General
In the course of accessing or operating our Website (https://www.workoutforwater.org), New Zealand National Committee For UNICEF Trust Board (also known as UNICEF NZ), a registered charity with the New Zealand Charities Commission with registration number CC35979, (being the “data controller” and referred to as “we”, “our” or “us”) may collect, use, store, process and disclose your personal data (being information relating to an identified or identifiable individual, including "personal information" as defined in the Privacy Act 1993). By accessing and using our Website, you consent to our use of your personal data in accordance with this Privacy Policy (as amended from time to time).
This Privacy Policy describes the personal data collected by us (including through our Website) and describes the purposes for which we may use, store, process and disclose your personal data.
Our contact details
In order to exercise your rights under this Privacy Policy, and if you:
- have any questions about this Privacy Policy or our privacy and data protection practices;
- want to access, correct or order the erasure of any personal data we hold about you; or
- want us to stop sending you any information or otherwise using your information for some or any purposes,
please contact us at help@workoutforwater.org
What and how personal data is collected and processed?
We may collect and process information about you, directly from you, when you use our Website and any links to other websites from our Website, over the phone, by letter or email. This information may include:
- Name – first name, last name and any other applicable names;
- Contact information – contact details including address, email address and telephone number;
- Payment card details – payment card number, expiry date, issue number and full name of card holder;
- Employment – information about your employment, such as who is your employer;
- Personal Circumstances – information about your personal circumstances;
- Documents/Images – where relevant, documents and/or images that relate to your identity and other personal details;
- Language – spoken languages; and
- Location – applicable locations around the world where you are in, have been in and/or will be.
Our Website may use cookies. “Cookies” are pieces of software that are placed on the computer device that you are using to connect to the internet. Cookies are designed to remember information about your personal preferences. We will only use and disclose such information so that our Website will remember you next time you visit or login. Read more about our Cookies policy here.
What are the consequences if your personal data is not provided?
You may access and use certain parts of our Website without registering with us. However, if you do not provide us with the information we require from you, you may not be able to access or use certain parts of our Website, and we may not be able to fulfil any donation you wish to make to us. For example, if you decide to make a donation to us, we need details such as your name and address and payment card details to be able to take your payment. In other cases, you have a choice over whether we collect your personal data, for example, you can turn off cookies on your browser and we will not place any cookies on your device or computer (although in this case you may not be able to use all parts of our Website).
For what purposes and for how long will your personal data be used and stored?
We will keep your personal data only for as long as necessary to achieve the purposes we collected it for and in all cases for such periods as we are required to in order to comply with any relevant legislation and regulations. Your personal data will be used by us in connection with the following purposes (or as otherwise as required or authorised by law):
- to provide you with any relevant opportunity to participate in the Workout for Water Campaign;
- to arrange your payments (including though third party processors), including processing one off donations and regular donations;
- to communicate with you about your participation in the Workout for Water Campaign and/or your donation;
- for marketing purposes after the Workout for Water Campaign where you have Opted In to receive such material;
- to undertake customer service activities, such as responding to and dealing with any complaint, comment, query or request that you may have;
- to comply with your requests to exercise your rights under relevant privacy or data protection legislation, such as when you request access to your personal data;
- for our administrative purposes, including for our internal record keeping;
- to generate aggregated data about the use, and demographics of users, of our Website and provide that aggregated data to third parties (that data will not individually identify you);
- for meeting our regulatory obligations, including liaising with regulatory authorities and for our own internal audit purposes;
- for complying with applicable laws and regulations or if required to do so by any court or regulatory authority;
- to enforce this Privacy Policy and any other terms and conditions or agreement between you and us or our third party processors;
- for any other specific purpose which we notify you of at the time your personal data is collected; or
- for any other use or disclosure you expressly authorise.
What are the legal grounds for processing your personal data?
Data protection laws require us to tell you what legal basis we use for processing your personal data. These bases are set out in the applicable data protection law. We generally use the following:
- the processing is necessary to perform an agreement with you (for example, where you have agreed to make a donation through our Website), or to take steps requested by you before entering into an agreement with us;
- the processing is in our or someone else's legitimate interests, and these interests are not overridden by your interests or rights in the protection of your personal data;
- you have given your consent to the processing of your data (for example, by completing the process to make donation through our Website); or
- the processing is necessary to meet a legal obligation which applies to us.
We (including our other UNICEF offices) may use your personal data to inform you, by email, letter, phone, SMS, push notification or equivalent, about our campaigns, donation opportunities or other events that we think may be of interest to you. We will tell you about this when we collect your information and if you do not wish to receive these communications, please let us know. You can change your mind at any time by contacting us (see clause 2 above). You can also unsubscribe following the instructions that we will include in any communication, such as email or text, we send to you.
Who will have access to your personal data?
We will not use your personal data, or disclose your personal data to third parties, except:
- to the extent reasonably necessary to achieve any of the purposes described in this Privacy Policy (including where information is provided to third party providers that assist us in providing services, for example payment services providers, or third parties who provide services to us);
- where we reasonably believe that such use or disclosure is required or expressly permitted under any applicable law; or
- where we transfer your personal data to other UNICEF offices for the purposes of giving effect to any arrangements which you have agreed to or which are described in this Privacy Policy.
The types of third party service providers who we share your data with include the following:
- our advisors, which includes our accountants, auditors, lawyers, other professional advisors and business contacts; for the purpose of assisting us to better manage, support or develop our business and comply with our legal and regulatory obligations;
- third party service providers, who need to know the information in order to provide us or you with service (including our third party service providers who process information on our behalf to help run some of our internal business operations, including email distribution, data storage, the provision of information technology and marketing services, customer services and for data analytics, and payment/donation processing services); and
- law enforcement and regulatory bodies, in order to comply with any legal obligation or court order.
These parties may be located in New Zealand or elsewhere in the world. Different privacy laws may apply in these countries.
You acknowledge and agree that our use of your personal data in accordance with this Privacy Policy may require that that information is transferred to, and/or stored with, processors or other third parties in other countries which may not have the same data protection laws as New Zealand or any country in which you are resident.
How will we store your personal data?
We have technical and organisational security measures in place and invest appropriate resources to protect your personal information and personal data from deliberate or accidental manipulation, destruction, loss, misuse, unauthorised access, modification or disclosure. Wherever possible, we will ensure that our systems, and procure that our third party service providers systems are appropriately secure for processing your personal data, and that the risks of your personal data being unlawfully used, amended, deleted, lost or stolen are minimised.
The personal data that you provide will be retained by us in accordance with applicable laws. However, we will take reasonable steps to destroy or de-identify personal data we hold, in accordance with our internal data retention policies and our legal obligations, if it is no longer needed for the purposes set out in clause 5 above, including if you no longer have an active and on-going relationship with us.
We remind you, however, that if you send information to our Website, the Internet is not a secure environment and although all reasonable care is taken, we cannot warrant or guarantee the security of information you provide to us via electronic means.
What rights do you have in relation to your personal data?
You have the right to request copies of certain of your personal data within our control and details of how we use that information. If you think any of the personal data we hold about you is inaccurate or no longer required for the original purpose, you may also request it is corrected or erased. We rely on you to ensure that your personal information is complete, accurate and current. Please do inform us promptly of any changes to or inaccuracies to your personal information using the contact details below.
You also have the following additional rights:
- Data portability - you have the right to receive all such personal data in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.
- Right to restriction of processing - you have the right to restrict our processing of your personal data where:
- you contest the accuracy of the personal data (until we take sufficient steps to correct or verify its accuracy);
- the processing is unlawful but you do not want us to erase the data;
- we no longer need the personal data for the purposes of the processing, but you require the personal data for the establishment, exercise or defence of legal claims; or
- you have objected to processing justified on legitimate interest grounds pending verification as to whether we have compelling legitimate grounds to continue processing.
Where your personal data is subjected to restriction in this way we will only process it with your consent or for the establishment, exercise or defence of legal claims.
- Right to withdraw consent - you will also have a right to require us to stop processing your personal data and/or to withdraw your agreement to processing based on any consent you have previously provided to us (through the Website or otherwise), but this does not apply where we have other legal justifications to continue processing your data or an overriding legitimate interest.
- Right to object to processing justified on legitimate interest grounds - to the extent that we are relying upon a legitimate interest to process your personal data, then you have the right to object to such processing, unless we can either demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where we need to process the data for the establishment, exercise or defence of legal claims.
In relation to all of these rights, please contact us (see clause above), with subject heading "Exercise of Data Subject Right(s)".
If you have a complaint about how we have handled your personal data you may contact us and we will investigate your complaint. You also have the right to lodge a complaint with a supervisory authority (ie your local data protection authority) once you have tried to resolve the issue with us.
Changes to this Privacy Policy
We reserve the right to modify or amend this Privacy Policy at any time and for any reason. Any changes we make to this Privacy Policy will be posted at https://www.workoutforwater.org. The changes to this Privacy Policy will be effective immediately from the date that we upload the revised policy, unless we state otherwise. We encourage you to check this Privacy Policy whenever you visit our Website for any updates or changes. Your continued use of our Website will constitute your acceptance of any amendments to or revisions of this Privacy Policy. This Privacy Policy was last updated on 4th March 2019.
