Privacy Notice

This Privacy Notice refers to your relationship with Yinactions.earth only and details why we collect your data, what data we collect, how we protect it and your rights.

Your personal data (such as your name and contact details, known as ‘personal data’) is protected by specific legislation:

– In the following also referred to as “Applicable Data Protection Laws” –

The laws in this area continue to develop quickly. We take our responsibilities around data very seriously, and it’s important to us that you understand how and why we ask for and work with your details. Your privacy is important to us, and we have policies to ensure that we collect only the data that we need to carry out the work that we do, and that we don’t keep it any longer than we need to. This policy explains how we collect, manage, use and protect your personal data, including how we work with third parties. We never sell or swap your details with any other organisation for their marketing purposes.

About Us

The information that we collect, how it is collected and used.

To comply with Applicable Data Protection Laws, we will always ensure we have legal justification for processing (e.g. collecting and using) your personal data. We will collect personal data about you in a number of ways:

  • Where you have provided your consent to allow us to use your data in a certain way;
  • When you support us by:
    • Signing one of our petitions
    • Signing up to make a donation to Yinactions.earth
    • Engaging with our social media and digital advertising
    • Joining our volunteer and activist communities
  • When you visit our website
  • When you contact us via info@yinactions.earth

To comply with data protection rules, we will always ensure we have legal justification for collecting and using your personal information.

The legal justification (also called “legal basis”) that we rely on will depend upon the circumstances in which we process your personal data. Our processing of your personal data will fall into one of the following categories:

  • Where you have provided your consent to allow us to use your data in a certain way.
  • Where it is necessary for us to process your data to comply with a legal obligation.
  • It is in our legitimate interests, for example, to contact you to raise funds and achieve our campaign objectives. Where we rely on a legitimate interest to use your information, we will always ensure that this is done in a way so as not to be intrusive or cause distress, and that respects your rights by conducting a Legitimate Interest Assessment beforehand.
  • Where it is necessary for us to process your data to carry out the performance of a contract with you.

Where a legal basis is relevant which is not listed here, we will expressly refer to it at the appropriate section in this Privacy Notice.

People Who Support Us

There are a number of ways that we collect information; most often this will be directly from you, for example, if we are collecting data on our field visits, if you fill out a form on our website, or directly with one of our fundraisers. Whenever we ask for information from you, we will explain why we are asking for it (including by reference to this policy), and you will always be given a choice about how we communicate with you.

In some very specific circumstances, we will gather data from publicly available sources. We use data from third parties to keep our records up to date, (from within the Federation) or to enhance the information that we hold.

We do not buy lists of data to use for our marketing purposes or share data with other charities for them to use for their marketing purposes.

How we collect your data

Yinactions.earth obtains personal data from you when you support a campaign, engage with our social media and digital advertising, or make a donation.

In most circumstances, we will only ask for your name and contact details (plus payment details if you are joining or donating). Sometimes we may ask for additional information where it may either help us in our campaigns or help us keep our communications relevant to you. We may occasionally supplement your data with other publicly and commercially available information where it meets Applicable Data Protection standards. We may store relevant information about you that you voluntarily share with us.

We will only collect sensitive personal data where absolutely necessary and with your explicit consent.

Video Call Recording

Yinactions.earth provides a video call recording feature that may capture and store audio and video data from your device during online meetings or classes. While participating in a video call, you are allowed to view, share, and interact with other users from the same educational institution.

When the recording function is activated, you will receive a notification. If you do not consent to the recording of personal data such as your voice or video, you have the option to leave the meeting or consult your designated educational officer to take appropriate action.

Your video call recordings will only be accessible to your assigned instructor and the internal ActionAid Organization. Additionally, we support data deletion requests following a mutual agreement.

For details terms and agreement, please refer to Big Blue Button official guide.

How we use your data

Yinactions.earth uses supporters’ personal data in a variety of ways, including:

  • Providing you with information or products that you have requested from us.
  • Providing you with information that is relevant to your interests.
  • Making enquiries or informing you about your interactions with us (e.g., resolving issues with Direct Debits or informing you of changes to events).
  • Responding to any complaints from you.
  • Offering you ways to fund our work.
  • Inviting you to campaign with us.
  • Keeping you updated on our campaigning work.
  • Informing you of volunteering opportunities.
  • Inviting you to participate in surveys or research.
  • Reviewing records such as for financial audits.
  • Compliance with applicable statutory retention periods (e.g., resulting from tax laws).
  • Monitoring your information to prevent fraud.
  • Working with authorities in cases of fraud or criminal investigations.
  • Establishing or exercising our legal rights or defending against legal claims.

Where a purpose for processing is relevant which is not listed here, we will expressly refer to it at the appropriate section in this Privacy Notice.

How your data is kept secure

What Yinactions.earth does to keep your data secure

Yinactions.earth uses industry-standard tools to safeguard the confidentiality of your personal data. We make every effort to protect against the loss, misuse, and alteration of the information under our control. Yinactions.earth takes data security seriously and employs a combination of organizational and technological security measures to protect your personal data to the highest possible standards. This includes the use of secure servers, firewalls, virus & malware protection, secure socket layer (SSL) encryption, and secure file transfer protocol for our work with third parties.

Access to all Yinactions.earth data is protected by complex passwords, including letters, numbers, and characters, and in some cases, more than one method of authentication is used. We ensure that only staff who need to access your personal data can do so. Any member of our staff who has access to your personal data undergoes training to ensure they understand the importance of keeping your information safe and secure at all times.

The connection between your web browser and the server is secure if your web browser displays a small padlock or key symbol somewhere in the frame, or the address bar shows a web address beginning with https:// (rather than http://).

We strive to keep all supporter data inside the European Economic Area (EEA) and ensure that whenever data is transferred outside the EEA, appropriate safeguards on data security and processing are applied.

Who has access to your data?

Within Yinactions.earth

Within Yinactions.earth, only authorized personnel who are tasked with processing your data can access it. We rigorously control access to ensure that our staff and volunteers can only see the data necessary for performing their duties. Our staff undergo regular training to understand the requirements of Applicable Data Protection Laws and their responsibilities in keeping your data secure. We continuously update our data awareness training to remain current.

We also ensure that volunteers receive appropriate training on data awareness and protection when they handle data, such as collecting petition signatures at events.

Working with Third Parties

We never sell or swap your details with other organizations. However, we do engage trusted companies such as fundraising agencies, fulfillment houses, and software platform providers to administer certain activities. These third parties use your details solely for the intended purpose, such as mailing Connect magazine using your name and address. We always establish appropriate contracts with these service providers to safeguard your data.

Where feasible, we transfer your personal data to service providers acting as data processors who process your data solely on our behalf and in accordance with our instructions. Additionally, we may transfer your data to the following categories of third parties: fundraising agencies, consultants (auditors, lawyers), governmental authorities, and courts.

Data Retention

Data collected by Yinactions.earth will be retained only for an appropriate length of time; we have a data retention policy which sets out how long we will keep information according to the type of record. In some cases, the retention periods are governed by law, while in others we are guided by best practice and our operational needs.

When we no longer need to retain your personal data, we will ensure it is securely disposed of. You have the right to ask us to delete personal data we hold about you in some circumstances, for example, if we are processing the data on the basis of consent and you wish to withdraw that consent.

Understanding your rights

It is important that you understand your legal rights around your personal data and how we may use it. If you would like to discuss or exercise any of these rights, please do get in touch with our Data Protection Team using the contact details at the end of this notice.

Right of access

You have a right to ask for a copy of the information we hold about you, which we will supply to you within one month. We will ask for proof of identity and may charge a fee should any request be unusually complex or time-consuming. If you would like to request a copy of the personal information Yinactions.earth holds on you, please contact our DPO.

Right to withdraw consent

Where the processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to rectification

You have the right to request correction of personal data related to you that is inaccurate and/or completion of such data which is incomplete.

Right to erasure

You have the right to request the deletion of your personal data in certain circumstances, including where (i) it is no longer necessary in relation to the purposes for which it was collected or otherwise processed, (ii) you objected to the processing and there are no overriding legitimate interests for processing, (iii) your personal data has been unlawfully processed or (iv) your personal data has to be erased for compliance with a legal obligation to which Yinactions.earth is subject. You should know that there are some circumstances where we may need to keep your details nonetheless, for example, if it is necessary to comply with a legal obligation to which we are subject or for the establishment, exercise or defense of legal claims. If this situation occurs, then we will explain and discuss these circumstances with you.

Restriction of processing

You have the right to restrict our processing of your data if there is disagreement about its accuracy or legitimate usage.

Right to not be subject to a decision based solely on automated processing

You have rights to avoid being subject to decisions based solely on automated processing (including profiling) which has a significant effect on you. At Yinactions.earth we do not carry out any such processing.

Right to data portability

You have the right to receive personal data concerning you in a structured, commonly used machine-readable format and transmit those data to another controller without hindrance from Yinactions.earth, where the processing is based on consent or a contract and the processing is carried out by automated means; you may also request to have your personal data transmitted directly to another controller where this is technically feasible.

You also have the right to lodge a complaint with a supervisory authority, in the Member State of your habitual residence, place of work or place of an alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Right to Object

You have the right to object, on grounds relating to your situation, at any time to the processing of personal data concerning you which is based on the legitimate interests of Yinactions.earth or third parties.

We then will no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defence of legal claims.

You should know that there are some circumstances where these rights may not apply, but where this is the case, we will always explain this to you. Please do contact us if you have any questions or concerns on how we collect and use your personal data, or on your rights, as we are always happy to speak to you.

Where We Keep Your Information and When It Might Be Transferred Outside of Europe

Yinactions.earth is aware that countries outside of the European Economic Area have differing standards of data privacy. You also need to be aware that we work with members in the federation that are located outside the EEA and your data may be shared with them under certain circumstances.

There is an inter-group data transfer agreement that has been signed by the members of the federation that governs data sharing across the federation.

Some countries (but not every country in which we work) have been determined by the European Commission to have “adequate” standards of data protection compliance. Organisations we work with who process data in the USA have verified that their data processing standards meet the standards in the EU-US Privacy Shield, which sets out clear safeguards and transparency responsibilities for US-based organisations processing data from EU citizens, or that they otherwise have proper safeguards in place.

Your data may leave the European Economic Area if you travel with us, for example by signing up to one of our first-hand experiences, or volunteering trips. This will only be information specifically related to your trip, for example to book your travel, or to arrange your visit to one of our sites with our overseas colleagues.

How Yinactions.earth Protects Children’s Privacy

The safety of children is very important to us. If you are aged under 16 and would like to support or get involved with Yinactions.earth, please make sure you have your parent/guardian’s permission before sharing any personal data with us.

All applicable laws are followed with respect to data collection from children. Where we have date of birth information, we will not share data collected from children with any third parties at any time under any circumstances.

People in Vulnerable Circumstances

Yinactions.earth recognises the importance of protecting people in vulnerable circumstances. We do have in place strict SHEA and Safeguarding policies which support our staff and volunteers to safeguard the privacy of people in vulnerable circumstances.

Do We Disclose Your Personal Information?

No. We do not collect any of Your personal information to provide You with the Website, and therefore We do not pass your personal information on to third parties. Our website is purely a portal to inform You about AAI's activity.

How to Find Out More or Make a Complaint

Yinactions.earth operates in accordance with all relevant GDPR legislation. If you would like to find out more about these laws and how you could be affected beyond this policy, more information can be found here.

If you have any specific questions about how Yinactions.earth processes your data which are not answered here or you would like to make a complaint about how we have managed your data then please either write, call or email us via email at Yinactions.earth.

Changes to This Notice

From time to time, we may make changes to this Notice, and you will always be able to see here when it was last updated. If we make significant changes, such as in how or why we process your personal data, we will also publicise these changes on our website or may contact you directly with more information.

Please do revisit this notice each time you consider giving your personal data to Yinactions.earth.

© 2023 AFV. All rights reserved.