Personal Data Protection
GDPR – European Wildlife privacy policy
I. General information and definition of rights
Information about organisation (data controller):
European Wildlife
Šultysova 170
284 01 Kutná Hora
Czech Republic
European Union
Company ID No.: 28434498
Email: gdpr@eurowildlife.org
(Hereinafter referred to as the “controller”, the “organisation” or “European Wildlife”.)
Our organisation complies with the statutory obligations concerning personal data protection, especially based on Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (GDPR). Appropriate technical and organisational measures are in place in our organisation to ensure that we adequately protect personal data. We maintain maximum privacy, assessing on a case-by-case basis whether the processing of data in a given situation is necessary and whether or not it unreasonably infringes upon rights and freedoms.
Transfer of personal data
Personal data processed in our organisation are not provided to any unauthorised person and we do not transfer them to other entities without informing you of this fact. General information on transfers is described below. Before transferring your personal data, we always carefully evaluate all circumstances to ensure that their protection is appropriate.
Request
The data you provided in our request may be provided to third parties so as to fulfil the legal intention of the request.
Marketing
We process personal data for the purpose of direct marketing, i.e. contacting others with an offer of services by email, post or phone. You can object to this at any time, and your data will no longer be processed. Each of our emails provide the option to unsubscribe from receiving email messages, or you can contact us directly using the email address gdpr@eurowildlife.org. More detailed information about what data we process for direct marketing purposes can be found below.
Right to information
You have the right to ask our organisation for information concerning what personal data we process, to what extent and for what purpose and whether there are other recipients or categories of recipients of such personal data. We will provide you this information free of charge no later than within 30 days, or in exceptional cases within 90 days, about which we would inform you.
If you require information about what data we record about you, we must first verify that you are the person to whom this particular information pertains. As such, in your request please provide sufficient identification details about you to make it clear who is requesting the information.
It is our right to reject requests for information that are unreasonable or unnecessarily repetitive, or if obtaining such information would require inordinate effort or would otherwise be exceptionally difficult (such as acquiring data from backup systems, archives, etc.).
Data update, right to rectification
As personal data may change over time (for example, there may be a change in the surname, place of residence or email address), we will appreciate notification of any change in your data. This requirement is related to your right to rectification of the data we record. If you find out that the data in our possession are not up-to-date, you have the right to request that they be rectified. It may also happen that we ask you for updates ourselves.
Objections
If you believe that your personal data are not being processed in keeping with applicable legislation, you have the right to raise an objection and, subsequently, we will verify the legitimacy of your request. You also have the right to submit your objection to the competent supervisory Personal Data Protection Office at the address:
Personal Data Protection Office
Pplk. Sochora 27
170 00 Prague 7
http://www.uoou.cz/
Right to erasure
Even after consenting to the processing of your personal data, you have the right to withdraw it at any time. In this case, we will delete the data that we process solely based on your consent. The right to erasure does not apply to data processed under a contract, data processed for legal reasons, or if our organisation has legitimate interests in continuing to process such data. In this case, however, we will continue to process your personal data to the minimum necessary extent.
Under applicable legislation, we also have further rights not set forth in this document. To examine your rights in more detail, you can use information materials of the European Commission such as the publication It’s Your Data – Take Control. Or you can read materials published by competent national authorities.
II. The categories of subjects whose personal data we process
Our organisation processes the personal data of several categories of subjects. The following part describes the extent, purpose, and legal basis for processing, an overview of recipients of such data as well as time limits within which we process the personal data.
Employees of the organisation and job applicants
We process the personal data of employees to the extent required by statutory obligations. The purpose of the processing is to render the performance under the employment contract, perform statutory obligations related to employee and salary administration, promote the organisation and perform the obligations arising from the conditions of grant, subsidy and other similar programmes. The legal basis for such processing is a statutory obligation and performance under the contract. Furthermore, statutory obligations define circles of authorised persons to whom personal data are transferred, i.e. competent authorities and institutions. Upon agreement, some contact details of employees may be made public on the websites or in other communication materials of the organisation or projects that the organisation organises. This occurs mainly in cases where it follows from the particular position of the employee in the organisation. The personal data of employees are deleted or archived based on the applicable time limits and to the appropriate extent pursuant to the requirements arising from domestic legislation.
We process the personal data of job applicants to the extent of a standard CV in order to prepare and organise procedures to select employees for the organisation. The legal basis for their processing is the consent provided by the applicant. The personal data of job applicants are not disclosed to anyone, and we keep them to inform the applicant, as appropriate, if the organisation announces a selection procedure for a position similar to the one the applicant was interested in. Consent to the processing of personal data of a job applicant can be withdrawn at any time by sending an email to gdpr@eurowildlife.org; if the withdrawal of the consent takes place before the end of the selection procedure, the applicant will be withdrawn from this procedure.
Donors
We process the personal data of donors to the extent of basic personal and contact details, in accordance with the donation agreement in question. The purpose of processing the personal data of donors is performance under the donation agreement, including the sending of rewards from a public fund-raising campaign (online shop), communication with donors about the use of their donations and activities of the organisation, and the further fostering of the relationship with the donor. Another purpose is direct marketing. The legal basis for processing the personal data of donors is performance under the donation agreement or, where applicable, consent to the processing of personal data given in the donor’s form, letter, email or other communication tool. The personal data of donors are disclosed only to processors – subcontractors of communication services, for example, to send out electronic or written messages, to administrators of the organisation’s information systems to ensure that they operate and develop appropriately. The personal data of donors will be deleted five years (at the end of the calendar year) following the donor’s last financial transaction if the donor does not express interest in receiving information messages (in which case they will be transferred into the appropriate category), or after the withdrawal of their consent.
Volunteers and event participants
We process the personal data of volunteers and event participants to the extent to which they are provided to us when registering using the volunteer form, registration and other similar forms or communication means. The purpose of processing is organising the work of volunteers, keeping records of them and informing them about the possibility of volunteering for European Wildlife, organising events held by European Wildlife, informing them about other activities, and fund-raising communication to obtain donors. Direct marketing may also be the purpose.
The legal basis for processing is performance under the volunteer agreement, the performance of statutory obligations such as the registration and notification duty towards authorities or the administrators of grant and similar programmes, consent to the processing on the volunteer’s or event participant’s part, or situations in which processing is necessary to fulfil the legitimate interests of the controller.
The legitimate interests of European Wildlife are to provide volunteers and event participants with information about its activities and the range of its services and the possibility to financially support the organisation, organise volunteering and events associated with the activities of European Wildlife, including ensuring safety for participants in the activities. If a person requests that emails no longer be sent to them, the person will no longer be sent information through the mailing list.
The personal data are transferred to recipients (authorities) based on the controller’s statutory obligations, to recipients – administrators of grant and similar programmes where the rules of the programmes require so, as well as to natural and legal persons – organisers of events and activities for which volunteers or participants register via the controller or in which they will take part. The personal data are also disclosed to processors – subcontractors of communication services, for example, to send out electronic or written messages, to administrators of the organisation’s information systems to ensure that they operate and develop appropriately.
The personal data on volunteers will be deleted five years (by the end of the calendar year) after the person stops being a volunteer in the organisation, or at any time at the volunteer’s request. The personal data about event participants will be deleted five years (by the end of the calendar year) after the participant’s last participation in an event or following the period that was stated in the text of the consent, or based on withdrawal of the consent to the processing if the processing was carried out based on consent.
Subscribers to information messages and email newsletters
We process the personal data of persons who receive information email messages, including e-books and newsletters from us to the extent that includes the name, email address, residence or phone number, if subscribers provided their phone number to us. We process information in order to send information and advertising messages about the activities of the organisation, including invitations to events and fund-raising communication to obtain donors, in order to send information messages about general events in fields that are connected to the organisation’s activities and recipients of the messages have been interested in such information in the past. The purpose may also be direct marketing, including the display of advertising messages based on the automated processing of personal data by advertising systems.
The primary legal basis for processing is consent to the processing and performance under the contract. In certain cases, processing is also necessary to fulfil the legitimate interests of the organisation. The legitimate interest is to provide persons who have been interested in information about the organisation’s activities and the range of its services in the past with such information and offers that are relevant for the persons concerned, in the form of information emails, SMS and postal consignments being sent, and advertising messages being displayed or phone calls being made. If a person requests that emails no longer be sent to them, the person will no longer receive information through the mailing list and the processing of personal data is terminated. To disable advertising messages displayed in advertising systems based on your email address, you can write to gdpr@eurowildlife.org and you will no longer have such advertising messages displayed.
The personal data are only disclosed to processors – subcontractors of communication services, for example, to send out electronic or written messages, to administrators of the organisation’s information systems to ensure that they operate and develop appropriately, and to operators of advertising systems in order to display targeted advertisements and information messages.
Personal data are processed until consent is withdrawn or five years after the end of the particular purpose of sending, e.g. campaign or project, if European Wildlife does not continue in another project with a focus similar to the original purpose.
III. – Information concerning privacy on the internet
Website
If you visit and browse our website, we process protocol files (logs) and store them on our servers. We store the following information:
- Your IP address
- Page displayed on our website
- HTTP response code
- Your browser identification
We process this information in an automated manner as part of operating the internet server to ensure trouble-free running of the server.
The website of European Wildlife means any content that is obtained from content available in domains owned by European Wildlife.
Cookies
When you visit our website, note that we use technology to collect and store information by means of cookies on your device. Cookies are small text files without which we cannot ensure the full functionality of the website.
Our website may also contain third-party codes such as the codes of Google, Facebook and others that may use cookies tracking your activities on the internet. Third-party cookies are governed by a different privacy policy than this website. You can disable these “tracking” cookies in the settings of your internet browser.
Posts on this website may contain embedded content (for example, videos, images, articles, etc). Embedded content from other websites behaves in the same way as if the visitor visited another website.
These websites may collect data about you, use cookies, insert further tracking from third parties and track your interactions with the embedded content, including the tracking of your interactions with the embedded content if you have an account and have logged in to the given website.
