Respect for personal privacy and safety
Trust begins with understanding what information a service asks for, why it is needed and who may work with it. For projects that help veterans, service members and families, a responsible approach to personal and especially sensitive data is a fundamental condition of operation.
Status of this text
This section is a preliminary information notice for the demo version of veterano.institute. It is not an approved privacy policy and does not replace the full legal document. Before the launch of server-side registration and inquiry forms, it will be necessary to determine the personal data controller, describe all processing operations, retention periods, lawful bases, persons responsible and mechanisms for exercising users’ rights.
Our principles
Minimization
Request only data that is objectively necessary for the stated function.
Transparency
Explain the purpose, the legal basis and the parties involved in processing.
Access control
Do not allow general access to personal or sensitive information.
Security
Provide for secure channels, role control, audit and incident response procedures.
Individual rights
Provide a clear way to submit requests regarding access, correction, deletion or other rights provided for by applicable law.
Responsibility between services
Regulate information exchange between ecosystem sites separately.
Which functions are available in the demo version
In the current static prototype, the general contact form composes a message to be sent through the user’s email application; it does not store enquiries in a separate server database of this prototype. However, third-party hosting, email and other services actually connected may process technical or contact data under their own rules. Before publication, these services must be inventoried.
Which data we ask you not to send through general forms
Do not send scans of passports, veteran IDs, medical reports, information about military assignments, passwords, bank details or data of minors, unless a separate secure process and legal grounds have been determined in advance.
What the final policy will be
The official document must include: the name and contact details of the controller; categories of data; specific purposes and legal grounds; recipients; international transfers, where applicable; retention periods; technical protection measures; cookie rules; data subjects’ rights; the procedure for enquiries and for updating the document. The effective date and version should be displayed after legal approval.
---