Privacy policy of Petitions.net

Ábyrgðaraðili persónuupplýsinga

Petitions24 Oy (Petitions.net)
PL 697
00101 Helsinki
Finland

Hafðu samband

Hafðu samband

Breytingar á persónuverndarstefnunni okkar

Persónuverndarstefna okkar kann að verða uppfærð af og til. Við mælum með að þið endurskoðið hana reglulega.

Last updated: 2024-05-15

How we process your personal data in different situations

In each situation, we aim to clarify:

  • What personal data we collect
  • How we collect it
  • Why we process your personal data
  • The legal basis for processing your personal data
  • How long we keep the personal data

Þegar þú býrð til undirskriftasöfnun

  • Hvaða persónuupplýsingar vinnur þú um mig og hvernig safnar þú þeim?
    • Persónuupplýsingar sem þú veitir sjálf(ur)
      • Nafnið þitt
      • Netfang
      • Land
    • Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
      • IP-tala
      • Skjálaútreikningur
      • Nafn vafrans og útgáfunúmer þess
      • Nafn stýrikerfisins og útgáfunúmer þess
  • Hverjar eru lagagrundvöllur og tilgangur með vinnslu persónuupplýsinga um mig?
    • Framkvæmd samnings í eftirfarandi tilvikum:
      • To identify you
      • To contact you.
      • To display your name on the petition page.
    • Lagaskylda í eftirfarandi tilvikum:
      • We will process your data when we have a legal obligation to do so, for example, if we are responding to legal process or an enforceable governmental request.
  • Hversu lengi geymið þið persónuupplýsingar mínar?
    • Your personal data related to the petition is stored until the petition is either deleted by you or by our team.
  • Hvernig tryggið þið öryggi persónuupplýsinga minna?
    • Skipulagsráðstafanir
      • Employee training
      • Our workers only have access to the data that is needed for their work.
    • Tæknilegar ráðstafanir
      • We use Security Sockets Layer (SSL) encryption technology to encrypt all the data before it travels over the internet.
      • Firewalls
      • Daily backups
      • Passwords are not saved in clear text. We calculate hash sums of the passwords and use salts.
  • Frequently asked questions

Þegar þú skrifar undir undirskriftasöfnun eða breytir undirskrift þinni

  • Persónuupplýsingar sem þú veitir sjálf(ur)
    • The author of each petition determines what information is requested from the signatories. Please check the privacy policy of the petition you are interested in.
  • Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn vafrans og útgáfunúmer þess
    • Nafn stýrikerfisins og útgáfunúmer þess
  • Purpose:
    • The author of each petition determines the purposes for processing the personal data of the signatories. Please check the privacy policy of the petition you are interested in.
  • Legal Basis
    • Consent of the data subject
  • Hversu lengi geymið þið persónuupplýsingar mínar?
    • The author of each petition determines the retention period for the personal data of the signatories. Please check the privacy policy of the petition you are interested in.
  • Roles and Responsibilities:
    • Our company acts as a Data Processor, meaning we process personal data on behalf of the petition's author, who is the Data Controller. The Data Controller is responsible for deciding what data is collected, why it is collected, and how long it is retained. As the Data Processor, we manage the technical aspects of this process, including data storage, security, and processing.
  • Frequently asked questions

When you send a message to the author of a petition

  • Persónuupplýsingar sem þú veitir sjálf(ur)
    • Nafn
    • Netfang
    • Content of the Message
  • Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn of the browser and its version number
    • Nafn stýrikerfisins og útgáfunúmer þess
  • Purpose:
    • To enable communication between the author and individuals interested in the topic of the petition.
  • Legal Basis
    • Consent of the data subject
  • Data Retention
    • Max 5 years
  • How is my personal data shared?
    • The author of the petition will receive the information provided in the contact form.

Þegar þú býrð til eða breytir notendareikningi

  • Persónuupplýsingar sem þú veitir sjálf(ur)
    • Nafn
    • Netfang
    • Borg
    • Land
  • Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn of the browser and its version number
    • Nafn stýrikerfisins og útgáfunúmer þess
  • Purpose:
    • Email address is used for communication with you.
    • The email address serves as the username for your account.
    • To manage your user account
    • To pre-fill the signature forms
    • To manage petitions you have created
    • To manage your own signatures
  • Legal Basis
    • Consent of the data subject
  • Data Retention
    • Retained as long as the user account is active.

When you buy an advertising campaign

  • Persónuupplýsingar sem þú veitir sjálf(ur)
    • Nafnið þitt
    • Netfang þitt
    • Your country
  • Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn vafrans og útgáfunúmer þess
    • Nafn stýrikerfisins og útgáfunúmer þess
  • Purpose:
    • Country information is used to determine the vat rate.
    • Email address is used for communication with you.
      • Example 1: We send a message when the advertising campaign starts.
      • Example 2: We send a message when the advertising campaign ends.
  • How is my personal data shared?
    • We share your name and country with our bookkeeper and with our auditor.
  • Legal Basis:
    • Execution of a contract
    • Comply with law.
  • Hversu lengi geymið þið persónuupplýsingar mínar?
    • The data is kept for 6 years from the end of the financial year in which they relate.

When You Try to Log In

  • Persónuupplýsingar sem þú veitir sjálf(ur)
    • Netfang
  • Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn vafrans og útgáfunúmer þess
    • Nafn stýrikerfisins og útgáfunúmer þess
  • What are the legal basis for collecting information about me?
    • Your consent in the following cases:
      • To verify your identity and grant access to your account
    • Controller's legitimate interests in the following cases:
      • Detecting, preventing, or otherwise addressing fraud, abuse, security, or technical issues with our services
  • Data Retention
    • 5 years

When You Write or Edit a Comment

This does not mean the comment field when you sign a petition.

  • Persónuupplýsingar sem þú veitir sjálf(ur)
    • Nafn
    • Netfang
    • Content of the comment
  • Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn of the browser and its version number
    • Nafn stýrikerfisins og útgáfunúmer þess
  • Purpose:
    • To display and manage your comment on the platform
  • Legal Basis
    • Consent of the data subject
  • How is my personal data shared?
    • -
  • Data Retention
    • Retained for as long as the petition has not been removed.

When You Make a Request to Manage Your Signatures

  • Persónuupplýsingar sem þú veitir sjálf(ur)
    • Netfang
  • Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn vafrans og útgáfunúmer þess
    • Nafn stýrikerfisins og útgáfunúmer þess
  • Purpose:
    • To identify and provide you with the capability to manage your signatures
  • Legal Basis
    • Consent of the data subject
  • Data Retention
    • 365 days

When You View any Page on Our Website

    Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn vafrans og útgáfunúmer þess
    • Nafn stýrikerfisins og útgáfunúmer þess
  • Purpose:
    • To measure the number of page views
    • To measure the number of visits
    • To improve the website
    • To analyze user behaviour
    • Detecting, preventing, or otherwise addressing fraud, abuse, security, or technical issues with our services
  • Legal Basis
    • Controller's legitimate interests
  • Data Retention
    • 365 days

When You View an Ad of Petition on Our Website

    Persónuupplýsingar sem vafrinn þinn veitir okkur sjálfkrafa
    • IP-tala
    • Skjálaútreikningur
    • Nafn vafrans og útgáfunúmer þess
    • Nafn stýrikerfisins og útgáfunúmer þess
  • Purpose:
    • Measure the effectiveness of ad campaigns
    • To target petition ads better
  • Legal Basis
    • Controller's legitimate interests
  • Data Retention
    • 365 days

When you click Facebook Share Button

  • When you click the Facebook share button on our website, you have the option to share content from our site on your Facebook profile.
  • Clicking this button may result in Facebook collecting data about you, such as your interaction with the button and the date and time of the action. However, Facebook only receives this information when you actively click the share button.

Your Privacy with Facebook

  • These features are governed by Facebook's privacy policy, and we do not have control over how Facebook processes the data once it is shared.
  • We recommend reviewing Facebook’s privacy policy and your privacy settings on Facebook to understand how your data is handled.

Remember, using this Facebook feature is entirely optional. If you have any concerns about privacy related to this feature, you may choose to avoid using this feature.

When you click Facebook Login Button

  • We offer the option to sign in to our website using Facebook Login for your convenience.
  • When you use Facebook Login, Facebook will provide us with access to certain information in your Facebook account, as per your privacy settings on Facebook. This can include your name, email, and profile picture.
  • Please note that Facebook only shares this information with us if you choose to use Facebook Login and give consent for data sharing.

Your Privacy with Facebook

  • These features are governed by Facebook's privacy policy, and we do not have control over how Facebook processes the data once it is shared.
  • We recommend reviewing Facebook’s privacy policy and your privacy settings on Facebook to understand how your data is handled.

Remember, using this Facebook feature is entirely optional. If you have any concerns about privacy related to this feature, you may choose to avoid using this feature.

When you click WhatsApp Share Button

We have integrated a WhatsApp share button on our website. This feature allows you to share content from our site with others through WhatsApp. Here's how it affects your data:

  • When you click the WhatsApp share button, it enables you to share links or content from our website directly through your WhatsApp account.
  • Using this button may involve WhatsApp accessing information about your action, such as the fact that you shared a specific link. However, WhatsApp only receives this information when you actively use the share button.
  • We do not collect any personal data through the use of the WhatsApp share button. However, WhatsApp's data processing practices are governed by its own privacy policy.

We recommend reviewing WhatsApp’s privacy policy to understand how your data is handled when using this feature. Remember, using the WhatsApp share button is completely optional.

Personal data we receive if you pay us using payment processor PayTrail

  • Nafnið þitt
  • Name of your bank

Personal data we receive if you pay us using payment processor Paypal

  • Nafnið þitt
  • Netfang
  • Símanúmer
  • Residence country

When you receive an email from us or send us an email

Google

Google Services for Email Handling: We utilize Google's email services for both sending emails to our users and storing emails we receive. This integration with Google allows us to maintain efficient, reliable communication and ensure that our email records are securely managed.

Data Processing: The use of Google's email services involves processing personal data, including but not limited to, email addresses and the content of the emails. This processing is essential for the delivery and storage of emails, enabling us to keep in touch with our users and effectively manage our services.

Data Protection: We take the privacy and security of your personal data seriously. Google provides robust security measures to protect the data processed through its email services against unauthorized access, loss, or compromise. In line with our commitment to data protection, we have implemented appropriate safeguards to ensure that your personal data is handled securely and in accordance with applicable data protection laws.

Legal Basis: Our use of Google's email services to send and store emails is based on our legitimate interest in utilizing secure and efficient tools for business communication. This practice helps us in fulfilling our contractual obligations, providing support, and delivering important information to our users.

AWS SES

We utilize Amazon Web Services Simple Email Service (AWS SES) as our email sending service.

Data Processing and Security: When sending emails via AWS SES, certain personal data, including email addresses and potentially names (if included in the email content), are processed through AWS's servers.

Legal Basis for Using AWS SES: The use of AWS SES for email communication is based on our legitimate interests in utilizing efficient and secure methods for sending emails to our users.

Data Protection: We have implemented appropriate safeguards to ensure the confidentiality and security of your data when processed by AWS SES. This includes data encryption in transit and adherence to strict data processing agreements that comply with applicable data protection laws.

For more information on how AWS handles data and their commitment to data protection, please refer to the AWS Privacy Notice.

Data Subject Rights

  • Right to obtain information on the processing of their personal data
  • Right of access to their data
  • Right to rectification of their data
  • Right to the erasure of their data and to be forgotten
  • Right to restrict the processing of their data
  • Right to data portability
  • Right to object to the processing of their data
  • Right not to be subject to a decision based solely on automated processing

If you wish to exercise any of these rights, please contact us using our contact form.