Privacy and cookie policy

What You Need to Know About Our Processing of Your Personal Data

  • Save the Orangutan is responsible for processing the personal data we receive from you.
  • You are welcome to contact Valentina Bravo Jara, Donor relations & fundraising manager – Email: vj@savetheorangutan.org.
  • The purpose of processing your personal data is to deliver our goods and services to you and your organisation, as well as to keep you informed about news, features, and product opportunities, in accordance with Article 5(1)(b) of the General Data Protection Regulation (GDPR).
  • The legal basis for processing your data is your consent, under Article 6(1)(a) GDPR, and/or the contractual agreement, under Article 6(1)(b), and/or legal obligations, under Article 6(1)(c), and/or our legitimate interests, under Article 6(1)(f), unless these are overridden by your fundamental rights and freedoms, especially if you are a child. Our legitimate interest includes marketing new services or products.
  • The types of personal data we store may include general information (e.g. name, address), special information (e.g. national ID number), and sensitive personal data (e.g. health-related data).
  • We may share your data with external parties, including data processors, consultants, and necessary partners involved in delivering our services.
  • Some of our data processors may be located outside the EU/EEA, but all transfers are made on a lawful basis.
  • We receive personal data directly from you and possibly from publicly available sources.
  • We retain your data as long as legally required under accounting laws, consent and limitation rules, and other applicable legislation.
  • We do not use profiling or make automated decisions that significantly affect your rights and freedoms.

Your Rights Under the GDPR

If you wish to exercise your rights, please contact us.

  • Right of Access and Rectification: You may request access to and correction of your personal data at any time.
  • Right to Erasure: You may request that your data be deleted, unless we are required to retain it for legal or accounting reasons.
  • Right to Restriction: You may request to limit how your data is processed.
  • Right to Object: You may, under certain circumstances, object to our processing of your personal data.
  • Right to Data Portability: You can request a copy of your data in a machine-readable format or have it transferred to another provider.

For more information about your rights, consult the Danish Data Protection Authority’s guide (www.datatilsynet.dk).

Complaints

If you wish to lodge a complaint, we appreciate the opportunity to resolve your concerns. However, you are always entitled to contact:

Danish Data Protection Authority
Carl Jacobsens Vej 35
2500 Valby
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk
Website: www.datatilsynet.dk

Complete Privacy Policy of Save the Orangutan

General Information
This Privacy Policy (“Policy”) applies to all personal data that you provide to Save the Orangutan or that we collect about you, either as part of a donor, supplier, or collaborative relationship or as a user of our services, including visits to our website. This Policy explains what data we collect, how we handle it, and how long we keep it. You should read this Policy carefully and contact us if there is anything you cannot accept. The current version is always available at savetheorangutan.org.

Data Controller
Save the Orangutan Foundation
Østerbrogade 146B, 1st floor
2100 Copenhagen
Email: info@savetheorangutan.org
CVR: 3699 5947
(Contact person: Valentina Bravo Jara, Donor relations & fundraising manager – vj@savetheorangutan.org)

Key Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Data Controller: The entity that determines the purposes and means of processing personal data.
  • Data Processor: The entity that processes personal data on behalf of the controller.
  • Processing: Any activity involving the use of personal data (e.g., collection, recording, organisation, storage, disclosure).
  • Special Categories of Personal Data: Data concerning race, political beliefs, religious/philosophical beliefs, trade union membership, genetics, health, sexual orientation, and biometrics.

Purpose of Processing
Depending on your relationship with us—donor, customer, newsletter subscriber, social media follower, or simply a website user—we are obligated to process your data to provide requested services and fulfil legal and charitable responsibilities. This includes managing donations (unless anonymous), processing purchases, administering subscriptions, and conducting marketing and communications.

Categories of Data We Collect
We may collect:

  • Name, address, phone number, email, account details, and national ID for tax deduction purposes.
  • IP addresses and website activity.
  • Demographic data from social media.
  • Newsletter subscriptions and petition sign-ups.

We do not process special categories of personal data unless received unsolicited, in which case it is immediately deleted.

We may also receive data from third-party sources for data correction and enrichment purposes.

Use of Cookies
We use cookies to improve website functionality, measure traffic, and personalise marketing. Cookies do not store personal data unless otherwise specified. You can disable cookies in your browser settings.

We use cookies from:

  • Google Ads and Analytics
  • Facebook (Meta)
  • LinkedIn
  • Twitter/X

See each provider’s privacy policy for details.

How We Use Your Data
We use your personal data to:

  • Manage donations and related communication.
  • Fulfil orders from the webshop.
  • Send newsletters and campaign updates.
  • Track and analyse website use.
  • Comply with legal obligations.

Legal Basis for Processing
We process your data based on:

  • Contractual necessity (Article 6(1)(b))
  • Legitimate interest (Article 6(1)(f)), e.g., for marketing or improving services.
  • Legal obligation (Article 6(1)(c)), e.g., tax reporting.
  • Consent (Article 6(1)(a))

We only process sensitive data (e.g., for death record matching) where there is a legitimate purpose and a history of regular contact.

Sharing Personal Data
We may share your data with:

  • Service providers, IT suppliers, payment processors, banks.
  • Public authorities such as SKAT (for tax purposes).
  • Petition recipients (only with explicit consent).

We do not transfer personal data outside the EU/EEA unless with a lawful basis and your consent.

Data Retention

  • Donors: Up to 5 years + current year from last donation.
  • Customers: Same as donors.
  • Newsletter subscribers: 1 year after unsubscribing.
  • Website users: 1 year from last visit.
  • Campaign participants: 1 year after the end of the campaign.

Your GDPR Rights
You have the right to:

  • Access, correct, or delete your data.
  • Limit or object to how your data is used.
  • Withdraw consent at any time.
  • Transfer your data to another provider.
  • File a complaint with the Danish Data Protection Authority.

To exercise these rights, contact info@savetheorangutan.org.

Note: Some rights may be subject to legal exceptions.

Consequences of Not Providing Personal Data
If you choose not to provide personal data, you may not be able to receive news from Save the Orangutan or benefit from tax deductions for your donations.

Security
Our processing of personal data is governed by our internal IT and Security Policy, which ensures risk assessment, impact analysis, and appropriate technical and organisational measures. We only work with data processors who provide an equivalent level of protection.

Complaints
If you are dissatisfied with our processing of your personal data, you can lodge a complaint with:

Danish Data Protection Authority
Borgergade 28, 5th floor
1300 Copenhagen K
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk

Updates to This Policy
This Policy is regularly reviewed and may be updated without prior notice. Significant changes will be announced on our website.

Last updated: May 2025