IN GENERAL

The www.lundadonate.org website promotes the online, integrated microdonation fundraising platform of Estratos Digital GmbH (“the Company). The Company’s goal is to promote its services and reach out to future customers, clients and wider public.

This privacy policy ("Privacy Policy") explains how the Company collects, processes and protects your personal data when you use Lundadonate's website (www.lundadonate.org). The use of our web page and the services provided to the visitor on the site lundadonate.org owned by the Company, require your agreement with the Privacy Policy of this site. Therefore, the visitor must carefully read the contents of this page before using the services of our website.

This Privacy Policy is relevant only in the context of the visitors of our public webpage, and the client related, sales and promotion oriented communication of the Company, and not relevant for those data subjects who may use Lunda as a donation platform for donations to the clients of the Company. (The relevant privacy policies for these latter cases of data processing and data controlling shall be found on the actual donation pages of the Clients of the Company.)

The Company may update this Privacy Policy from time to time, therefore, the Company encourages you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

 

DATA CONTROLLER

Name of data controller: Estratos Digital GmbH

Address: Sommerhaidenweg 98, 1190 Vienna, Austria

Company registration number: FN 544761 w

 

THE LEGAL BASIS OF DATA COLLECTION

The Company uses Personal Data on the following basis:

• for the purposes of the Company’s legitimate interests related to the business relationships between the Company and the Data Subjects (Article 6(f) of the GDPR);

• for the performance of a contract between the Company and the Data Subject (Article 6.1(b) of the GDPR);

• to comply with legal obligations applicable to the Company (Article 6(c) of the GDPR, such as corporate and accounting.

 

 

COLLECTION OF PERSONAL DATA

The Company may collect two types of information from you, depending on your interaction with us.

The first type of information collected by the Company is non-identifiable and depersonalized information (“Depersonalized Data”). The Company is not aware of the identity of the individual from whom it collects Depersonalized Data. Data gathered consists of technical information, and may contain, among other things, cookie information, the type of operating system and type of browser, type of device, your action in the website (such as session duration).

The second type of data the Company may collect requires the explicit, voluntary, digitally documented consent of the data subject that is provided to us by the data subject by the completion of the sign-up form and request-a-demo form published on www.lundadonate.org. The Company collects personal data only when the data subjects voluntarily contact and or message the Company via any means beyond the online forms of the Company, including emails, social networks and registration forms.

 

TYPES OF PERSONAL DATA COLLECTED

In case you contact us via the contact for or the registration form on www.lundadonate.org website or via the social media public profiles of the Company or those of its services the Company collect the following personal data:

• First name and last name

• Email address

• Name of the organization

• Location

• Depersonalized data on your use of the Website (e.g. type of browser, session information and IP address)

 

PURPOSES OF DATA COLLECTION AND PROCESSING

The Company manages and processes personal data in order to respond to client inquiries, questions about Lunda and our Company’s services, and the related sales, marketing and client service communications.

This correspondence may also include regular newsletters about our software and services. We process such personal data subject to our Company’s legitimate interest after having received voluntary client requests that have been digitally processed and documented. The Company may also keep such correspondence if it is legally obliged to do so, including the changes to this Privacy Policy.

The Company is the sole owner of the (depersonalized and personal) information collected on this site. The Company will not sell or rent this information to any third party.

The Company will not share the information with any third party outside of our organization and beyond the data processors and sub-processors listed in this Privacy Policy.

 

DATA RETENTION AND DELETION

The Company retains personal data for so long as it is needed for the purposes for which it was collected or in line with legal and regulatory requirements or contractual arrangements.

Any data subject may request its deletion from the database created by the Company via the data collection process outlined in this Privacy Policy by contacting the company in email privacy@lundadonate.org.

DATA DISCLOSURE

Company  may disclose your personal data in the good faith belief that such action is necessary:

• To comply with a legal obligation (i.e., if required by law or in response to valid requests by public authorities, such as a court or government agency);

• To protect the security of the website and defend our rights or property;

• To prevent or investigate possible wrongdoing in connection with us;

• To defend ourselves against legal liability.

 

DATA SECURITY

The Company maintains adequate administrative, technical and physical safeguards designed to protect the personal data you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

When processed as part of a hosted service, the information may be processed and stored on the servers of third party providers hired to provide the hosting, and our agreements with such parties require that they not use, disclose, or share such information.

 

COOKIE POLICY

Cookies are files with a small amount of data that are commonly used as a unique anonymous identifier. These are sent to your browser from the website you visit and stored on your computer's hard drive.

The Company uses these cookies to collect information and to improve the website. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of the Website.

 

DATA PROCESSORS

The Company uses the services of Wix Online Platforms (Wix Online Platforms Limited, 1 Grant’s Row, Dublin 2 D02HX96, Ireland.; https://www.wix.com/about/privacy) to host the webpage, manage the online data collection forms, and record the personal information voluntarily provided by the data subjects.

The Company uses Google Workspace (Google Ireland Limited for users of Google services based in the European Economic Area or Switzerland, located at Gordon House, Barrow Street, Dublin 4, Ireland; https://support.google.com/googlecloud/answer/6056650) for keeping email correspondence with the consented data subjects.

 

DATA SUBJECT RIGHTS

The right to obtain confirmation as to whether or not your personal data is being processed and, where that is the case, access to such personal data and certain relevant information. Such information includes, inter alia, the purposes of processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data is been or will be disclosed (Art. 15 GDPR). Please note that the rights and freedoms of other individuals may restrict your right of access.

The right to obtain the rectification and completion of your personal data, where such data is inaccurate or incomplete (Art. 16 GDPR).

The right to obtain the erasure of your personal data without undue delay under certain circumstances ("right to be forgotten") (Art. 17 GDPR).

The right to obtain the restriction of processing of your personal data under certain circumstances (Art. 18 GDPR).

The right to receive your personal data in a structured, commonly used and machine- readable format and the right to transmit such data to another controller without hindrance from us (Art. 20 GDPR).

The right to object to the processing of your personal data in certain circumstances, where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to Art. 6 (1) 1 e) GDPR, is based on legitimate interests of us or a third party pursuant to Art. 6 (1) 1 f) GDPR, or such personal data is processed for direct marketing purposes (Art. 21 GDPR).

The right to withdraw, at any time, any consent you had previously provided to us regarding our processing of your personal data. Such withdrawal will not affect the law- fulness of the processing prior to your withdrawal.

To exercise the above rights, please contact us at privacy@lundadonate.org.

Irrespective of the above rights, you have the right to lodge a complaint with a competent supervisory authority: Österreichische Datenschutzbehörde (Barichgasse 40-42, 1030 Vienna, Austria / Europe; https://www.data-protection-authority.gv.at/).

​

CONTACT US

If you have any questions about this Privacy Policy our about the data we process, do not hesitate to get in touch with us at:

• Estratos Digital Gmbh (Sommerhaidenweg 98, 1190 Vienna, Austria)

• privacy@lundadonate.org.

 

Published in this form and last modified on the 28th February 2023.