PRIVACY & SIGNATURE DATA
This page explains how personal data is processed when you add your name to the Open Letter on DISBAND.EU.
WHO IS RESPONSIBLE FOR YOUR DATA?
Until Milion chvilek pro republiku, z. s. is formally established, DISBAND.EU is operated by Petra Quirke, who is the controller of the personal data collected through the signing system.
Privacy contact: privacy@disband.eu.
Milion chvilek pro republiku, z. s. is currently being established as the non-profit organisation behind the project. Once the association is formally established and assumes responsibility for DISBAND.EU and its data processing, this Privacy Notice will be updated accordingly.
WHAT DATA WE COLLECT
When you sign the Open Letter, we collect:
- first name
- surname
- email address
- country
- city or town
- year of birth
- confirmation that you are 18 years of age or older
- the language/locale used when signing
- date and time of submission
- date and time of email confirmation
- verification status
- records showing which consent wording/version you agreed to
- technical verification and security data needed to operate the signing system and protect it against abuse
The website and hosting infrastructure necessarily receive your IP address when handling requests. The signing system may process the IP address for abuse prevention and rate limiting. The signature database does not store the raw IP address as part of your signature record.
If you choose the optional future-contact consent, we also record that consent separately.
WHY WE COLLECT THIS DATA
We process this information in order to:
- record your signature on the Open Letter
- verify that the email address you entered belongs to you
- prevent duplicate, fraudulent or automated signatures
- protect the signing system against abuse and excessive repeated requests
- maintain a private record of verified signatures
- calculate and publish aggregate signature totals
- calculate signature totals by country
- administer the signing system
- respond to privacy requests
If you separately choose to receive future updates, we may also use your contact details to:
- keep you informed about the DISBAND.EU project
- invite you to the DISBAND Community
- inform you about plans connected with presenting the signatures publicly, including possible activities in Brussels
- send other project-related updates covered by that optional consent
WHAT IS PUBLIC?
Your name and personal details will not be displayed publicly. Only aggregate totals by country are published.
DISBAND.EU does not publish public lists of individual signers.
Public counters contain aggregate verified totals only.
CONSENT
Signing requires explicit consent to personal-data processing for recording your signature. The required checkbox reads:
I have read the Open Letter and explicitly consent to the processing of my personal data for the purpose of recording my signature.
The optional future-contact checkbox reads:
I want to be part of what happens next. If enough people sign, we plan to bring the signatures to Brussels together. Keep me informed and invite me to the DISBAND Community.
Optional contact consent is not required to sign. Withdrawing future-contact consent does not automatically remove your signature. Signature consent and future-contact consent are recorded separately.
POLITICAL OPINION DATA
Signing a political Open Letter may reveal or imply a political opinion.
Because political opinions are treated as specially protected personal data under European data-protection law, DISBAND.EU records signatures only after explicit consent.
EMAIL VERIFICATION
A signature is not counted until the signer confirms the email address using the verification link sent by email.
Verification is used to help prevent false, duplicate or automated signatures.
The confirmation link contains a temporary random verification token. Only a protected version of that token is stored by the signing system.
Public counters include verified signatures only.
COOKIES AND SIMILAR TECHNOLOGIES
DISBAND.EU does not currently use visitor analytics, advertising cookies or tracking pixels.
The signing and verification system uses a small number of first-party cookies and temporary browser-storage mechanisms to operate the signing process.
These include:
- a temporary signing-session cookie used to manage a pending signature and related verification functions
- a confirmation cookie used to recognise a successfully verified signature and display the correct Thank You page
- temporary browser storage and a short-lived signed confirmation proof used as a fallback during email verification, including when the confirmation link is opened in a different browser or on another device
These mechanisms are used for signing, verification, security and abuse prevention. They are not used for advertising or visitor profiling.
DISBAND.EU does not currently use Google Analytics or another visitor-analytics platform.
External services such as Buy Me a Coffee, GiveSendGo and Telegram are linked from DISBAND.EU but are not embedded as tracking services. If you follow one of these links, the external service will process your visit according to its own privacy and cookie policies.
WHO MAY PROCESS THE DATA?
Individual signature records are kept private.
Service providers may process data only where necessary to operate the website, hosting, email delivery, database, security and related technical services.
We do not sell, rent or trade personal signature data.
HOW LONG WE KEEP THE DATA
Signature records will be kept for as long as reasonably necessary for the Open Letter initiative, its verification, administration and any lawful follow-up connected with the campaign.
When individual-level data is no longer needed, it will be deleted or anonymised where appropriate.
Records necessary to demonstrate consent or respond to legal obligations may be retained for as long as reasonably necessary for those purposes.
Temporary verification tokens, signing sessions and security records are retained only for the period needed for their technical or security purpose.
WITHDRAWING CONSENT OR REMOVING YOUR SIGNATURE
A signer may contact:
to request:
- withdrawal of future-contact consent
- removal of their signature
- deletion of personal data, where applicable
- correction of inaccurate data
- access to their personal data
Removing a verified signature will affect aggregate totals after the record is removed from the live signature system.
YOUR RIGHTS
Depending on the circumstances, you may have the right to:
- access your personal data
- correct inaccurate data
- request deletion
- restrict certain processing
- withdraw consent
- object to certain processing
- request information about how your data is used
- lodge a complaint with the relevant data-protection authority
For privacy requests:
DATA-PROTECTION AUTHORITY
Where applicable, you may lodge a complaint with the Czech data-protection authority:
Úřad pro ochranu osobních údajů (ÚOOÚ)
SECURITY
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.
HOW WE DO NOT USE YOUR DATA
We do not sell personal signature data.
We do not rent or trade signer lists.
We do not use individual signature data to create targeted political advertising profiles.
CHANGES TO THIS PRIVACY NOTICE
We may update this notice when the signing system, legal structure or project changes.
Last updated: 13 October 2026