Privacy Policy Privacy Policy Effective Date: 17 August 2018 This website (the “Website“) is operated by Global Catholic Climate Movement (the controller and responsible for your Personal Data) (“we“, “us” and/or “ our “) and has been created to accomplish our mission of implementing Catholic teaching on creation with the help of Website visitors (“you“or “your“). We respect your privacy and are committed to protecting your Personal Data. Our updated Privacy Policy outlines what information we collect about you through our Website and how it is used. We also explain how we process your Personal Data, who we share it with, how we look after it and tell you about your privacy rights and how the law protects you. TABLE OF CONTENTS General Policy Why do we collect your Personal Data? What Personal Data do we collect about you? How we collect your Personal Data How we use your Personal Data When we share your Personal Data How do we keep your Personal Data safe? What are my legal rights in respect to my Personal Data? How can I update my Personal Data? How can I unsubscribe? Updating the Privacy Policy Terms and Conditions Contact Details General Policy: Global Catholic Climate Movement has a firm commitment to internet privacy. You can visit most portions of Global Catholic Climate Movement’s websites without telling us who you are and without revealing any personally identifiable information (“Personal Data“). The only information we ordinarily collect when you visit our Website is information that cannot be used to specifically identify you (“ Non-Personal Data “), which usually includes the name of your internet service provider, the browser and type of machine you are using, the Website that referred you to us, the pages you request and the date and time you request them. Why do we collect your Personal Data? Global Catholic Climate Movement brings together people from around the world to address the challenge of climate change, protect vulnerable people and future generations, and honor our role as stewards of God’s creation. Staying in touch with our supporters and Website users at the right time, in the right way and with the right information is vital to our success and to the mobilization of our diverse team and its ability to make an impact. To this end, we collect your Personal Data for the following purposes: To communicate with you effectively and to mobilize our members (including showing you campaigns and other content that are most likely to matter to you); To keep the Global Catholic Climate Movement network thriving and effective and to extend our reach; To promote and fund our campaigns and petitions and maximize their impact; To have our voice heard with the media; To work together to encourage leaders and governments. In order to communicate with you effectively and mobilize our members, keep the Global Catholic Climate Movement network thriving and effective and extend our reach, promote and fund our campaigns and petitions and maximize their impact, have our voice heard with the media, and work together to encourage leaders and governments, we may use the personal information of all visitors of the Website to: use data analytics to improve our Website, relationships with Supporters and your experience of the Website; administer the Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data); manage our relationship with you (for example, to answer your queries, notify you about changes to our Privacy Policy). Change of purpose We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact [email protected] . If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your Personal Data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law. What Personal Data do we collect about you? We encourage you to voluntarily share your Personal Data with us, because we build a global movement to protect creation only with the support of people like you. You are not obligated to share your Personal Data with us, but if you choose not to, it could affect our ability to provide you with services or information. By voluntarily providing us with Personal Data, you are consenting to our use of it in accordance with this Privacy Policy. When we say “Personal Data” we mean any information about you from which you can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of Personal Data about you which we have grouped together as follows: Identity Data includes first name, last name, username or similar identifier, title, religious affiliation, identification number Contact Data includes email address, telephone numbers, location, country, language preference Donation Data includes details about donations from you, including the amount, currency and method of payment. We do not store your credit card information or banking details save the expiry date and the last four digits of your card number, so we can refer to it when reminding you expiry is imminent; Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website, together with information about the device(s) used; Profile Data includes your username and password, if you have created an account User Record Data includes information you have voluntarily provided about your interests, preferences, feedback, survey responses, comments, personalized messages from you, public comments submitted, and your response to any polls or surveys. We also keep records of each time you complete a campaign action, whenever you subscribed or unsubscribed to a mailing list, whether you acted in response to a mailing, social media, or through another source, details of phone calls with you, credit for sharing links (eg by “Tell A Friend” emails or social media postings), and any other information you share when you take any action with Global Catholic Climate Movement, online or otherwise; Volunteer Data includes information about whether you are interested in volunteering, and, if so, what types of activity you would like to be involved in; Usage Data includes information about how you use our website and also how you engage with our content (below under “Data relating to Updates and Email Tracking” for more information; Mailing Data includes mailings between us (including date/timestamp of mailing, content of mailing, language of mailing, topic categories); Communications Data includes your preferences in receiving communications from us and, where applicable, your opt-in to receive such communications. We may also collect: Your third-party authentication status if you visit the Website (i.e. whether you are presently logged into Facebook or other social media accounts); Data relating to Updates and Email Tracking: If you sign up to receive updates from Global Catholic Climate Movement, we will strive to provide you accurate and timely information about our campaign activities. In order to improve our engagement with our network, we may track whether the emails we send to you are being opened, and other related information such as when and whether the links they contain are being clicked, whether you sign or share petitions, and of the people you shared with who also go on to sign our petitions; Images, photographs, or video you upload to the site. We also collect from all visitors: Technical information about your use of the Website, browser type and version, and operating system Except as otherwise described in this Privacy Policy, we do not collect any Special Categories of Personal Data about you. This includes details about your race or ethnicity, sex life, sexual orientation, trade union membership, information about your health and genetic and biometric data, nor do we collect any information about criminal convictions and offences, except where the processing is required or permitted by applicable law, or we have obtained your prior explicit consent. We also collect, use and share Aggregated Data (see further below, under “How we use your Personal Data). Children This Website is not intended for or directed at children under the age of 13 (US & some EU countries) or 16 (other EU countries & elsewhere) Our policy is that we do not knowingly collect, use, or disclose Personal Data about visitors that are under these ages. If you are a parent or guardian of a minor and believe that we have collected, used, or disclosed such information, please contact us using the contact information below. If we have reason to believe that someone is underage and we have collected their Personal Data without proper consent, we will delete that information in a reasonable period of time. If you are a California resident and under the age of 18, you may request that we remove content or information that you have posted to our website by contacting us as provided below. How we collect your Personal Data We mostly collect Personal Data directly from you when you voluntarily provide such information, such as when you: join us via our Website; contact us with inquiries; sign up to a newsletter or mailing list to receive our movement dispatches; take action online (including responding to one of our surveys); registering to participate in certain projects or campaigns or to receive certain materials; signing or creating a petition; signing an open letter or a pledge; sending a message or “thank you” to others engaged on our mission); volunteer or host an event; Provide your name and email address to one of our partner organizations, on the basis that it can be shared with us; RSVP for an event; or make a donation. We also collect data from and about you through: Analytics providers (such as Google Analytics) based outside the EU. How we use your Personal Data Personal Data We only use the Personal Data you provide in a manner that is consistent with this Privacy Policy and where the law allows us to. Most commonly, we rely on the following legal grounds for the processing of your Personal Data: With your consent (e.g. to this Privacy Policy); Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; Where we need to comply with a legal or regulatory obligation. Please contact [email protected] if you need details about the specific legal ground we are relying on to process your Personal Data. If you provide Personal Data for a certain reason, we may use the Personal Data in connection with the reason for which it was provided. For example: if you “Join us” via our website, we will register you as a supporter of Global Catholic Climate Movement and email you with resources and updates; if you sign up for a campaign, to receive a resource, or to be involved in an event, we will use your Personal Data to send you updates and other information about the resource, campaign, or event; if a local leader starts a group that you join or a campaign or petition that you sign, he/she may access the Personal Data you have shared and follow up with you about local campaign updates; if you sign, share, or donate, we use your Personal Data to send you information about our work via any channels you’ve consented to (email, phone/SMS and/or social media messaging); to connect you with Global Catholic Climate Movement’s prayer events and resources, online campaigns, grassroots organizing, and public actions that we feel would be of interest to you, for example, to see if you want to get involved in particular campaigns, fundraisers and projects; to deliver relevant content to you and measure your engagement and involvement with Global Catholic Climate Movement; to process any donation made by you; to seek to re-engage you with our network. In order to communicate with you effectively and mobilize our members, keep the Global Catholic Climate Movement network thriving and effective and extend our reach, promote and fund our campaigns and petitions and maximize their impact, have our voice heard with the media, and work together to encourage leaders and governments, we may use the personal information of all visitors of the Website to: Internal research and profiling We carry out research and analysis on visitors to our Website and other supporters to determine the success of our approach, campaigns, resources, and other activities in the public interest and to help us provide you with a better experience. We may evaluate, categorise and profile your Personal Data in order to tailor communications to your needs and your preferences and to help us to understand our network. For example, we may keep track of the amount, frequency and value of your support, and may use automated systems to target email blasts. This information helps us to ensure communications are relevant, timely and in the best interest of Global Catholic Climate Movement’s mission. Aggregated Personal Data In an ongoing effort to accomplish our mission and understand Website visitors better and judge the effectiveness and growth potential of campaigns, Global Catholic Climate Movement may conduct research on its visitors’ demographics and interests based on the Personal Data and other information provided to us. This research may be compiled and analyzed on an aggregate basis, and Global Catholic Climate Movement may share this aggregate information with its partners, affiliates, and allies. Global Catholic Climate Movement may also disclose aggregated visitor statistics in order to describe the size, scope, and demographics of its network (for example, to display on campaign websites, announce on social media and provide to media sources). Aggregated Data may be derived from your Personal Data but is not considered Personal Data as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Website feature. However, if we combine or connect Aggregated Data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this Privacy Policy. Non-Personal Data We use the Non-Personal Data collected to generate statistics and measure Website activity in order to improve the quality of our Website for our visitors. Donor Privacy Policy Except as otherwise provided in this Privacy Policy, Global Catholic Climate Movement does not rent, share, sell, or trade any Personal Data from online or offline donations with any second or third party, except as required to process transactions, nor do we rent, share, sell, or trade information about what donations supporters have undertaken on our Website with any second or third party. Fundraising and Communications to promote Global Catholic Climate Movement’s work We must usually ask you to “opt-in” to receive fundraising and campaign emails from us. You have the choice as to whether you want to receive or continue to receive these messages. You may unsubscribe at any time by using the unsubscribe link within each email or by contacting us as provided below. When We Share your Personal Information Global Catholic Climate Movement is not interested in selling your Personal Data. We consider this information to be a vital part of our relationship with you. There are, however, certain circumstances in which we may share your Personal Data with certain third parties without further notice to you, as set forth below: Global Catholic Climate Movement volunteers and event hosts Global Catholic Climate Movement volunteers or event hosts may have access to your contact information, including your name, email address, telephone number, and social media account IDs, to reach out to you about a specific campaign or event. They may contact you directly or through Global Catholic Climate Movement. Global Catholic Climate Movement event attendees, chapter participants, volunteers, or those interested in events, chapters, or volunteers Members of the public who would like information about events, chapters, or volunteers may find your Personal Data, including your name, email address, language, personal comments, institutional affiliation, street address, and city, state/province, and country of residence through publicly available spreadsheets and maps on our Website. We will always ask your consent before sharing this information, and you can request to have it removed at any time by emailing [email protected] Targets of Global Catholic Climate Movement campaigns For petitions, letters to the editor, and surveys you have voluntarily signed or completed, we may pass on your name, city, state, and comments to the target. Where the target is a government body or official that requires petition signers to be constituents, we may also provide your postal code and full address. We will not otherwise make your street address publicly available, but we may transmit it to campaign targets specifically noted on the action page. Global Catholic Climate Movement Petition creators When you sign a petition created on Global Catholic Climate Movement’s Website, we provide your name, city, and country to the petition creator so they can deliver it to the campaign target (see above). Agents, Consultants and Related Third Parties Global Catholic Climate Movement sometimes hires service providers and other companies to perform certain functions on our behalf. Examples of such functions include mailing information, maintaining databases, cloud computing services, and processing payments. When we employ another company to perform a function of this nature, we take precautions to provide them only with the information that they need to perform their specific function. We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. If you are a resident of California, you may have the right to learn additional information about your personal information collected through this Site. California residents who have an established business relationship with us may request and obtain information, free of charge and on an annual basis, about personal information that we shared with other businesses for their own direct marketing use within the prior calendar year (as provided in California’s “Shine the Light Law”). If applicable, this information would include a list of the categories of personal information shared with third parties and the names and addresses of all third parties with whom we shared this information in the immediately preceding calendar year. To obtain this information, please write to us using the contact information below, with “California Shine the Light Privacy Request” in the subject line as well as in the body of your message. We will then respond to your mailing address with the requested information. Payment processors We work with Stripe to help process donations and credit card transactions and other payment methods when you donate to Global Catholic Climate Movement. These payment processors will store certain Personal Data about you. Please refer to their privacy policies to learn more about how they use and process your Personal Data. Legal Requirements We may disclose your Personal Data if required to do so by law (including without limitation any election law) or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Global Catholic Climate Movement, (iii) act in urgent circumstances to protect the personal safety of Website visitors or the public, or (iv) protect against legal liability. Business Transactions In relation to an ongoing or proposed business transaction (such as transferring the ownership and operation of GCCM), we may transfer your information to a successor or potential successor organization. If such a transfer occurs, the successor organization’s use of your information that was collected through this Website will remain subject to this Privacy Policy and the privacy preferences you have expressed to us. How do we keep your Personal Information safe? Global Catholic Climate Movement makes great efforts to protect the Personal Data provided via the Website from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have an organizational need to know. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from the Website may not be secure. Therefore, you should take special care in deciding what information you send to us via e-mail or otherwise provide through this Website. Global Catholic Climate Movement also strives to ensure, along with its payment processor, the secure collection and transmission of sensitive visitor payment information using industry accepted data collection and encryption methodologies. If you choose to make a donation to Global Catholic Climate Movement, your credit card information will be used only for transactions through our secure online payment system. If you choose to make that donation recurring, the information will be stored by our third party payment processors, and is not stored or seen by Global Catholic Climate Movement. Global Catholic Climate Movement does not sell or otherwise disclose such visitor payment information outside the organization. Do we transfer data cross border? Global Catholic Climate Movement has a global network with members and staff around the world, so your Personal Data may be transferred and stored across borders (including, for EU citizens, outside of the EEA). This is in furtherance of our aim of having a connected network and a global reach. We take reasonable steps to ensure that cross-border data transfers comply with existing data protection laws, such as the use of standard contractual clauses that bind parties to protect the privacy and security of data. However, in some cases, the transfer of data may be where the country or territory in question does not maintain adequate data protection standards. Please contact [email protected] if you want further information on the specific mechanism used by us when transferring your Personal Data out of the EEA. How long will you use my Personal Data? Both Personal Data and Non-Personal Data collected in accordance with this Privacy Policy may be stored by Global Catholic Climate Movement itself or it may be included in databases owned and maintained by our affiliates, agents or service providers. We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements. A large part of our data activities are focused on understanding our engagement efforts and finding out which supporters are the most active, and have been active for the longest period of time. This lets us know if we are providing our supporters with timely and engaging opportunities to take meaningful action on the issues they care about. We will take these considerations into account in determining the appropriate retention period, including the use and application of metrics and data tools to consider supporter engagement and to look at the trajectory of engaged supporters over time. Further details of retention periods for different aspects of your Personal Data are available by emailing [email protected] We continually review what information we hold and will delete personal data which is no longer required. What are my legal rights in respect of my Personal Data? For EU Citizens, under certain circumstances, the GDPR gives you rights in relation to your Personal Data. These are the right to: Request access to your Personal Data; Request correction of your Personal Data; Request erasure of your Personal Data (though this will not apply where it is necessary for us to continue to use the data for a lawful reason); Object to processing of your Personal Data; Request restriction of processing your Personal Data; Request transfer of your Personal Data; Receive or ask that we provide you your Personal Data in a structured, commonly used and machine readable form; Be informed of any automated decision-making processes using your Personal Data; Right to withdraw consent (where we are relying on consent to process your Personal Data). If you wish to exercise any of the rights set out above, please contact us at [email protected] How can I update my Personal Information? Please contact us at [email protected] How can I Unsubscribe? You may opt out of any communications from Global Catholic Climate Movement at any time (including unsubscribing from our email list or asking to be excluded from our online campaign promotion lists) via the unsubscribe link at the bottom of each email we send or by emailing us at [email protected] How does Global Catholic Climate Movement use cookies? Like most websites, Global Catholic Climate Movement may place a “cookie,” or small file, in the browser files of a visitor’s computer. Some cookies are used to prepopulate forms for you so that on repeat visits to the Website you don’t need to re-enter certain information. You can set your browser to disable cookies, but then you would not have the advantage of having certain sections of forms being prepopulated for you, and you may not be able to access certain parts of the Website. We may also use third-party services such as Google Analytics. This helps us understand traffic patterns and know if there are problems with our Website. We may also use embedded images in emails to track open rates for our mailings, so that we can tell which mailings appeal most to Global Catholic Climate Movement supporters. Internet browsers normally accept cookies by default. However, most browsers let you turn off either all or some third-party cookies. What you are able to do depends on which browser you are using. However, please be aware that this may impair or limit your ability to use our Website. The option to do this is usually found in the options, settings or preferences menus of your browser or mobile device. Other third parties may deliver cookies to your device in order to track your online behaviors over time and across nonaffiliated websites. You have choices about the information third parties may collect about you through this Website. You may opt out of Google Analytics cookies or opt-out of having your information sent to a third party by visiting Google’s opt-out page – https://tools.google.com/dlpage/gaoptout. Do Not Track Mechanisms Your browser may deliver a “Do-Not-Track (‘DNT’) signal,” or similar mechanism for exercising choices about the collection of information about your online activities. Because of the changing state of technology, we do not guarantee that we will honor DNT signals or similar mechanisms at this time. Updating the Privacy Policy Global Catholic Climate Movement may change its Privacy Policy from time to time. If we make any significant changes to the rules that govern this Website, or the way we use your Personal Data, we will add a prominent notice to this Website. Please review this Privacy Policy periodically, and especially before you provide any Personal Data. This Privacy Policy was last updated on the date indicated above. Your continued use of the Website after any changes are made to this Privacy Policy indicates your agreement with the terms of the changed Privacy Policy. Exclusions The Privacy Policy does not apply to any unsolicited information provided to Global Catholic Climate Movement through the Website or through any other means. This includes, but is not limited to, information posted to any public areas of the Website and any unsolicited submissions. All such information will be treated as public information. Links to Other Websites This Privacy Policy applies only to our Website. The Website may contain links to other websites, plug-ins and applications not operated or controlled by Global Catholic Climate Movement (the “Third Party Sites”). Clicking on those links or enabling those connections may allow Third Party Sites to collect or share data about you. The policies and procedures we described here do not apply to the Third Party Sites. The links from the Website do not imply that Global Catholic Climate Movement endorses or has reviewed the Third Party Sites. We encourage you to contact those sites directly for information on their privacy policies. Social Media Through the Website, you can choose to access certain social media Websites and services that are owned and controlled by third parties (e.g. Facebook and Twitter) (the “ Social Media Services ”). When you elect to access and use the Social Media Services, you will be sharing your information (which will include your Personal Data if you elect to share such information) with those Social Media Services. As with other Third Party Sites, the information that you share with the Social Media Services will be governed by the privacy policies and terms of service of the providers of such Social Media Services and not by the policies and procedures we describe here. We may use your email address and Facebook ID to participate in Facebook’s Custom Audience and Lookalike Audience programs, which enable us to display campaign promotions to both existing and prospective members when they visit. To do this, we first send a digital “fingerprint” of your email address to Facebook—we don’t send your actual email address, but instead a cryptographic piece of data that Facebook can use to find matches to email addresses in their database. If you are not a Facebook user, or if the email address you use at Global Catholic Climate Movement is not one that you use with your Facebook account, then there will be no match, and Facebook will not receive any information that they could use to identify you or target you in any way. If you are a Facebook user and your Global Catholic Climate Movement email address matches your Facebook email address, Global Catholic Climate Movement campaign promotions may then appear when you access Facebook. Facebook deletes this information (a) if it does not match with a Facebook account or (b) after they confirm you are a registered account holder. For more detailed information about how Facebook uses digital fingerprints — also known as a cryptographic hash —and your ability to opt out of this program, please see https://www.facebook.com/business/help/112061095610075 and Facebook’s data policy at https://en-gb.facebook.com/policy.php. Terms and Conditions Your access to and use of the Website is subject to the Terms of Service. Contact Details If you have any questions about our policies, your Personal Data, or data protection on this Website, you can contact us. Our full details are: Global Catholic Climate Movement [email protected] Our representative in the EU is Tomás Insua and may be contacted by email at [email protected] or by mail care of OCSIV Via S. Francesco de Sales, 18 Rome 00165 Italy. You may contact our Data Protection Officer, Anne VanDercook, by email at [email protected] or by mail at PMB 90321 700 12th St NW Suite 700 Washington, DC 20005 If you are in the EU, you have the right to make a complaint at any time to the Information Commissioner’s Office ( ICO ), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
