Privacy and cookie policy

  1. About this policy

1.1 This Privacy policy (‘Policy’) covers all the personal data that you provide Orangutang Fonden (Save the Orangutan Foundation) and/or that we gather as part of your membership, or your status as either a customer, a supplier, or a user of our services, including usage of our website, or as part of another working relation between us. In this Policy, we describe what personal data we gather, how we may use your personal data, and how long we store your personal data. We urge you to read this Policy and to direct any inquiries to us in case the Policy contains unacceptable information. You can access the current version of the Policy on savetheorangutan.org at any time.

  1. Data controller

2.1 The data-controlling organisation that processes your personal data is:

Save the Orangutan Foundation

Amagertorv 13, 3rd floor

1160 Copenhagen K

Denmark

Phone no.: +4533930650

E-mail: info@savetheorangutan.org

CVR no.: 3699 5947

(Henceforth ‘the Organisation’)

2.2 The overall legal frame for our processing of your personal data is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC with corresponding adjustment. Additionally, the Act of the Danish Parliament on supplementary provisions to the regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data—known informally as the Data Protection Act L 68.

All initial inquiries with regards to this Policy, the processing of your personal data, and suspicions of non-compliance are to be directed to David Frese by phone +4533930650 or by email info@savetheorangutan.org.

  1. Definitions

3.1 Definitions for the most material concepts of legal personal data are provided below.

Personal Data

All forms of information about an identified or identifiable natural person. I.e. all information that may identify a particular natural person, either directly or indirectly and alone or in combination.

Data controller

The natural person of the Organisation that decides both the purpose of and the supplementary resources in the Processing of Personal Data, either alone or in collaboration with others.

Data processor

The natural person that processes Personal Data on behalf of the Data Controller.

Processing

All forms of activity or activities that involve the use of Personal Data, for instance, gathering; registration; systematization; rectification; searching; grouping; or sharing with persons, authorities, organisations, etc. beyond the Organisation.

Special categories of Personal Data

Information about race or ethnic origin; political, religious, or philosophical beliefs or affiliation to trade unions; genetic data; health details or information about a natural person’s sexual relations or sexual orientation; and information by way of biometric data if biometric data are processed with the sole aim of identifying a natural person (sensitive data).

The general data protection regulation

The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC with corresponding adjustment.

The Data Protection Act

Act of the Danish Parliament on supplementary provisions to the regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data—known informally as the Data Protection Act L 68.

  1. Purposes of the Processing of your Personal Data

4.1 We are obligated to process your Personal Data to such an extent that we in part can provide you with the services you demand and that we in part can meet the obligations, which we as a charitable fund are under, dependent on whether you are a donor or a customer, whether you subscribe to our newsletters, follow us on social media, or whether you simply are a user of the Organisation’s website. This applies both in the management of your potential donations, unless you decide to donate anonymously, your potential purchases in the web shop, and/or in our management of your potential donation contracts. It also applies in usage of our web shop, our donor service, newsletters, social media, competitions, petitions, and/or in regards to our marketing towards you.

  1. The personal data about you that we process

5.1 We gather the following data directly from you:

5.1.1 If you are a donor, we gather the following ordinary data from you: name, address, postcode, town, mobile phone number, email address, registration- and account number, and civil registration number in case you want a deduction on your donation.

5.1.2 If you visit our website, we gather your IP-address and information about your activities on our website.

5.1.3 Generally, the Organisation gathers no Special Categories of Personal Data (sensitive data) about you. There may be instances in which we are informed of unsolicited sensitive data. This information is neither saved nor stored but is deleted immediately.

5.1.4 When you follow or interact with us on social media, we gather generalised demographical data such as gender, age, and native country.

5.1.5 When you subscribe to our news letter or enter a competition or petition, we gather name and email address and possibly phone number.

5.2 We gather the following data about you from others:

5.2.1 In some instances, it is necessary for the Organisation to gather Personal Data about you from others. For example from suppliers who can analyse, rectify, and enrich our data about donors. We gather this information with the aim of guaranteeing correct information about donors in our database to the extent possible.

  1. Cookies

6.1 Our website uses ‘cookies’ to compile website statistics. A cookie is a small text file that is sent from our server to your browser and is stored on your computer’s hard drive or your mobile device. Cookies allow you to more effectively and easily use the website. We do not process information on user behaviour gathered via cookies if the user behaviour can identify particular people. You can change your browser settings so that it informs you when you receive a cookie to the effect that you will always have the possibility to decide whether or not you wish to accept it. You can also turn off the function completely. However, by doing so, the website will not work at optimum performance. The cookies do not contain personal data such as information about your email address, your user ID, or other personal information besides what is enclosed in this Policy.

6.2 Purposes of cookies on our website:

  • Technical functionality, allowing us to save your settings.
  • Call-count record, informing us on how many people visit our site and allowing us to document this to advertisers, for instance.
  • Targeted advertising, allowing us to show you relevant advertisements and informing us on how often the same advertisement is shown.

6.3 The site uses cookies from the following third parties, who may access the cookies in question:

  1. How we process your Personal Data

7.1 Specifically, the Organisation uses your Personal Data for several different purposes dependent on whether you are a customer or a donor or whether you simply are a user of our website.

7.1.1 If you are a donor, we use your Personal Data to:

  • manage your payment(s);
  • send you necessary information about your donation(s);
  • send you relevant information about the Organisation’s work.
  • report your donation to the Central Tax Administration so that your donations will appear on your tax return;
  • be able to send you promotion material if this too is in accordance with the Danish Marketing Practices Act in force at any time;

7.1.2 If you are a customer in the web shop, we use your Personal Data to:

  • provide you with functionality on our website, including our web shop;
  • forward order confirmations to you;
  • respond to your potential inquiries and to comply with your requests;
  • to carry out your orders;
  • to manage your customer relation to us;
  • be able to send you promotion material if this too is in accordance with the Danish Marketing Practices Act in force at any time;

7.1.3 If you subscribe to our newsletter, we use your Personal Data to:

  • be able to send you our news letter and other relevant information about the Organisation’s work.

7.1.4 If you participate in a petition or a competition that we manage, we use your Personal Data to:

  • Rectify your participation as a natural and legal person.
  • Be able to update you on the progress of the activity you have entered
  • Be able to send you our newsletter and other relevant information about the Organisation’s work if you have consented to it.

Be able to send you promotion material if this too is in accordance with the Danish Marketing Practices Act in force at any time as long as you have consented to it;

7.1.5 If you simply are a user of our website, we use your Personal Data to:

  • be able to provide you with functionality on our website;
  • compile statistics on your activities on our website;
  • optimise the layout of our website;
  1. Why we are allowed to process data about you (lawful basis)

8.1 When you donate to the Organisation, buy a product off of our web shop, or enter into an agreement with us, we process your standard Personal Data for the specific purpose set forth in this Policy. Should you direct an inquiry or the like tos us that precede your decision to enter into an agreement with us, we may also process your standard Personal Data. The legal basis for the Processing of your Personal Data is the General Data Protection Regulation article 6, paragraph 1 (b), stating that the processing of your information is necessary for meeting our obligation to you, or for managing inquiries or the like that precede your decision to enter into an agreement with us.

8.2 The Organisation may also process your standard Personal Data because of a lawful interest in processing information about you, cf. the General Data Protection Regulation article 6, paragraph 1 (f), unless your right to obtain protection of your own standard Personal Data precedes our lawful interest in processing your information.

8.2.1 The Organisation has a lawful interest in processing your Personal Data (name, address, phone number, email, bank account details, and civil registration number) in order to process your donation to the Organisation’s work.

8.2.2 The Organisation has a lawful interest in processing your Personal Data (name, address, phone number, and email) in order to disseminate information.

8.2.3 The Organisation has a lawful interest in processing your Personal Data (name, address, phone number, and email) in order to process the purchases in the web shop.

8.2.4 The Organisation has a lawful interest in processing your Personal Data (name, phone number, and email address) for marketing purposes. The Organisation’s lawful interest thereby consists in knowing your preferences, allowing us to accommodate our offers to you and ultimately offer you products and services that meet your requirements and requests. The Organisation keeps to the rules of the Danish Marketing Practices Act. Likewise, we compile various statistics of the amount of donors, of purchases, of donations, website usage, etc. with reference to this act.

8.3 In certain cases, the Organisation is obliged to process your Personal Data. For instance, in order to document transaction trails and the like under laws of the bookkeeping act. We are to store accounting records for five years from the end of the financial year to which the accounting records belong, among other things. Likewise, we may be obliged to process your Personal Data in order to report to the Central Tax Administration to let you deduct your donation. Reports to the Central Tax Administration must specify civil registration number, cf. the Tax Control Act, which is thus the basis for our processing of information about your civil registration number.

8.4 The processing of Special Categories of Personal Data (sensitive data) is conducted as part of our legal activities for the purpose of registering deceased donors. Moreover, the Processing of your data is conducted under the condition that you are either a regular donor or that you for some other reason are in regular contact with us. We gather, register, or process no other kinds of Special Categories of Personal Data (sensitive data) than the kind mentioned above.

8.5 If you are not a customer, member, or donor but rather simply a user of our website, for instance, we need to manage the data that you provide for the data processing, for instance for the purpose of managing cookies, to a limited extent. Read more about our cookie policy in paragraph 6 above. In some cases, we may register which IP-addresses visit our website. An IP-address may function as Personal Data, and in case we process your IP-address, it will be on the same legal basis as described above in paragraph 8.2.

  1. Sharing of your Personal Data

9.1 The Organisation may share your Personal Data with the suppliers and partners who, for instance, assist us in executing your order or who assist us with our IT operations, hosting, etc. This means, that we may share your information with our service providers, our technical support, and our bank, for instance.

9.2 The Organisation has the possibility of sharing your information in connection with a petition in which you as a signatory is an identifiable co-communicator of a specific message to a third party. You consent to this in your participation in the petition.

9.3 In addition to the above, the Organisation shares your information to the extent that we are obliged to, for instance in response to required reporting to public authorities such as the Central Tax Administration.

  1. Sharing of your information with organisations outside the EU/EEA

We do not share personal data with organisations outside the EU/EEA in our data processing. Should the need arise in specific circumstances, we will ask for your consent.

  1. Storage and erasure of your Personal Data

11.1 We store your Personal Data according to the rules below:

11.2 If you are a donor, the Organisation will store your Personal Data for a maximum of 5 years plus the current year of your latest donation.

11.3 If you are a customer in our web shop, your Personal Data is stored for a maximum of 5 years plus the current year of your latest purchase.

11.4 If you have subscribed to our newsletter, we will store your Personal Data for a maximum of a year from the cancellation of your subscription.

11.5 If you are a user of our website while neither being a customer, a member, a former member, or a donor, we store the information that we have registered about you for a maximum of a year from the date of your visit.

11.6 If you are a co-signatory have participated in a competition, or the like provided by us, we will store your Personal Data for a maximum of a year from the conclusion of the campaign in question.

  1. Your rights

12.1 Access

12.1.1 You have the right to access the Personal Data about you the Organisation is processing. You can request access to the Personal Data we have registered about you, including the purposes the data are gathered for, by contacting us (via the information above. See paragraph 2.1). The Organisation will comply with your request for access as soon as possible.

12.2 Rectification and erasure

12.2.1 You have the right to request correction, supplementary processing, erasure, or blocking of the Personal Data about you that we process. The Organisation will comply with your request as soon as possible.

12.3 Restriction of Processing

12.3.1 In certain circumstances, you have the right to restrict the Processing of your personal information. Please contact us if you wish to restrict the Processing of your Personal Data.

12.4 Data portability

You have the right to receive your personal data (only the information concerning yourself that you have provided us) in a structured, commonly used, and machine-readable format (data portability). Please contact us if you wish to exercise your right to data portability.

12.5 Right to objection

You have the right to object to our process of your personal information when the Processing is based on article 6, paragraph 1 (e) (purpose in the public interest or public exercise of authority) or article 6, paragraph 1 (f) (legal interest). The extent of our process of your information for these purposes is apparent from this Policy. You may exercise your right to objection at any time by contacting us.

12.6 Withdrawal of consent

12.6.1 You have the right to withdraw your consent at any time if the Processing of your Personal Data is based on your consent. Your withdrawal of consent does not affect the legality of the executed Processing before the time of your withdrawal. Please contact us if you wish to withdraw your consent.

12.6.2 If you wish to withdraw your consent to receiving promotional information and offers in general, including by regular post, via text, phone, or via other electronic means, you may do so at any time by contacting us at info@savetheorangutan.org. If we are uncertain about your identity, we may ask you to identify yourself. Your inquiry concerning withdrawal of consent is free except for the regular costs for communication.

12.7 You can contact us at info@savetheorangutan.org if you wish to assert one or more of the rights described above.

12.8 There may be terms and conditions or limitations connected to the assertion of the rights described above. Therefore, there is no certainty that you have a right to data portability in a specific case, for instance. The assertion of the rights depends on the specific circumstances for the processing activity in question.

  1. Possible consequences for not providing personal information

13.1 If you do not provide us with personal information, you may not be able to receive news from Save the Orangutan Foundation or to receive deductions on your donations, for instance.

  1. Security

14.1 Within the Organisation, our Processing of Personal Data is subject to our IT Security Policy. Likewise, our IT Security Policy contains provisions for the completion of risk and impact assessment of existing and new or modified processing activities. We have implemented internal provisions and procedures for maintenance of appropriate security from the time the Personal Data are gathered to the time of its deletion. Likewise, we entrust our Processing of Personal Data solely to Data Processors that maintain an equally appropriate level of security.

  1. Complaints to the data regulator

15.1 If you are dissatisfied with the Organisation’s Processing of your Personal Data, you may register your complaint with the Danish data regulator:

The Danish Data Protection Agency, Borgergade 28 5th floor, 1300 Copenhagen K, Denmark. Phone no.: +4533193200. Email: dt@datatilsynet.dk

  1. Updates to this Policy

16.1 Save the Orangutan Foundation is obliged to comply with the founding principles for protection of Personal Data and data protection. Therefore, we regularly review this Policy to keep it up-dated and in accordance with current principles and law. This Policy may be changed without notice. Material changes to the Policy will be published on our website along with an updated version of the Policy.

16.2 Potential future changes to this Policy will be published on this site and you may possibly receive notice of this via email.

The last update to this Policy was in February 2019.