The www.lundadonate.org website promotes the online, integrated microdonation fundraising platform of Estratos Digital GmbH (“the Company). The Company’s goal is to promote its services and reach out to future customers, clients and wider public.
Name of data controller: Estratos Digital GmbH
Address: Sommerhaidenweg 98, 1190 Vienna, Austria
Company registration number: FN 544761 w
THE LEGAL BASIS OF DATA COLLECTION
The Company uses Personal Data on the following basis:
for the purposes of the Company’s legitimate interests related to the business relationships between the Company and the Data Subjects (Article 6(f) of the GDPR);
for the performance of a contract between the Company and the Data Subject (Article 6.1(b) of the GDPR);
to comply with legal obligations applicable to the Company (Article 6(c) of the GDPR, such as corporate and accounting.
COLLECTION OF PERSONAL DATA
The Company may collect two types of information from you, depending on your interaction with us.
The first type of information collected by the Company is non-identifiable and depersonalized information (“Depersonalized Data”). The Company is not aware of the identity of the individual from whom it collects Depersonalized Data. Data gathered consists of technical information, and may contain, among other things, cookie information, the type of operating system and type of browser, type of device, your action in the website (such as session duration).
The second type of data the Company may collect requires the explicit, voluntary, digitally documented consent of the data subject that is provided to us by the data subject by the completion of the sign-up form and request-a-demo form published on www.lundadonate.org. The Company collects personal data only when the data subjects voluntarily contact and or message the Company via any means beyond the online forms of the Company, including emails, social networks and registration forms.
TYPES OF PERSONAL DATA COLLECTED
In case you contact us via the contact for or the registration form on www.lundadonate.org website or via the social media public profiles of the Company or those of its services the Company collect the following personal data:
First name and last name
Name of the organization
Depersonalized data on your use of the Website (e.g. type of browser, session information and IP address)
PURPOSES OF DATA COLLECTION AND PROCESSING
The Company manages and processes personal data in order to respond to client inquiries, questions about Lunda and our Company’s services, and the related sales, marketing and client service communications.
The Company is the sole owner of the (depersonalized and personal) information collected on this site. The Company will not sell or rent this information to any third party.
DATA RETENTION AND DELETION
The Company retains personal data for so long as it is needed for the purposes for which it was collected or in line with legal and regulatory requirements or contractual arrangements.
Company may disclose your personal data in the good faith belief that such action is necessary:
To comply with a legal obligation (i.e., if required by law or in response to valid requests by public authorities, such as a court or government agency);
To protect the security of the website and defend our rights or property;
To prevent or investigate possible wrongdoing in connection with us;
To defend ourselves against legal liability.
The Company maintains adequate administrative, technical and physical safeguards designed to protect the personal data you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
When processed as part of a hosted service, the information may be processed and stored on the servers of third party providers hired to provide the hosting, and our agreements with such parties require that they not use, disclose, or share such information.
Cookies are files with a small amount of data that are commonly used as a unique anonymous identifier. These are sent to your browser from the website you visit and stored on your computer's hard drive.
The Company uses these cookies to collect information and to improve the website. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of the Website.
The Company uses the services of Wix Online Platforms (Wix Online Platforms Limited, 1 Grant’s Row, Dublin 2 D02HX96, Ireland.; https://www.wix.com/about/privacy) to host the webpage, manage the online data collection forms, and record the personal information voluntarily provided by the data subjects.
The Company uses Google Workspace (Google Ireland Limited for users of Google services based in the European Economic Area or Switzerland, located at Gordon House, Barrow Street, Dublin 4, Ireland; https://support.google.com/googlecloud/answer/6056650) for keeping email correspondence with the consented data subjects.
DATA SUBJECT RIGHTS
The right to obtain confirmation as to whether or not your personal data is being processed and, where that is the case, access to such personal data and certain relevant information. Such information includes, inter alia, the purposes of processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data is been or will be disclosed (Art. 15 GDPR). Please note that the rights and freedoms of other individuals may restrict your right of access.
The right to obtain the rectification and completion of your personal data, where such data is inaccurate or incomplete (Art. 16 GDPR).
The right to obtain the erasure of your personal data without undue delay under certain circumstances ("right to be forgotten") (Art. 17 GDPR).
The right to obtain the restriction of processing of your personal data under certain circumstances (Art. 18 GDPR).
The right to receive your personal data in a structured, commonly used and machine- readable format and the right to transmit such data to another controller without hindrance from us (Art. 20 GDPR).
The right to object to the processing of your personal data in certain circumstances, where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to Art. 6 (1) 1 e) GDPR, is based on legitimate interests of us or a third party pursuant to Art. 6 (1) 1 f) GDPR, or such personal data is processed for direct marketing purposes (Art. 21 GDPR).
The right to withdraw, at any time, any consent you had previously provided to us regarding our processing of your personal data. Such withdrawal will not affect the law- fulness of the processing prior to your withdrawal.
To exercise the above rights, please contact us at firstname.lastname@example.org.
Irrespective of the above rights, you have the right to lodge a complaint with a competent supervisory authority: Österreichische Datenschutzbehörde (Barichgasse 40-42, 1030 Vienna, Austria / Europe; https://www.data-protection-authority.gv.at/).
Estratos Digital Gmbh (Sommerhaidenweg 98, 1190 Vienna, Austria)
Published in this form and last modified on the 28th February 2023.