined by the Platform(s). We generally use such data to more effectively identify or connect with current and potential audiences and supporters.

We will keep your PII only for as long as necessary to provide you with the Services, maintain our legitimate business operations (including, but not limited to, legal, regulatory, tax, accounting, or reporting requirements), and/or exercise, defend, or establish our rights. To determine the appropriate retention period for PII, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Once your PII is no longer necessary for the purposes for which it was collected or otherwise processed, it will be duly blocked and retained for the duration of any applicable retention periods during which legal actions may arise in connection with such processing. Upon expiry of such retention periods, your PII will be permanently deleted. We store our logs and other technical records (non-personal information) indefinitely. For further information about how long we retain your PII, please contact us at privacy@lukadoncicfoundation.org.

The Site may contain links to third-party websites. Once you leave our Site or are redirected to a third-party website or application, this Policy or our Site’s Terms no longer apply, and another entity may collect PII from you. We do not control, review, or have any responsibility for the third-party websites, their content or their use of any PII they may collect from you. Any links to third-party websites or locations are for your convenience and do not signify our endorsement of such third-parties or their products, content, or websites. We encourage you to review the privacy policies of any third-party websites you visit.

To the extent required by law, we provide a Cookie Banner on our Site to allow you opt-in to the use of certain cookies. Please note that we recommend indicating your consent preferences using this Cookie Banner that we do not alter our Site does not otherwise respond to browser-level Do Not Track signals.

We strive to provide you with choices regarding the PII that you provide to us and that we collect. We have created mechanisms to provide you with the following control over your PII:

• Tracking Technologies and Advertising. We use cookies and similar technologies only where permitted by applicable law. Where required, we will obtain your prior consent before placing non-essential cookies on your device. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. You may also withdraw your consent for such cookies at any time. If you disable or refuse cookies, please note that some non-essential parts of this Site (tied to those cookies) may then be inaccessible or not function properly.
• Promotional Offers. Where required by applicable law, the LDF will collect your consent prior to sending you promotional communications on the basis of your prior consent. You may withdraw your consent at any time by contacting us at privacy@lukadoncicfoundation.org with “Withdraw Consent” in the subject line, or by clicking the "Unsubscribe" link included in any such communication. Where such communications are sent on the basis of our legitimate interest in keeping you informed about the LDF's programs and activities, you may object to receiving them at any time by contacting us at privacy@lukadoncicfoundation.org with “Object to Processing” in the subject line or by clicking the "Unsubscribe" link included in any such communication. In either case, your request will be processed promptly.
• Disclosure of Your Information for Third-Party Advertising. Where you have provided your consent to the disclosure of your PII to unaffiliated third parties for their own marketing purposes, you may withdraw your consent at any time by contacting us at privacy@lukadoncicfoundation.org with “Withdraw Consent” in the subject line. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to its withdrawal
• Targeted Advertising. If you do not want us to use information that we collect, or that you provide to us, to deliver advertisements according to our advertisers' target-audience preferences, you can opt-out by sending us an email stating your request to privacy@lukadoncicfoundation.org. Such right is available to you whether you live in a jurisdiction (like the EU) where we are required to collect your prior consent for such advertising, or in another jurisdiction where such prior consent is not required.
• Profiling You. We may use your information to anticipate what you may be interested in, or want to do, in the future, in a way that does not produce any legal, or similarly significant effects for you. You may object to our profiling of you at any time by contacting us at privacy@lukadoncicfoundation.org with “Object to Processing” in the subject line.

You may also send us an email at privacy@lukadoncicfoundation.org to request access to, correct or delete any PII that you have provided to us. We may need to delete your user account if you request that we delete some particular PII. We may not accommodate a request to change or delete PII if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

You have the following rights with respect to our practices regarding your PII. To exercise or enforce some or all of these rights, or, if you wish to find out more about these rights, please contact us at privacy@lukadoncicfoundation.org, or visit https://app.enzuzo.com/policies/do-not-sell/fe646a86-b8fc-11ef-a5ba-2f861235cc11. PLEASE NOTE, THIS SECTION 8 IS GENERALLY DIRECTED AT ALL VISITORS TO, AND/OR USERS OR PARTICIPANTS OF, THE LDF, ITS SITE AND SERVICES. IF YOU RESIDE IN THE EU, UK, OR EUROPEAN ECONOMIC AREA (COLLECTIVELY WITH THE EU AND UK, THE “EEA”), SECTION 9 MAY EXPLAIN ADDITIONAL RIGHTS THAT YOU MAY HAVE, OR HOW YOUR RIGHTS MAY DIFFER THAN AS DESCRIBED IN THIS SECTION 8.

A. Right to Know. You have the right to know and request confirmation if we have collected and/or are processing your PII.

B. Right of Access. This is your right to be informed about what PII we are processing, why, and to whom we may disclose your data may be passed. We collect the following categories of PII: identifiers (primarily contact information); protected classification characteristics, demographic information, and, where applicable and permitted by law, sensitive information and special categories of personal data (such as age, race, gender, etc.); internet/network activity (such as webpages visited, referral sites, time spent on our pages, and other information provided from your IP address, cookies, and pixels); sensitive information and special categories of personal data, where applicable and permitted by law (in as much as sensitive information includes the PII of children, and/or sensitive information can be determined from a photograph); and inferences we can draw based on the other information. Such PII is used for the purposes described in Section 1. The following categories of information are shared: identifiers; protected classification characteristics, internet/network activity; and sensitive information. We share such information with the categories of parties described in this Sections 9A and 9B in relation to the purposes in Section 2.

C. Right to Correction. This is the right to have your PII corrected or amended if what is held is incorrect or incomplete in some way.

D. Right to Deletion. Subject to certain exceptions and legal limitations, this is the right to have your PII deleted. Please note, if you are a Parent, and you request the deletion of your Child’s PII, we will also delete each Parent’s PII related to that Child because the Parent’s PII is not necessary except in relation to processing the PII of the Child. Similarly, if a Parent requests that we delete their PII, we must also delete their Child’s PII as we must maintain a Parent’s involvement/consent, if required by law.

E. Right to Data Portability. This is the right to ask for your PII to be provided to you in a structured, commonly used, and machine-readable format and to transmit those data to yourself or another entity of your choosing.

A. Right to Non-Discrimination. In the event that you exercise one of your rights described in this Policy, you will not be discriminated by us in any way, including by the denial of goods or services, providing you a different level of goods or services, or charging you different prices or rates for the goods or services, unless the change in price is reasonably related to the value we receive from your PII.

B. Right to Opt-Out of the Sale of Your Information. We do not ‘sell’ your PII (whether “for money” or “something else of value”), but if we did, you would have the right to opt-out of such sale at any time. IN THE PAST 12 MONTHS WE HAVE NOT SOLD, AND DURING THE PERIOD OF TIME WHICH THIS POLICY IS POSTED WE SHALL NOT SELL, THE PII OF ANY USER, INCLUDING MINORS UNDER THE AGE OF 16.

C. Right to Opt-Out of Profiling. To the extent that the LDF engages in profiling, you have the right to opt out of it.

D. Right to Opt-Out of Targeted Advertising. You may also be able to opt-out of targeted advertising based on your activity on non-affiliated websites and services. Please be aware, if you do exercise this right, you may still see generic ads on the Site and targeted ads based on your activity with the LDF.

E. Right to Opt-in to the Processing of PII. To the extent we are collecting your sensitive information, including any PII of a child under 18 years of age, we will first obtain your opt-in consent before collecting or processing such PII, or that of the child’s parent or legal guardian, in compliance with applicable laws.

F. Right to Limit the Use and Disclosure of Sensitive Personal Information. You have the right to limit our use and disclosure of your Sensitive Information to what is strictly necessary to provide you with the Services and as otherwise permitted by applicable law or regulation. Please note, limiting our ability to use and disclose Sensitive Personal Information may affect our ability to provide Services and/or to allow you to participate in our Contests.

G. Right to Appeal. In the event that we deny your request to exercise one or more of your rights above (including, but not limited to if we are able to verify your identity, or that of the person submitting a request on your behalf), we will inform you within the period we have to respond to your request according to applicable law. You have the right to appeal our decision, by emailing us at privacy@lukadoncicfoundation.org, with “Appeal” in the subject line. We will notify you of our decision for your appeal within thirty (30) days of receiving your request. If we confirm our original decision, you may further appeal our decision to the government agency in your State (in most cases, this is your State’s Attorney General) that is responsible for data privacy enforcement.

Under the GDPR and the PDPL, the LDF is a data controller. If you are a resident of the European Economic Area, United Kingdom, or Serbia, you are a “Data Subject” and the GDPR or PDPL applies to your PII, as applicable.

A. Additional Rights and Information for Data Subjects. In addition to the rights described in Section 8.

• The right to restrict processing. This is the right to ask for a temporary halt to processing of your PII, such as where the accuracy of the PII is contested, in the case where a dispute or legal case has to be concluded, or the data is being corrected.
• The right to object. This is the right to object to further processing your PII (including for direct marketing or targeted advertising purposes, and where processing is carried out as a matter of public interest or official authority) if such processing is inconsistent with the primary purposes for which it was collected. If you reside in the EU, UK, or Serbia, at any time, you have the right to object to such processing (where it is done on the basis of our legitimate interests) by emailing us at privacy@lukadoncicfoundation.org with “Object to Processing” in the subject line.
• The right to withdraw consent. Where processing of your PII is based on your consent, you have the right to withdraw your consent at any time by contacting us at privacy@lukadoncicfoundation.org with ‘Withdrawal of Consent’ in the subject line. Withdrawal of consent will not affect the lawfulness of processing carried out prior to its withdrawal (Article 7(3) GDPR).
• Rights in relation to automated decision making and profiling. You have the right to not be subject to any predictive profiling or a decision based solely on automated processing that produces legal or similarly significant effects. The Service does not engage in automated decision making.
• Right to lodge a Complaint with a Data Protection Authority. In addition to their other rights and remedies, Data Subjects may lodge a complaint regarding our privacy practices with a Data Protection Authority in your country of residence (provided below), in the country in which you work, or the place where the alleged violation took place. For the contact information of the EU Data Protection Authorities other those provided below, you can find them here, EU Data Protection Authorities.

The California “Shine the Light” law allows California residents to request information regarding our disclosures in the prior calendar year, if any, of their personally identifiable information to third parties. To make such a request, please contact us at privacy@lukadoncicfoundation.org with "Shine the Light Request" in the subject line. Please include enough detail for us to locate your file; at a minimum, your name, email, and username, if any. We will attempt to provide you with the requested information within thirty (30) days of receipt. We reserve our right not to respond to requests sent more than once in a calendar year, or requests submitted to an address other than the one posted in this notice. Please note that this law does not cover all information sharing. Our disclosure only includes information covered by the law.

If you are a Nevada resident, we do not “sell” your “covered information” as such terms are defined in the Nevada Privacy of Information Collected on the Internet from Consumers Act as amended by Nevada Revised Statutes Chapter 603A (“NPL”). Though we do not sell your covered information, as someone that is subject to the NPL, you have a right of access in relation to the covered information of yours that we have or process, including why we process it, and other parties with whom we may share such information. If you would like to request such access, or tell us not to sell your information in the future, please email us at privacy@lukadoncicfoundation.org with your name, postal address, telephone number, and email address with “Nevada Request” in the subject line.

If you are a Minnesota resident, this Section and the Minnesota Consumer Data Privacy Act (the “MNCDPA”) also apply to you. In addition to the rights set out in Section 9, you also have the following rights:

• Request Additional Information About Profiling. You have the right to ask us about the results of any profiling we do in relation to you and your PII, inquire about the reasoning for the decision (if any), and ask how to obtain a different result in the future.
• Request Identities of Third Parties. You are entitled to ask for the specific identity of each third party to whom we disclose your PII.
• Opt-In to Sale. While the LDF does not “sell” your PII, if you reside in Minnesota, you have the right to not have your PII sold unless, and until, you affirmatively opt-in to such sale of your data.
• 
  

If you are a New Jersey resident, and are at least 13 years old, but less than 17 years old, this Section, and the New Jersey Data Privacy Act (the “NJDPA”), also apply to you. In addition to the rights set out in Section 9, you also have the right to not be subject to the following unless you first affirmatively opt-in: targeted advertising; the sale of your PII (we do not do this at any age); and/or profiling you in a way that produces legal, or similarly significant, effects for you.

If you are an Oregon resident, this Section and the Oregon Consumer Privacy Act (the “OCPA”) also apply to you. In addition to the rights set out in Section 9, you also have the following rights:

• Request Identities of Third Parties. You are entitled to ask for the specific identity of each third party to whom we disclose your PII.
• Opt-In. If you are at least 13 years old, but less than 15 years old, you also have the right to not be subject to the following unless you first affirmatively opt-in: targeted advertising; the sale of your PII (we do not do this at any age); and/or profiling you in a way that produces legal, or similarly significant, effects for you.

We have implemented appropriate technical, personnel, and organizational measures designed to protect your PII from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls and, where applicable, will be encrypted using SSL technology.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your PII, we cannot guarantee the security of your PII transmitted to the Site. In the event that any information under our custody and control is compromised as a result of a breach of security, we will take steps to investigate and remediate the situation and, in accordance with applicable laws and regulations, and notify the competent Data Protection Authority/regulator and those individuals whose information may have been compromised, as required by applicable law.

If you are a non-US user of the Site or our Services, by visiting the Site, or utilizing the LDF’s Services, and providing us with your PII, you acknowledge (and where required by applicable law, you consent) that you are transferring your PII to us (the LDF) in the United States. Subject to the terms of this Policy and applicable law, we will process your PII pursuant to the terms of this Policy, and where required, your prior consent. In addition, your PII may be processed in the country in which it was collected and in the United States, where laws regarding processing of PII may be less stringent than the laws in your country. After you initially transfer your PII to us, if we proceed to transfer your PII to any country other than your country of residency, such transfers will be carried out in accordance with the applicable laws applying to international transfers of your PII.