1. Introduction

At Naraya, we deeply value your trust and take the protection of your personal data to heart. This Privacy Policy outlines the type, scope, and purpose of how we collect and use your personal information in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

2. Data Controller

The responsible party for data processing on this website is:

Naraya – nonprofit association 
for Indigenous Cultural and Healing Heritage
Innerneuwald 50
2870 Aspangberg-St. Peter
Austria

Email: connect@naraya.world

3. What Personal Data We Collect

Depending on how you interact with our website, we may collect the following data:

Name and email address (e.g. via contact or membership forms)
IP address and browser data (e.g. through analytics or server logs)
Donation details (if applicable)
Any other information you choose to share with us (e.g. newsletter signups)

We only process this data when it is necessary for the functioning of our website and the services we offer.

4. Purpose of Data Processing

We collect and process your data for the following purposes:

To communicate with you
To manage inquiries, memberships, and donations
To send newsletters (only with your explicit consent)
To improve the functionality and security of our website


5. Legal Basis for Processing

We process your data based on the following legal grounds:

Art. 6(1)(a) GDPR – Consent
Art. 6(1)(b) GDPR – Contract or pre-contractual obligations
Art. 6(1)(f) GDPR – Legitimate interests (e.g. for website security and usability)



6. Cookies & Analytics

Our website may use cookies and similar technologies, including tools like Google Analytics, to better understand how visitors use our site. You may adjust your cookie settings in your browser at any time or opt out through browser extensions.

7. Data Sharing

We do not sell or share your personal data with third parties, except where required by law or necessary to process payments or memberships (e.g. payment service providers).

8. Your Rights

Under the GDPR, you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Request deletion of your data ("right to be forgotten")
Restrict or object to processing
Receive a copy of your data in a portable format
File a complaint with the Austrian Data Protection Authority (DSB)



9. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described above or to comply with legal requirements (e.g. tax regulations related to donations).

10. Contact

If you have questions about this Privacy Policy or your personal data, please contact us at:
connect@naraya.world

11. Changes to This Policy

We may update this policy from time to time to reflect legal, technical, or organizational changes. Please check back occasionally for the most current version.