This policy tells you what to expect us to do with your personal information when you contact us, volunteer to work with us, make a donation or adopt one of our cats.

We’ll tell you:

• why we are able to process your information;

• what purpose we are processing it for;

• whether you have to provide it to us;

• how long we store it for;

• whether there are other recipients of your personal information; and

• whether we intend to transfer it to another country.

It is particularly relevant to our supporters within the EU as it references the GDPR.

Our contact details

You can contact us via the contact page on this website or via our Facebook account.

How we get your information

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• You have made an enquiry to us;

• You subscribe to our e-newsletter;

• You have applied to volunteer for us;

• You attend one of our community events;

• You have made a donation to support our work; and/or

• You want to adopt one of our cats.

We also receive personal information indirectly, usually in the following scenario:

• One of our supporters gave us your personal information at your request.

What we do with your personal information

Making an enquiry - We need enough information from you to answer your enquiry. If you contact us via email we’ll need a return address for response. When you contact us to make an enquiry, we collect information, including your personal data, so that we can respond to it

The lawful basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

Subscribing to our newsletter - We need your name and your email address, as the newsletter is sent via email. We do this to provide you with a service you have requested and to keep you updated with our latest news and events. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our e-newsletter.

The lawful basis we rely on for processing your personal data is your consent to receive marketing under article 6(1)(a) of the GDPR.

ARE WE GOING TO USE MAILCHIMP?

Becoming a volunteer - If you wish to volunteer for us, we will only collect the information about you that we need in order to facilitate your volunteering. That will include your contact details which we may share with other volunteers working on the same tasks/ projects so you can co-ordinate things between you.

The lawful basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

Attending an event - If you wish to attend one of our events, you will be asked to provide your contact information. We may also ask for payment if there is a charge to attend. Our purpose for collecting this information is so we can facilitate the event and provide you with an acceptable service.

The lawful basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

Adopting a cat - If you apply to adopt a cat from us, we will collect information from you will collect information from you about your circumstances to determine whether or not you are the right person to adopt a particular cat. The cats in our care have often experienced harsh conditions and may have special needs. We want every adoption to end happily so we do vet every prospective adopter to make sure we get the right match. We only ask for information necessary to make a decision.

The lawful basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

Sharing your information

We will not share your information with any third parties for the purposes of direct marketing.

In some circumstances we are legally obliged to share information, for example under a court order. In these circumstances, we’ll satisfy ourselves that we have a lawful basis on which to share the information, taking professional legal advice where appropriate and will document our decision making.

Otherwise, we only share your information with the people associated with Dahab Cats who, for example, are either best placed to answer your enquiry, support you with an adoption or leading an event you are attending or will be working with you directly on a particular task or project. In all circumstances, we will only share the information the person needs in order to carry out the specific tasks.

Transferring your information to another country

Dahab Cats operates in the town of Dahab which is located in South Sinai, Egypt. Most of the volunteers who work with us do so from Dahab. We also have supporters around the world, particularly in Europe. Egypt falls outside the GDPR.

We rely on the explicit consent of our supporters outside Egypt to give consent to our processing of their personal information in Dahab and we do so only for the purposes of dealing with their specific enquiries or requests.

How long do we keep your personal information

We only keep your information for as long as necessary or as required by law.

For general enquiries and attendance at events, we will keep your contact details on record for 3 months after the last contact with you or the date of the event.

If you subscribe to our newsletter, we will keep your details on record for as long as you consent to receive our newsletter.

If you make a donation - either a one-off or recurring payments, we will keep details on record for the period of time required by UK tax authorities.

If you volunteer, we will keep your details on record for as long as you volunteer with us and for 12 months after you stop.

If you adopt one of our cats, we will keep your details on record for 2 years following our last contact with you.

Some of you will give us personal information for different reasons and in these circumstances, we will keep your information for the longest time applicable.

Please see also the section below on “Your rights”.

How you can contact us

Social media - you can send us a message through our social media accounts. We recommend you understand the privacy policy operating on the relevant platform.

Contact form - enquiries and other contacts made via the contact form come to us in the form of an email. We use Gmail for this purpose, which uses Transport Layer Security (TLS) to encrypt and protect email traffic.

Visitors to our website

Squarespace - our website is built on a website called Squarespace. It is also hosted by them. Squarespace stores data in multiple Tier III data centres across the United States and has self-certified to the EU-US and Swiss-US Privacy Shield. You can read more about Squarespace’s Privacy Shield certifications here.

You can read more about the way they ensure site users’ privacy is protected under EU Data Protection laws here: Squarespace and GDPR.

If you make a donation via our website, you will be re-directed to our PayPal account, as one of Squarespace’s payment processors and is PCI compliant. PCI-DSS (Payment Card Industry Data Security Standard) is a framework for developing a robust payment card data security process—including prevention, detection and appropriate reaction to security incidents. Neither Squarespace nor we handle or have access to your card details. This information goes directly to PayPal’s servers. For more information about this, please visit the PayPal website.

Cookies - We use cookies, small pieces of data that websites store on a device, to help our website run effectively and to provide the best experience for our site visitors. Some of these are functional and required cookies that allow visitors to navigate around the website. Others are analytical and performance cookies. You can find more information here about the cookies in use on our website. This link also includes information about how you can check and manage the cookers on your device.

Google Analytics - We also use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behavior patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Google stores data across its data centres, a number of which are located within the EU, and whose capabilities and commitments to EU data protection are monitored and verified by the European Commission to ensure compliance.

The purpose for implementing all of the above is to maintain and monitor the performance of our website and to constantly look to improve the site and the services it offers to visitors. The lawful basis we rely on to process your personal data is either Article 6(1)(a) of the GDPR, for example when we require your consent for the optional cookies we use, or Article 6(1)(f) which allows us to process personal data when it’s necessary for our legitimate interests. For example to maintain the integrity of our organisation.

Your rights

Under European Data Protection laws, you have certain rights we have to make you aware of.

Right of access - you have the right to ask us for copies of the personal information we hold about you.

Right of rectification - you have the right to ask us to correct information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Right to erasure - You have the right to ask us to erase your personal information in certain circumstances:

• we no longer need your data for the original reason we collected or used it for. For example, you signed up to make a recurring monthly donation but no longer wish to do so. We no longer need to keep your details.

• you agreed for us to use your data, but have now withdrawn your consent. For example, you signed up to received our e-newsletter and decide you no longer want to receive it.

You should contact us through the contact page on our website and tell us what personal data you want us to erase. We will delete your data from our records, unless a legal exemption applies, and will take all reasonable steps to delete any data that we may have shared on our social media accounts.

We will refuse to delete your data if keeping the data is necessary for establishing, exercising or defending legal claims and/ or when we are legally obliged to keep hold of your data, for example for tax or financial reporting purposes.

Right to restrict processing of your data - You have the right to ask us to restrict the processing of your information where you have concerns about the accuracy of the information we hold or you are objecting to how we are using your data. This right also extends to asking us not to delete your data where we might otherwise would.

Right to object to processing your data - You have the right to object to our processing of your data for direct marketing purposes. This means for example, that if you adopt one of our cats or make a donation, we will not send you our e-mail newsletter, or any other marketing material by email or other means, unless you specifically say you want to receive it.

Right to data portability - You have the right to ask us to pass on information that you have given us to a third party, for example, to other animal charities operating in Dahab.

Links to other websites

Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.

Your right to complain

We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us via the contact page on this website.

If you remain dissatisfied, you may make a complaint, in the first instance, about the way we process your personal information to the supervisory authority responsible for data protection in your country.

We keep our privacy notice under regular review to make sure it is up to date and accurate.

February 2020