Confidentiality and security are paramount values for ENCOD and, consequently, we are committed to always ensuring your privacy and not to collect unnecessary information. In this Privacy Policy we share all the information about the personal data we collect. You can learn:
We are the European Coalition for Just and Effective Drug Policies (ENCOD), a non-profit organization, registered under Austrian law with registration number ZVR 138171747 with offices at Wohlmutstraße 4/EG, 1020 Vienna, Austria, hereinafter “ENCOD”, “we”, “us” or “Data Controllers”.
For the purposes of the data protection laws of the European Union, in particular the General Data Protection Regulation (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC), the European Coalition for Just and Effective Drug Policies (ENCOD) is responsible for all the data processing. Strategic decisions regarding the purposes and means of the processing of personal data collected through our website are always taken by our team.
ENCOD collects personal data directly from people who join ENCOD community by visiting this website, subscribing to our email newsletter, contacting us through the contact form and attending our events. We also collect your personal data when you donate or partner with us.
You may also give us information indirectly when you contribute to ENCOD through fundraising sites, when you visit and browse our website or when you access ENCOD social media channels, such as Facebook, Twitter, or YouTube.
ENCOD may also obtain publicly available data on individuals who may be interested in supporting organizations such as ours. This information may include newspaper or other media coverage and open postings on social media sites.
There are several reasons why we collect and process personal data from people who sympathize with ENCOD, make donations to us, or use ENCOD services among other people:
We only collect personal data relevant to the type of transactions you conduct with ENCOD. ENCOD does not intend to collect personal data from persons under the age of 18. Persons under the age of 18 should never provide personal information on this website and may not make donations on this website without parental consent.
ENCOD will never sell, lease, or trade the information we collect from you, either on or off the Internet.
Here we explain in detail the personal information we process:
If you visit our website, we may obtain, collect, and process your personal data for the following purposes:
We obtain, collect, and process this personal information based on our legitimate interest to ensure that the website runs smoothly and to analyze what content is of most interest to our visitors. This helps us to keep the website available and to improve your experience when you visit it.
If you visit our social media profiles (Facebook, Twitter YouTube, Instagram, Telegram or LinkedIn, among others), we may obtain, collect, and process your personal data publicly available on the website for the following purposes:
We have access to and process public information about our users such as your contact information and name. We only use this data within the social media platform itself. We do not transfer your personal data to any other data processing system or database.
We use this data to monitor and improve all our communications on social media and on our website. Our legal basis for doing so is our legitimate interest. When you join our page, you give us your consent to process the personal data that you publish in your profile.
You can review the specific social media channel privacy policies, as well as configure your settings to ensure your privacy.
If you have joined ENCOD Community by signing up to receive our newsletter, we will always collect your email address.
We will use this information to keep you informed. We will send you our general newsletter, communications about our activities, and information about our fundraising campaigns.
All your data is stored in our Customer Relationship Management system (CRM) including details of our email correspondence.
Our CRM is hosted with appropriate security measures and is only accessible to staff with individual login credentials secured with passwords.
This data is shared with a third party email service provider who sends the newsletter on our behalf. The services of the processing companies we use comply with the requirements of the GDPR.
We will process the data provided because you have given us your consent. You will be given the option to remove your email from our email list and/or update your preferences at the end of each email update.
If you interact with us by email, through our contact forms, by telephone, or in person, we may also collect and process information about the date, time and method of contact, details about donations you make to us, events, or activities you sign up for or attend and any other information you provide us with.
If you contact ENCOD regarding a job or volunteer position and send us your CV, we will include your personal and curricular data in our databases to manage your request. We might use your data in future recruitment processes.
The legal base for processing this data is to respond to your requests for information, manage the recruitment processes, and respond to your doubts or queries.
We will process your personal data because we have your consent.
If you donate we will collect and process data relating to the financial transaction.
When you donate within the EU, in addition to collecting your first and last name, email address, mailing address, and credit card information, we will also ask for your tax identification number.
We will use your data to process payments and keep a record of your donation. Our legitimacy for the processing of your personal data is based on your consent and our legal obligations established by applicable tax regulations.
We will share your donation data with the tax authorities to comply with our legal obligations regarding charitable donations and prevention of money laundering and terrorism financing.
ENCOD uses secure payment processors to process donations and store payment information. These processors comply with EU data protection regulations and standards. You can view their privacy and security policies on their respective websites.
If you make a donation through a fundraising site, the service provider might share your details with us. We use this data to keep a record of your donation. The legal basis for this processing is your consent or a contractual obligation, depending on the platform. We encourage you to read their privacy policies when donating.
ENCOD will only use your data within ENCOD for the purposes for which it was collected. ENCOD will never sell, lease, or trade this information to third parties.
We may need to share data with service providers or other organizations that help us run our projects and store and manage the data. In all cases, ENCOD will remain the controller of your data and the service providers will be the data processors acting only on our instructions. We sign agreements with all the organizations and professionals we share data with to ensure that they comply with applicable data regulations. These partners or service providers may never use your data for their own commercial purposes or disclose it to third parties without our consent.
ENCOD reserves the right to disclose your personal data to third parties, organizations, or public authorities if necessary to comply with our legal obligation (e.g., to inform tax authorities about your donation) or to enforce or apply any other agreement or to protect the rights, property or safety of ENCOD, visitors, subscribers to our newsletters, donors or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction purposes.
Some of our suppliers (data processors) are based outside the European Economic Area, so we may transfer your personal data to third countries. We always ensure that these transfers comply with the requirements of the GDPR. You give us your consent to transfer this data.
ENCOD has a legitimate interest in processing anonymized and pseudo-anonymized data of individuals who use its website, those who access our services, or who are part of the ENCOD community.
We process this data to ensure that our programs, services, and initiatives have a greater impact and for research purposes.
Occasionally, we might share this information with organizations and institutions with which we partner for research purposes. In any case, we will ensure that our partners abide by the same security and privacy standards as ENCOD and in no case attempt to re-identify the persons concerned.
We will only retain the information we collect about you for as long as it is necessary for the purposes set out above, or as needed to comply with our legal obligations.
The period for which we retain your data will vary depending on the type of information and the purposes for which we process it. In general, we will retain our records for up to 6 years after your relationship with ENCOD has ended, to comply with our legal obligations. When we no longer need to use your personal data, it will be deleted from our systems and records or anonymized so that we can no longer identify you.
Under the GDPR you have the following rights:
You may contact ENCOD (see contact details in this policy) if you wish to assert any of these rights. We will comply with our legal obligations regarding your rights as a data subject.
Any request for access to your personal data must be made in writing, we will endeavor to respond to you within a reasonable period and, in any event, within one month (or such other period as we may immediately communicate to you in the case of complex or numerous requests). We reserve the right to charge a reasonable fee (reflecting the costs of providing the information) or to refuse to respond when requests are manifestly unfounded or excessive: in this case, we will explain the situation to you and inform you of your rights.
Our aim is to ensure that the information we hold about you is accurate at all times. To help us keep your information up to date, you will need to tell us about any changes to your personal data. Upon your request, we will take reasonable steps to ensure that the data is accurate and will rectify any inaccurate personal data promptly and in any event within one month of your request.
No automated decisions are made. We do not use any profiling system or tool to process your data.
We ensure that appropriate technical, physical, electronic, and administrative security measures are in place to protect your personal data from unauthorized access. We follow industry-accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. Unfortunately, the transmission of information via the Internet (including e-mail) is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data shared via our website, platform, or e-mail; you assume the risk of such transmission. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.
The rules governing privacy and e-commerce change frequently. Therefore, ENCOD reserves the right to update this Privacy Policy from time to time to reflect changes in regulations and our privacy practices generally. We encourage you to periodically review this Privacy Policy. If changes are significant, we will notify you by prominently posting a notice on our website.
Our website or social media channels may contain links to other sites, including social media buttons. While we try to include only links to websites that share our high standards and respect for privacy, we are not responsible for the content, security or privacy practices employed by other websites. Sharing an external link does not constitute an endorsement of their website or the contents provided in them. Once you access another website from our website, you are subject to the terms and conditions of that website, including, but not limited to, its Internet privacy policy and practices. Please review these policies before submitting data to these websites.