Stichting CollAction (“CollAction”) is the controller of the data collected and processed, as is defined in EU Regulation 2016/679 (“GDPR”). Our contact details can be found further below.
This Policy applies to our website only. It does not apply to other companies or organizations that for example advertise our website, projects or services, or to other (social) websites, networks and platforms that you can connect to through our website. We are not responsible or liable for any processing of your personal information via these (social) websites, networks and platforms. We also advise you to read their privacy and cookie policies carefully before using their websites.
Why does CollAction collect and process my Personal Information? And which Personal Information does CollAction collect and process?
We collect and process your Personal Information in order to:
- create a CollAction account for you at your request;
- sign you up for projects or enable you to start your own project at your request;
- keep in contact with you and update you on the progress of certain projects;
- advertise and promote projects, our website, activities and other services to you, for example by sending you newsletters if you opted in to receive our newsletters;
- comply with legal obligations; and
- further develop and improve our website and services.
Our processing of your Personal Information is based on one or more of the following legal grounds:
- you’ve consented to the processing of your Personal Information (Article 6 (1) sub a GDPR);
- the processing of your Personal Information is necessary for the performance of a contract between you and us or for taking any pre-contractual steps upon your request (Article 6 (1) sub b GDPR). If this Personal Information is not processed, we will not be able to execute the contract with you, i.e. provide you certain services you requested (e.g. creating an account for you);
- the processing is necessary for us to comply with a legal obligation (Article 6 (1) sub c GDPR); and/or
- the processing is necessary for the purposes of our legitimate interests, for example to detect fraud (Article 6 (1) sub f GDPR).
How long does CollAction store my Personal Information?
CollAction does not store or keep your Personal Information stored longer than necessary for the purposes for which the Personal Information was processed. Nevertheless, you have the right to change how we use/collect your Personal Information at any time (see how to opt-out further below), unless we are required to retain this Personal Information by law or to comply with our regulatory obligations.
Does CollAction share my Personal Information with third parties?
CollAction is a non-profit organization dedicated to making the world a better place with the help of individuals like you. In accordance with our mission, CollAction will not sell your Personal Information to third parties.
As a non-profit organization that uses open source, we do however have a team of volunteers located all over the world that help us in providing the best service possible. In doing so, your Personal Information may be exchanged, transferred or otherwise made available to these volunteers. Appropriate agreements will be made with these volunteers to ensure the safeguarding of your Personal Information.
Given that our volunteers are located all over the world, your Personal Information may also be transmitted to and/or made accessible to countries outside the European Economic Area, in some cases to countries that do not provide an adequate level of data protection according to the European Commission. In that case, Personal Information will only be transferred under the following conditions:
- you have explicitly consented to the proposed transfer;
- the transfer is necessary for the performance of the contract, i.e. the provision of our services; or
- the transfer is necessary for the performance of a contract concluded in your interest.
We may also release your Personal Information when we believe such release is necessary in order to comply with applicable law, enforce the website’s policies, protect CollAction’s legal rights, property, or safety, or those of third parties. Information that is not personally identifiable may also be shared publicly, for example for statistical purposes.
CollAction uses the Cloud server services of Amazon (Amazon Web Services). Therefore, your Personal Information may be transferred to and stored in servers located in the United States. Amazon Web Services is certified under the EU–US Privacy Shield, which is a framework that provides companies in the EU and the United States with a mechanism to comply with data protection requirements when transferring personal data from the EU to the United States.
Cookies are small text files that are placed on your device when you visit a website, and can have a wide range of functions. CollAction uses the following types of cookies:
Strictly necessary/ functional cookies
These are cookies that are necessary for the (basic) operation of our website, for example to keep you logged in.
Note that the settings for Google Analytics are set to a privacy friendly mode, so that your IP address is anonymized before information is shared with Google.
Social media buttons and embedded YouTube videos
We have placed ‘social media buttons’ on our website which allow you to connect to various social media platforms such as Facebook and Twitter to, for example, share a link. This is made possible by codes that are delivered by the relevant social media platforms. These codes place cookies. We are not responsible for these cookies. We encourage you to read the privacy policies of the relevant social media platforms for more information on how they treat your Personal Information.
As mentioned above, we make use of third party analytics services and have added social media buttons on our website. As a result, third party cookies may be placed on your device, including cookies for advertisement purposes. We note that we are not responsible for the placement of these cookies.
If you wish to disable the use and placement of cookies, we advise you to amend your internet browser settings. We do however note that disabling or deleting certain cookies may mean that you can no longer access or use certain features of our website or will reduce the overall functioning of our website.
For more information on how to disable the use of Google Analytics specifically, please see the following link: https://tools.google.com/dlpage/gaoptout.
How to opt-out
You may revoke any consent given to us with regard to the collection, processing and use of your Personal Information at any time for the future and also generally request that CollAction stop using and collecting your Personal Information (“opt out”).
To opt out, please submit a request to CollAction via e-mail or by post with the subject “Opt-Out request CollAction”. CollAction’s contact details can be found below. Upon receipt, verification and confirmation of your request, CollAction will process your request as soon as possible. Note that this does not automatically include opting-out from our newsletters.
To opt-out from our newsletters only, click on ‘unsubscribe from the mailing list’ at the bottom of the newsletter. This opt-out does not apply to communications that are pertinent to the services you have requested or participate in or where we are required to provide you with notifications (such as a notice of an update to our Policy).
What other rights do I have?
Subject to certain legal limitations, you can at all times submit a request to CollAction to do the following:
- gain access to your Personal Information;
- rectify or erase your Personal Information;
- restrict processing of your Personal Information or object to such processing; and
- transfer your Personal Information to another controller by sending this in a structured and standard format.
Participants also have the right to lodge a complaint against CollAction with the Dutch supervisory authority (Autoriteit Persoonsgegevens) regarding the processing of your Personal Information.
CollAction is committed to protecting your Personal Information and will take all reasonable precautions to do so. Though we can never guarantee full protection, we do regularly review our information collection, storage and processing practices to see if additional safeguarding measures should be taken.
If you have any concerns or requests, please direct these to:Stichting CollAction
Admiraal De Ruijterweg 309-4
1055 LX Amsterdam
We will respond to your request in a reasonable timeframe, and in any event within 30 days after receipt.
Changes to our Policy
We may need to amend or update our Policy from time to time. This will replace any previous Policy. Should we make any material changes to our Policy, we will notify you accordingly through the website and other places that we deem appropriate. We also encourage you to read our Policy regularly in order to stay updated.