Who is responsible for data protection
Women without Borders (WwB) is the provider of these online services and is responsible for data protection. Women without Borders is hereinafter referred to as Women without Borders, WwB, “we” or “us”).
Women without Borders
A – 1010 Vienna, Austria
What data do we collect
WwB collects or can collect the following data from users of our online services:
- Personal information (name)
- Email address
- Demographic information (location, languages, interests)
- Metadata (IP-addresses, device data)
- User data (visited pages, time of visit, interests)
How we collect your data
You directly provide us with most of the data we collect. We collect data and process them when you:
- Visit and view our website via your browser’s cookies
- Sign up for our newsletter
- Contact us via e-mail
- Follow us on our social media presences
How we will use your data
- Send you newsletters and measure conversion
- Answer your requests and communicate with you
- Improve the quality of our website by analysing statistics
Lawfulness of processing your data
If you are using our online services, we process your date according to one of the following:
- You have given consent to the processing of your personal data for one or more specific purposes (Art. 6 (1) lit a GDPR)
- Processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract (Art. 6 (1) lit b GDPR)
- Processing is necessary for WwB’s purposes of legitimate interests. This excludes interests that are overridden by the interests or fundamental rights and your (Art. 6 (1) lit f GDPR).
How we protect your data
We comply with legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons, appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.
Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling the physical and electronic access to the data, as well as their access, input, disclosure, availability and segregation. In addition, we have established procedures to ensure the data subject’s awareness of their rights, the deletion of data and the response to data threats. Furthermore, we consider the protection of personal data already in the selection of our hardware and software. Our procedures follow the principles of data protection through technology design and privacy-friendly default settings.
In order to protect your data transmitted via our website, we use SSL encryption. You will recognise such encrypted connections with the prefix https: // in the address bar of your browser.
What are your data protection rights
Every user of our online services is entitled to:
- The right to access – You have the right to request WwB for copies of your personal data. We may charge you a small fee for this service.
- The right to rectification – You have the right to request that WwB correct any information you believe is inaccurate. You also have the right to request WwB to complete the information you believe is incomplete.
- The right to erasure – You have the right to request that WwB erase your personal data, under certain conditions.
- The right to restrict processing – You have the right to request that WwB restrict the processing of your personal data, under certain conditions.
- The right to object to processing – You have the right to object to WwB’s processing of your personal data, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email firstname.lastname@example.org
Who will process your data
As part of our processing of personal data, we may transmit or disclose your data to third parties, e.g. IT service contractors or providers of services and content included in our online services. In such case, we comply with the legal requirements and in particular we conclude corresponding agreements that serve to protect your data.
Data processing in third countries
If we process data in a third country, for example outside the European Union this is done only in accordance with legal requirements.
Except for the case, that personal data are transferred on the basis of expressed consent or on legal or contractual requirements, we process or disclose the data only in third countries with a recognized level of privacy. These include those countries and entities certified under the Privacy Shield, or on the basis of specific warranties, such as the so-called standard protection clauses of the EU Commission, existing certifications or binding internal data protection regulations process (Articles 44 to 49 GDPR).
- Service Providers
As a safe and efficient payment option, we offer donors the opportunity to use the following payment services:
The payment service provider processes master data (e.g., name, address), bank data (e.g., account numbers, credit card numbers, passwords, TANs, checksums), contract data, sums, recipient related data.
Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; Website: https://www.paypal.com
Analysis and optimisation services
We use web analysis to evaluate the flow of visitors to our online services, their behaviour, interests or demographic information, such as age or gender based on pseudonymous values. With the help of this analysis we can for example identify the times when our online services are used most frequently but also which online service still need to be optimised.
Service provider: Google Analytics: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
https://policies.google.com/privacy; Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active;
Lawfulness of data processing
We only send you newsletters, emails and other electronic communication with promotional information (hereinafter the “newsletter”) if you have given your consent (Art. 6 (1) lit.a GDPR) or if we have a legitimate interest on doing so ((Art. 6 (1) lit.f GDPR).
Our newsletter informs you about our projects and events (e.g. conferences, workshops, discussions, presentations, etc.) and about general Women without Borders announcements. We may also send you information about our partners’ projects and events.
Double opt-in subscription
Subscribing to our newsletter employs a “double opt-in” process. This means that after registering, you will receive an email in which you are asked to confirm your registration. This confirmation prevents anyone registering using an email address that is not theirs.
Subscriptions to the newsletter are logged so we can provide evidence that the registration process meets the legal requirements. This includes storing the times of registration and confirmation as well as the IP address. In addition any data changes are protocolled by the distribution service provider.
Deletion and storage of data
In order to provide evidence of prior consent we may store your submitted email address(es) for up to tree years before we delete them with the purpose of a possible defence against claims. You have the possibility to request deletion of your data at any time, but we will ask you to confirm your prior consent. In cases where we are obliged to observe objections (e.g. blacklists) we store an email-address solely for this purpose.
Analysis and performance measurement
Our newsletters contain so-called “web beacons”. These are single-pixel gifs that with the help of our service provider allow us to analyse how our newsletters are used. When you open the newsletter, information such as IP address, the browser and your email client, as well as the time is collected.
For statistical analysis purposes, it also captures whether newsletters are opened, when they are opened, and which links are clicked. This information can be matched to individual newsletter recipients for technical purposes. We, or our service provider, do not intend to collect these informations for any other purposes than improving our understanding of our user’s reading habits and adjusting our content accordingly.
For technical reasons it is not possible to withdraw your consent from analysis data separately. In case you do not agree with our analysis and performance measurement you have to cancel your newsletter subscription.
Opt-out and cancellation
You can opt-out and cancel your newsletter subscription at any time.Each newsletter contains a link cancel the newsletter at the end that allows you to unsubscribe.
Service Provider: Mailchimp: E-Mail-Marketing-Plattform; Dienstanbieter: \”Mailchimp\” – Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA; Website: https://mailchimp.com; Datenschutzerklärung: https://mailchimp.com/legal/privacy/; Privacy Shield (Gewährleistung Datenschutzniveau bei Verarbeitung von Daten in den USA): https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.
- Social Networks
We maintain online presence within social networks to communicate with or provide our users with information about our activities.
Using social networks implies that user data can be processed outside the European Union. US Service Providers that are certified under the Privacy Shield or who offer comparable guarantees of a secure level of data protection are committed to respecting EU privacy standards.
Social networks providers usually store the data collected as user profiles which are used for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (also for non-logged-in users) for the purpose of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles. Please contact the respective social network provider to do so.
For a detailed description of the respective processing, the possibilities of contradiction (opt-out), as well as for requests for information and the assertion of data subject rights we refer to the respective privacy statements and information of the operators of the respective networks.
Privacy-protected Shariff Buttons
We use the privacy-protected Shariff buttons. “Shariff” is designed to allow more privacy on the web and to replace the usual “share” buttons on social networks. In this case, it is not the user’s browser but the server on which this online offer is located that establishes a connection with the server of the respective social media platforms and asks, e.g. the number of likes, etc. The user remains anonymous.
Social Network Providers
YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
We have included YouTube videos in our online offerings, which are stored on http://www.YouTube.com and are directly playable from our website. These are all embedded in the “Advanced Privacy Mode”, which means that data are referred to YouTube only, when when you play the videos.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data specified in §3 of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and / or customisation of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right to object to the creation of these User Profiles, and you must comply with YouTube to exercise them.
If you believe that we have not complied with this policy or your data protection rights, you have the right to file a complaint with the Austrian Data Protection Authority.
We do hope however, we hope that you’ll attempt to resolve the complaint with us first. Please contact us for more information.
Women without Borders
A – 1010 Vienna, Austria