General Privacy Policy
The protection of your data is very important to us. We only process data on a legally compliant basis and consider it our duty to protect your data from any misuse.
Table of Contents
Objective and responsible body
Basic information on data processing
Processing of personal data
Collection of personal data
Recipients of personal data
Cookies & reach measurement
Google Analytics
User rights and deletion
1. Objective and responsible body
This Privacy Policy clarifies the nature, scope and purpose of the processing (including collection, processing, use and consent) of personal information contained in our online offering and the related websites, features and content (collectively referred to as “online offer” or “Website”).
Provider of the online offer and Controller under data protection law is CCI, Kraijenhoffstraat 137A, 1018RG Amsterdam, The Netherlands (hereinafter referred to as “provider”, “we” or “us”). For the contact possibilities please go to https://www.childhoodcancerinternational.org/contact-us .
The term “user” includes all visitors of our online offer. The terms used, such as “Users” are to be understood gender-neutral.
2. Basic information on data processing
We only process users’ personal data in compliance with the relevant data protection regulations in accordance with the requirements of data minimization and purpose limitation (see Processing Principles: EU GDPR Article 5).
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
Insofar as data transmission to third parties is necessary for the purposes listed below, we always ensure that this is done safely and in accordance with data protection regulations and in accordance with EU GDPR Article 5.
3. Processing of personal data
The personal data are processed for the following purposes:
a) For analysing the use of our website, as well as the response to our online advertisements and publications, in order to improve and secure the performance of our website and its content.
The legal basis for this processing is our legitimate interest in improving and securing the performance of our website and its content (Art 6 (1f) GDPR).
b) For responding to your messages which you send us via an online contact form. The legal basis for this processing is our legitimate interest in responding to messages (Art 6 (1f) GDPR).
c) For processing donations which you make via our website and for sending you a ‘thank you’ message.
The legal basis for this processing is that this processing is necessary so we can process your donation (Art 6 (1b) GDPR). The legal basis for sending you a ‘thank you’ message is our legitimate interest in thanking our donors, without whom we could not continue our work (Art 6 (1f) GDPR).
d) For sending you our newsletter, if you subscribe to it via our website and for analysing the impact of our newsletter.
The legal basis for sending you the newsletter is your consent to receive this newsletter (Art 6 (1a) GDPR). You can revoke this consent at any time, by either clicking the unsubscribe-link in each newsletter or by contacting us via the contact details in our imprint. In this case, you will not receive our newsletter anymore. The legal basis for analysing the impact of our newsletter is our legitimate interest in improving our newsletter and its content (Art 6 (1f) GDPR).
e) For enforcing or defending any legal claims that may arise or be raised in connection with the use of our website. The legal basis for this processing is our legitimate interest in enforcing or defending such legal claims (Art 6 (1f) GDPR).
f) For complying with recording, information and reporting obligations, as far as required by law. The legal basis for this processing is our legal obligation to comply with those legal requirements (Art 6 (1c) GDPR).
If you sign a petition on our website, we will also process your personal data, which you provide to us when signing the petition, for the following purposes:
a) Processing your signature of our petition and analysing it to prevent multiple signatures by the same person and misuse of the system. The legal basis for this processing is your consent to sign the petition (Art 6 (1a) GDPR) as well as our legitimate interest in preventing multiple signatures by the same person and misuse of the system (Art 6 (1f) GDPR).
You can revoke your consent at any time by contacting us via the contact details in our imprint. We will then delete your data and your personal data regarding your signature will not be processed anymore.
b) Displaying the first name and the first letter of the surname of the signatories, as well as their country of residence, on our website.
The legal basis for this processing is your consent to sign the petition (Art 6 (1a) GDPR). You can revoke your consent at any time by contacting us via the contact details in our imprint. We will then delete your data and your personal data regarding your signature will not be processed anymore.
c) Providing the name of the signatories to the relevant Authority, Legislator, Group or Person named in the Petition (e.g. the European Parliament).
The legal basis for this processing is your consent to sign the petition (Art 6 (1a) GDPR). You can revoke your consent at any time by contacting us via the contact details in our imprint. We will then delete your data and your personal data regarding your signature will not be processed anymore.
d) Informing out signatories about any developments regarding the petition and our services via email.
The legal basis for this processing is our legitimate interest in informing our signatories about further developments and our services via email (Art 6 (1f) GDPR). If you do not want to receive these messages, you can either unsubscribe via the unsubscribe-link in each message or by contacting us via the contact details in our imprint. In this case, you will not receive these messages anymore.
4. Collection of personal data
We collect data about every access to the server where this service is located (so-called server log files). The access data includes the name of the retrieved web page, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
We use the log data without linking it to the specific person of a user or other profiling according to the statutory provisions only for statistical evaluations for the purpose of operation, security and optimization of our online offer.
Apart from the above, we only process those data, which you provide to us.
5. Recipients of personal data
To ensure the security, availability and efficiency of our working environment, we are assisted by IT service providers, who act as data processors for us. Your personal data may be made available to these IT service providers for the purposes mentioned above.
Furthermore, your data will be transmitted to Google LLC in order to analyse the use of our website, as we use the service “Google Analytics” for analysis purposes. Google LLC may process your (anonymized) data on servers in the United States. For more information about this and about how an adequate level of data protection is ensured in the United States, please see below. For the same purpose, we may also transfer the statistical and analytical data we collect about you to other providers of analytical services.
If necessary, for the abovementioned purpose 3e (enforcing or defending any legal claims that may arise or be raised in connection with the use of our website), we may transfer your personal data to our lawyers and to courts. If necessary, for the abovementioned purpose 3f (complying with recording, information and reporting obligations, as far as required by law), and insofar as legally required, we will transfer your personal data to authorized authorities or authorized third parties.
If you submit a contact form on this website, your information might be forwarded to other associations that are part of the ICCD Campaign (CCI Europe, SIOP). If this is the case, the personal data which you provide to us when submitting the contact form, may also be passed on to these groups. These groups will only use your data insofar as this is necessary to process your request.
6. Cookies & reach measurement
Cookies are information transmitted from our web server or third-party web servers to users’ web browsers and are stored there for later retrieval. The use of cookies in the context of pseudonymous range measurement is described in this privacy policy.
We only use cookies in order to analyse the use of our website (see below for details on Google Analytics) as well as insofar as cookies are necessary for certain features of our website.
If users do not want cookies stored on their computer, they can disable the option in their browser’s system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of our website.
7. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC (“Google”). Google Analytics uses cookies. The information generated by the cookie about the use of the online offer by the users are transmitted to a Google server in the USA and processed there.
Google is certified under the EU-US Privacy Shield and therefore provides for an adequate level of data protection in the USA (Article 45 GDPR).
Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offer and internet usage. In this case, pseudonymous usage profiles of the users can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be sent to a Google server in the US and shortened there.
The IP address submitted by the user’s browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; users may also prevent data collection by Google of data which is generated by the cookie and related to their use of the online offer as well as the processing of such data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information about Google’s use of data, settings and opt-out options, please visit Google’s websites: https://www.google.com/intl/en/policies/privacy/partners (“Google’s use of your data when you use websites or our partners’ apps“), http://www.google.com/policies/technologies/ads (”Use of data for promotional purposes“), http://www.google.com/settings/ads (”Managing information provided by Google used to show you ads“) and http://www.google.com/ads/preferences (”Determine which ads Google shows you“).
8. User rights and deletion
You have the right, (i) to be informed by us, if we process your personal data and if yes, which personal data we process about you and to receive a copy of these data (Artice 15 GDPR), to require us to correct, complete or delete your personal data, in case they are incorrect or are not processed according to the applicable legal requirements (Articles 16, 17 GDPR), (iii) under certain circumstances to require us to limit the processing of your personal data (Article 18 GDPR), (iv) under certain circumstances to receive your personal data in a structured, commonly-used and machine-readable format or to transfer these data to a third party (right to data portability, Article 20 GDPR) and (v) under certain circumstances to object to the processing of your personal data (Article 21 GDPR). If you want to exercise one or some of these rights, please do not hesitate to contact us.
Furthermore, you have the right to lodge a complaint with the Data Protection Authority, if you believe that your data protection rights have been infringed. You can find the contact data of the Austrian Data Protection Authority online at www.data-protection-authority.gv.at. You can find the contact details of all other EU Data Protection Authorities online at edpb.europa.eu/about-edpb/board/members_en.
The data stored with us are deleted as soon as they are no longer necessary for their purpose and the deletion does not conflict with any statutory storage requirements. If our processing of your personal data is based solely on your consent, we will delete your personal data as soon as you revoke this consent.
Status: 02.02.2024