Rainforest Alliance Privacy Policy May 2018

Transcription

1 1. Intrductin Rainfrest Alliance places a high pririty n prtecting yur privacy. This privacy plicy (the Privacy Plicy ) describes hw we handle the persnal infrmatin we cllect and prcess. The Privacy Plicy applies t the services that we prvide, as well as yur use f ur websites, mbile apps, ther nline services and anything else that links t r refers t the Privacy Plicy (ur Services ). 2. Infrmatin We Cllect and Receive We cllect and receive infrmatin abut yu in a few different ways: Infrmatin yu give us. Yu can give us infrmatin directly. Fr example: Online users When yu cntact us, fr instance by r filling ut a frm n ur website, yu may give us infrmatin such as yur name, telephne number, address, physical address, and ther demgraphic infrmatin; When yu dnate funds nline, yu give us yur billing infrmatin, which may include yur credit card data; r When yu therwise cntact us, fr instance thrugh scial media. Dnrs When yu send us a check r make a dnatin by phne, we keep a recrd f the dnatin; r When yu meet with us in persn at events r meetings, we may cllect r prcess infrmatin abut yu fr fundraising purpses. Farmers and certificatin clients Participants in the Rainfrest Alliance Sustainable Agriculture Standard certificatin scheme, the UTZ Certificatin prgram, ther certificatin prgrams r assurance prgrams, prvide data t us thrugh the auditing r review prcess, either directly r thrugh a certificatin bdy, thrugh ur traceability tls, including Marketplace, and thrugh the trademark r label apprval prcess. Others wh cntract r partner with us When yu cntract with us, receive a grant frm us, make a grant t us r participate in trainings. Page 1 f 8

2 Infrmatin we prcess abut yu may include the fllwing list f data elements: Cntact details including: yur name; hme and business addresses; addresses; phne numbers; facsimile number; instant messaging cntact; r any ther details cntained in a signature. Educatin and prfessinal qualificatins and prfessinal and emplyment infrmatin including: degrees and schling infrmatin; licenses and prfessinal memberships; ccupatin r title; and service fees r ther cmpensatin. Payment prcessing related infrmatin including: bank accunt number; taxpayer identificatin number r scial security number; digitized r electrnic signature; lcatin; and credit card infrmatin. Persnal characteristics including: age; date f birth; gender; marital status; natinality; leisure and interests; and phtgraphs, vides and audi recrdings. Other infrmatin: In additin t the abve, we may cllect further infrmatin fr specific purpses. If we apply fr a visa n yur behalf, we may cllect passprt infrmatin. If yu make a large dnatin t us, we may cnduct a criminal r backgrund check fr due diligence purpses. We may cllect infrmatin abut cnsumer prducts purchased in relatin t ur special events. We may cllect incme r salary infrmatin fr special events and fundraising purpses r fr purpses related t research and evaluatin f ur prgrams. When we publish editrial cntent abut r cnduct research and evaluatin n ur prgrams we may cllect infrmatin abut an individual s ecnmic, familial, cultural r scial identity. Infrmatin we cllect r receive when yu use ur nline services. We als cllect r receive infrmatin when yu use ur nline Services. We may cllect sme f this infrmatin using ckies, web beacns, and ther technlgies. When yu visit ur website, yu will receive a netime ckie pp up cnsent wherein yu are given the pprtunity t cnsent t the use f ckies. Shuld yu decide nt t cnsent t the use f ckies, sme functinality and Services related t yur use f ur websites, applicatins, r ther nline services may nt wrk prperly. When yu use ur websites, we may cllect infrmatin, including yur Internet Prtcl ( IP ) address (the unique address f yur cmputer which makes it pssible t recgnize yur cmputer), type f brwser, dmain names, time f access and the pages that yu visit. Page 2 f 8

3 Shuld yu cnsent t the use f ckies, depending n hw yu access and use ur Services, we may receive: Lg infrmatin. This is infrmatin that is autmatically cllected and stred when yu use ur Services r the websites and apps f ur business partners and affiliates. It may include, fr example: Infrmatin abut yur interactins with the websites, apps, and ther services yu use, the cntent yu view, the search queries yu submit, and infrmatin in ckies and similar technlgies; and Infrmatin abut hw yu access thse websites, apps, and ther services, yur brwser r perating system, yur IP address, and the website yu visited befre visiting ur Services. Device infrmatin. This is infrmatin we autmatically cllect and stre abut the device yu use when yu access ur Services. Device infrmatin includes, fr example, the type f device that yu are using, and certain device identifiers which may be unique t yur device. Lcatin infrmatin. This infrmatin can include, fr example, infrmatin abut yur lcatin derived frm yur IP address if yu are n a cmputer, r yur mbile device's mre precise gelcatin infrmatin. Mst web brwsers accept ckies autmatically, but can be cnfigured nt t d s r t ntify the user when a ckie is sent. If yu wish t disable ckies, please refer t yur brwser s help sectin. Please nte that yu may need t take additinal steps beynd changing yur brwser settings t refuse r disable ckies and similar technlgies. Ggle Analytics. We als cllect infrmatin via Ggle Analytics. The analytics features we have implemented are Ggle Analytics Demgraphics and Interest Reprting, Remarketing, and Ggle Display Netwrk Impressin Reprting. Visitrs can pt-ut f Ggle Analytics using the Ads Settings and by using the Ggle Analytics Opt-ut Brwser Add-n. Other infrmatin. We may receive additinal infrmatin abut yu that is publicly r cmmercially available and cmbine that with the infrmatin we have cllected r received abut yu in ther ways. Als, we receive infrmatin abut yu when yu chse t cnnect with scial netwrking services while using ur Services. Page 3 f 8

4 3. Hw We Use the Infrmatin We Cllect and Receive We use the infrmatin we cllect and receive fr the fllwing purpses: prcessing the infrmatin is necessary fr the perfrmance f a cntract t which yu are a party r in rder t take steps at yur request prir t entering int a cntract, r the prcessing is necessary fr the purpses f a legitimate interest, r prcessing is necessary fr cmpliance with a legal bligatin, r yu have given cnsent t the prcessing f yur persnal data fr ne r mre specific purpses. Mre specifically, we cllect and receive infrmatin fr the fllwing purpses: T prvide ur Services and t enfrce any applicable terms f service. We use the infrmatin we cllect and receive t prvide yu with the Services yu use r request, and as needed in rder t enter int r perfrm terms f service. T prvide additinal infrmatin abut Rainfrest Alliance s wrk. This infrmatin includes updates n prjects, new website features, invitatins t special events, and pprtunities t cntribute financially. Yu will have a pssibility t pt ut any time yu receive this type f infrmatin frm us. T imprve ur Services. We als use the infrmatin we cllect and receive t prvide cntent yu r ther users are likely t find relevant and engaging. We als use the infrmatin t cnduct surveys t measure yur satisfactin with ur Services, which we use t imprve ur Services. Infrmatin cllected will allw us t adjust and imprve ur websites t yur wishes and needs and t be able t prepare annymized statistics abut the use f ur websites. Using the infrmatin t imprve ur Services is in ur legitimate interest. T prvide effective advertising. Yu may receive advertising n third-party websites and apps such as Ggle AdWrds, Facebk, and Instagram. We use the infrmatin we cllect and receive t advertise and t make the advertising we prvide mre effective, which is in ur legitimate interest. Sme f the ways we d this are: Shwing yu ads based n yur nline activities, such as yur gegraphic lcatin, the languages yu speak, the keywrds that yu use n search engines, and the types f scial media cntent that yu like and/r fllw, and website cntent yu view; Limiting the number f times, yu see the same ad; and Measuring the effectiveness f the ads yu see. Page 4 f 8

5 4. Hw We Share the Infrmatin We Cllect and Receive Third Parties. We may share certain infrmatin we cllect r receive with third parties t prvide prducts and services yu have requested, when we have yur cnsent, r as described in this Privacy Plicy. We may share infrmatin with: Affiliates. The infrmatin ne Rainfrest Alliance affiliate receives can be shared amng ther Rainfrest Alliance affiliates. Business partners. We may share infrmatin with select business partners, wh may use the infrmatin, (including t prvide yu with relevant advertising in the U.S.) r t cllect and make payments fr services, dnatins r ryalties and t cnfirm audit data. Other parties in respnse t legal prcess r when necessary t prtect ur Services. We may disclse yur infrmatin t ther parties when we have a gd faith belief that: It is necessary t respnd t lawful gvernmental requests r legal prcesses (fr example, a curt rder, search warrant, r subpena); The infrmatin is relevant t a crime that has been r is being cmmitted; An emergency exists that pses a threat t yur safety r the safety f anther persn; r It is necessary t prtect the rights r prperty f the Rainfrest Alliance. In the event that the wnership f the Rainfrest Alliance r an affiliate r their assets changes as a result f a merger, acquisitin, sale f assets, r in the unlikely event f a bankruptcy, yur infrmatin may be transferred t anther cmpany. Online Training Platfrms. All infrmatin cllected r received by the Rainfrest Alliance s nline training platfrms is used t measure the impact f the platfrms. T that end, Rainfrest Alliance will prvide infrmatin such as the level f cmpletin f curses and grades earned t the participants and, in sme cases, their emplyer. In additin, the Rainfrest Alliance may share deidentified, aggregate infrmatin n the perfrmance f participants and the impact f the nline training platfrms with Rainfrest Alliance affiliates and business partners. Page 5 f 8

6 Individual Dnrs. Frm time t time, we d make the street addresses f individuals wh reside in the United States and wh dnate t the Rainfrest Alliance available t ther nt-fr-prfit rganizatins whse missins we think might als be f interest t the individual. This applies t dnrs wh give nline, thrugh the mail, r by phne. If yu d nt want us t share yur street address with ther rganizatins, please let us knw by calling us at the number prvided belw; ing us at the address prvided belw, r writing t us at the street address prvided belw. Cmpanies r Individuals that Prvide Services t the Rainfrest Alliance. Cmpanies r individuals that prvide Services t the Rainfrest Alliance r act n ur behalf may have access t infrmatin abut yu. These cmpanies are limited in their ability t use infrmatin they receive in the curse f prviding Service t us fr any purpses ther than the services fr which we have engaged them. Third Parties that Prvide Cntent, Advertising Services, r Functinality n Our Online Services. Sme f the cntent, advertising, and functinality n ur Services may be prvided by third parties that are nt affiliated with us. Such third parties include: Advertising prviders, which help us and ur advertising custmers prvide ads that are tailred t users' interests and understand hw users respnd t thse ads; and Audience-measurement cmpanies, which help us measure the verall usage f ur Services and cmpare that usage t ther nline services. Sme f these cmpanies may participate in industry-develped prgrams designed t prvide cnsumers with chices abut whether t receive targeted ads. T learn mre, please visit the websites f the Netwrk Advertising Initiative and the Digital Advertising Alliance. 5. Final remarks Our Cmmitment t Security We shall prvide apprpriate technical and rganizatinal measures t prtect yur persnal data against lss r against any frm f unlawful prcessing and shall impse such security bligatins n any data prcessr we shall enlist. Fr example, we, r ur data prcessr(s), shall use servers that have been placed in a cntrlled, secure envirnment, prtected against unauthrized access. Page 6 f 8

7 Children's Privacy Our Services are intended fr a general audience. We d nt knwingly cllect, use, r disclse persnal infrmatin frm children under the age f 16 withut prir parental cnsent, except as permitted by the Children's Online Privacy Prtectin Act. If yu are a parent wh cnsents t the cllectin f persnal infrmatin frm yur child, yu agree that yur child may use all f ur Services and that we may cllect, use, and disclse yur child's persnal infrmatin cnsistent with this Privacy Plicy. Recrds Retentin Rainfrest Alliance keeps recrds nly fr as lng as they are needed fr us t cnduct ur business and t cmply with ur legal bligatins. We adhere t ur Recrds Retentin and Management Plicy t determine which recrds shall be retained and fr hw lng. A cpy f ur Recrds Retentin and Management Plicy can be btained by cntacting Dirk Straathf at dirk.straathf@utz.rg r Mlly Stark at mstark@ra.rg. Eurpean Unin (EU) Users Crss-Brder Data Transfers. Fr data subjects whse data was cllected in the Eurpean Ecnmic Area (EEA), be advised that we may transfer yur infrmatin t third cuntries utside f the EEA, which the Eurpean Cmmissin (EC) may nt have deemed adequate fr infrmatin security purpses, including the United States. That data is transferred under adequate data transfer mechanisms, including the Mdel Clauses, which were apprved by the EC. Yu can request a cpy f the data transfer mechanisms by cntacting Dirk Straathf at dirk.straathf@utz.rg r Mlly Stark at mstark@ra.rg. If yur data was cllected r prcessed within the Eurpean Ecnmic Area (EEA), yu have the fllwing rights, subject t exceptins r requirements under current laws, including the Eurpean Unin (EU) General Data Prtectin Regulatin (GDPR): The right t withdraw cnsent t ur prcessing f yur persnal data at any time Receive a cpy f r access t yur persnal data Request a cpy f yur persnal data t be sent t a third party Restrict prcessing f yur persnal data Rectify r crrect yur persnal data Ask us t erase yur persnal data r delete it T exercise the rights utlined abve, yu can cntact us at the physical address and/r prvided belw. We will respnd within ne mnth by: 1) cmplying with yur request as sn as Page 7 f 8

8 practicable; r 2) prviding t yu an explanatin regarding ur inability t cmply with yur request based n ur legal bligatins. If yur request is cmplex, we may extend this perid by an additinal tw mnths, and yu will be infrmed abut any such extensin within the initial nemnth perid. If yu withdraw yur cnsent, we will discntinue the prcessing f yur infrmatin upn receipt f yur withdrawal. Hwever, any prcessing perfrmed prir t yur withdrawal remains a legitimate prcessing based n a valid cnsent at the time. We will nt be under the bligatin t reverse the prcessing. Dirk Straathf De Ruyterkade AA, Amsterdam THE NETHERLANDS dirk.straathf@utz.rg Tel: Fax : Furthermre, yu have the right t ldge a cmplaint with an EU supervisry authrity shuld yu feel that we have vilated any f yur rights as prvided under the GDPR. Hw t Cntact Us If yu have questins r cncerns abut this Privacy Plicy r abut Rainfrest Alliance's privacy practices in general, please cntact us at: Rainfrest Alliance 233 Bradway, 28th Flr New Yrk, NY USA (888) MY-EARTH +1 (212) develpment@ra.rg Changes t This Privacy Plicy and Additinal Infrmatin We may update this Privacy Plicy frm time t time, and s yu shuld review it peridically. If there are significant changes t Rainfrest Alliance's infrmatin practices, yu will be prvided with apprpriate nline ntice. Page 8 f 8