DanChurchAid is careful with your information when you support us in our struggle to give the World’s poor and people in need a DanChurchAid handles personal information with care when you donate to our work, volunteer in our shops, or participate in our collection activities.
The following actions usually involve processing your personal information:
- Making a one-off donation or donate a fixed amount each month
- Entering a deed of gift (a binding donation arrangement)
- Leaving a gift to DanChurchAid in your will
- Using our online shop or buy products from it
- Volunteering in a DanChurchAid charity shop or Wefood shop
- Visiting our website
- Signing up for newsletters or taking part in competitions, quizzes or similar activities
In many cases, we need to process your personal information so that we can accept your donation or enter into an agreement with you. This privacy policy explains how we protect your information and process it in accordance with the EU General Data Protection Regulation (GDPR) and other related, applicable legislation.
Who is responsible for your personal information, and how can you contact us?
DanChurchAid (legal name: Folkekirkens Nødhjælp) is the data controller for the personal information we process about you when you donate to us, buy products from our online shop, apply to volunteer with us, or otherwise have contact with us – for example, when we ask whether you might like to support our work.
We use organisational and technical measures to protect your personal information.
If you have questions about how we process your personal information, you are always welcome to contact us:
DanChurchAid (Folkekirkens Nødhjælp)
Meldahlsgade 3
DK-1613 Copenhagen V
Denmark
Email: dataprotection@dca.dk
Danish business registration number (CVR): 36980214
What personal information do we process?
When you donate or buy products from our online shop
We usually process information including:
- First and last name
- Postal address
- Mobile phone number
- Email address
- Danish civil registration number (CPR number)
- Date of birth
- Payment card details, processed through an encrypted connection by our payment provider, Nets
- Bank details, including bank name, registration number and account number, if you make a bank transfer
- Information about your donation, including the amount and what you donated to
- Information about products you have bought from our online shop
- Information from your will, including any amount or share of the total estate left to us
- Any enquiries, correspondence, claims or complaints
- Information enriched using data from our partners for data-quality and marketing purposes
- Any photographs published on the website, if you have consented to this
- Your consent, or absence of consent, to communication by email, text message, letter, telephone or social media
- Membership statistics
When you use our website
If you have consented, we process information about your activity on the website at IP-address level. You can read more in our cookie policy.
When you sign up for newsletter or take part in activities
When you sign up for newsletters or take part in competitions, events, quizzes or similar activities, we process information including:
- First and last name
- Mobile phone number
- Email address
- Information about your engagement, including the newsletter, quiz or other activity you took part in
- Any enquiries, correspondence, claims or complaints
- Your consent, or absence of consent, to communication by email, text message, letter, telephone or social media
When you volunteer with our Danish activities
When you sign up for newsletters or take part in competitions, events, quizzes or similar activities, we process information including:
- First and last name
- Mobile phone number
- Email address
- Information about your engagement, including the newsletter, quiz or other activity you took part in
- Any enquiries, correspondence, claims or complaints
- Your consent, or absence of consent, to communication by email, text message, letter, telephone or social media
When our contact centre calls you
If our contact centre calls you, we record the call and retain the recording for up to 30 days. We do this to document and monitor the quality of calls and to train our staff.
Why do we process your personal information?
We process your personal information so that we can:
- Receive, record and administer your donations
- Report your donations to the Danish Tax Authorities so that you can receive a Danish tax deduction, if you have provided a CPR or CVR number
- Administer your orders and payments and deliver products you have bought from our online shop
- Send you newsletters if you have subscribed to them
- Send you personalised newsletters based on your information and your actions, including your donations and your use of our website
- Send you marketing communications if permitted under applicable marketing act and GDPR
- Create a profile of you so that we can build the most relevant relationship with you and tailor our communications based on your information, interests and behaviour
- Manage our correspondence with you, including your enquiries and any complaints
- Prepare statistics, for example on the number of donors, age and gender distribution, and average donation amount
- Process your application to volunteer
- Train our contact-centre staff
- Improve the functionality of our website and prepare statistics about how it is used
What are our legal bases for processing your information?
Donations and online-shop purchases. We process your personal information under Article 6(1)(b) of the GDPR where processing is necessary for the performance of a contract with you or to take steps at your request before entering into an agreement.
Information about our work. We have a legitimate interest in using your personal information to tell you about our work, for example by email or telephone.
Data quality. We are required to take reasonable steps to keep your information accurate and up to date. In some cases, we therefore collect and compare your personal information with other datasets, including publicly available information.
Profiling and audience analysis. We create a profile using ordinary personal information, such as your name, date of birth, and the frequency and type of your donations. This helps us build the most relevant relationship with you and carry out audience analysis.
Volunteering and gifts in wills. When you apply to volunteer or leave a gift to us in your will, we contact you based on our legitimate interests under Article 6(1)(f) of the GDPR.
CPR numbers. We process your CPR number so that we can set up a Danish Direct Debit (Betalingsservice) agreement with you and report your donation to the Danish Tax Agency for tax-deduction purposes. Under Danish tax law, tax-deduction reports must include a CPR number.
Accounting records. The Danish Bookkeeping Act requires us to retain information about payments.
Enquiries and complaints. We process information about your enquiries or complaints because we have a legitimate interest in providing you with the best possible experience, answering your questions and establishing, exercising or defending legal claims.
Website activity. If you have consented, we process information about website traffic at IP-address level to improve the website’s functionality and prepare usage statistics.
Fundraising contact. The Danish Fundraising Act permits us to contact you to ask you to donate to our work.
For how long do we keep your personal information?
We keep your personal information for as long as there is an objective need to do so. When we decide how long to retain it, we consider factors including:
- The retention requirements in the Danish Bookkeeping Act. Accounting records will often be kept for five years plus the current financial year.
- Whether we have contacted you within the past two years. If not, we normally delete your information.
- Whether you have volunteered with us and whether it is likely that we could recruit you again in the near future.
For information about when cookies expire, please see our cookie policy.
Who do we share your information with, and where do we obtain it?
We share your information only where there is a legitimate need. We have internal procedures to ensure that only staff who need your information for their work can access it.
If you have given us your CPR number because you want a Danish tax deduction for your donations, we disclose it to the Danish Tax Authorities.
We also use external data processors and enter into data-processing agreements with them.
Transfers of personal information outside the EU/EEA
As DanCDanChurchAid operates as one overall data controller. GDPR applies to our processing of your personal information, including where that processing takes place.
As a general rule, DanChurchAid does not transfer personal information to countries outside the EU/EEA. There may be exceptions – for example, if you volunteer abroad and we need to transfer your information to one of our local offices outside the EU/EEA. In those situations, we put appropriate safeguards in place to protect your information.
How do we protect your personal information?
DanChurchAid uses internal organisational and technical measures to protect your personal information against accidental or unlawful destruction, loss or alteration; unauthorised disclosure; and unauthorised access.
What are your rights?
Under GDPR, you have a number of rights in relation to the personal information we process about you. These rights may be subject to conditions and exceptions.
- Right of access: you have the right to obtain access to your personal information.
- Right to rectification: you have the right to have inaccurate personal information corrected.
- Right to erasure: you have the right to have personal information erased where there is no longer a lawful need to process it.
- Right to object: subject to certain limitations, you have the right to object to processing, including profiling.
- Right to restriction: in certain cases, you have the right to restrict the processing of your personal information.
- Right to data portability: where processing is based on consent or a contract and is carried out by automated means, you may, subject to certain exceptions, have the right to receive your information in a portable format or have it transmitted to another controller.
If we process your personal information based on your consent, you have the right to withdraw that consent.
To exercise your rights, contact us using the details given above.
How can you complain?
You have the right to lodge a complaint about our processing of your personal information with the Danish Data Protection Agency:
The Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35
DK-2500 Valby
Denmark
Email: dt@datatilsynet.dk
Telephone: +45 33 19 32 00
Visit the Danish Data Protection Agency website
If you live or work in another EU/EEA country, you may also have the right to complain to the data protection supervisory authority in that country.