The Wikimedia Donor Privacy Policy

From Wikimedia Foundation Governance Wiki
Revision as of 01:05, 4 May 2019 by Quiddity (WMF) (talk | contribs) (fix link)

Template:DonorLang Template:TOCright

Welcome!

Welcome to the Wikimedia Foundation's Donor Privacy Policy. The Wikimedia Foundation ("WMF") has put this policy in place to protect the privacy rights of our donors. We recognize that our donors care deeply about how their personal information is used and shared, and we value the privacy and security of our donors. This Donor Privacy Policy addresses our practices for collecting, using, maintaining, protecting, and disclosing Donor Information. Please carefully read this policy together with our Terms of Use. We will never sell, trade, or rent your nonpublic personal information.

Important Information

By donating to WMF, you consent to the collection, transfer, processing, storage, disclosure, and use of your information in or to the United States ("U.S."), and other locations that may have different or less stringent data protection laws than your country, for the purposes stated in this policy. If you do not agree with the terms of the Donor Privacy Policy and the WMF Terms of Use, please immediately discontinue use of Wikimedia Fundraising Services (as defined below).

Definitions

"WMF", "us", "we", and "our" refer to the Wikimedia Foundation.

"Donor Privacy Policy" and "policy" refers to this document.

"Personal information" is information you provide us or information we collect from you through the Fundraising Services that identifies or could be used to identify you. We collect some or all of the following types of personal information from you through your use of the Wikimedia Fundraising Services: your name, contact details (such as address, phone number, email address, password, identification number on government-issued ID), financial information (such as bank account number), device details (such as IP address, web browser user-agent information), demographic details (such as gender or age) and information about your interests and affiliations.

Wikimedia Fundraising Services” are Wikimedia Foundation fundraising sites, such as donate.wikimedia.org, as well as fundraising-related emails from WMF and fundraising-related banners on other Wikimedia Foundation sites.

What This Policy Covers

This Donor Privacy Policy covers the collection, transfer, processing, storage, disclosure, and use of personal and non-personal information collected from you during the process of making a donation to the Wikimedia Foundation and through your interactions with the Wikimedia Fundraising Services (“Donor Information”). This policy does not cover the collection, transfer, processing, storage, disclosure, or use of your information related to your use of other WMF projects or features, such as Wikipedia. For more information regarding WMF's broader privacy practices, please review our main Privacy Policy. This policy also does not cover the collection, transfer, processing, storage, disclosure, and use of information collected from you during the process of making a donation to, or other interactions you may have with, a Wikimedia affiliate, such as a chapter. For more information about the privacy practices of those organizations, please review their respective privacy policies.

What Information We Collect

As a result of your interaction with our donation pages, making a donation, participating in a donor survey or providing feedback related to donating, or otherwise using the Wikimedia Fundraising Services, WMF may collect certain personal information, as described above. We also may collect such personal information about U.S. donors through publicly-available sources and other commercially-available sources.

We also may collect some non-personal information, such as:

  • the web page that referred you to our donation pages
  • the amount you donated
  • which of our pages you request and visit
  • the date and time of each request you make to our donation pages
  • comments and suggestions from you
  • correspondence between you and WMF
  • any other information you provide to us

We keep both personal and non-personal Donor Information confidential, meaning that we will not share this information outside of the Wikimedia Foundation except as permitted by this policy or in de-identified/anonymized form.

Cookies and Other Tracking Technologies

As you interact with the Wikimedia Fundraising Services, we may use automatic data collection and other locally stored data technologies such as tracking pixels, JavaScript, cookies, and local storage to collect certain information about your device.

WMF uses cookies and other locally stored data to enhance your donation experience. We also use this information to create a safer online environment and gain a better understanding of donor preferences and interactions with the Wikimedia Fundraising Services. In general, cookies and other locally stored data are used to:

  • Help the Wikimedia Fundraising Services function and deliver new and relevant content to you.
  • Provide you with a personalized experience by storing your preferences so that they can be used the next time you visit the Wikimedia Fundraising Services.
  • Analyze the performance of donation processes so that we can better understand how they work and improve them for you and other WMF donors.
  • Analyze interactions with fundraising emails so we can refine and improve the donation process.

For additional information about the use of cookies and similar tracking technologies, please see our Cookie statement.

Limiting Data Collection by Cookies and Other Tracking Technologies

We believe that the collection of this data helps improve your donation experience; however, you may remove or disable some or all cookies through your browser settings. While not a comprehensive list, you can limit the use of cookies and other locally stored data on your device by:

  • Removing or disabling specific locally stored data on your browser's settings.
  • Using a browser that can block-third party cookies.
  • Installing a plugin to block locally stored data, if available.

Although donations to WMF via the Wikimedia Fundraising Services are possible without cookies and other locally stored data, please note that the removal or disabling of these features may affect your navigation of these sites and the personalization of your experience.

Do Not Track

WMF is committed to protecting the information we collect from all of our donors. We do not share this information with third parties, except in the specific circumstances described in the "Sharing Donor Information" section of this policy. We do not change our behavior in response to a web browser's Do Not Track signal; instead, we provide the same level of protection to information we collect from all donors by default. For more information about DNT, please visit Do Not Track Us and the World Wide Web Consortium's Do Not Track Specification.

How We Use Donor Information

We use information collected from you for general administrative purposes and to operate our fundraising processes. This includes:

  • administering the Wikimedia Fundraising Services;
  • updating you about upcoming fundraising and other WMF activities;
  • thanking you for your donation; and
  • setting language preferences.

We engage in the foregoing activities to manage our contractual relationship with you and for our legitimate interests in managing the Wikimedia Fundraising Services.

We also use information collected from you to comply with various obligations relating to recordkeeping and reporting. This includes:

  • distributing donation receipts;
  • maintaining our internal records test features;
  • complying with U.S. tax requirements;
  • reporting to applicable government agencies as required by law; and
  • communicating substantive changes to this policy and related policies.

We engage in the foregoing activities to comply with our legal obligations and for our legitimate interests in managing our donation processes.

And we use information collected from you to improve and update the Wikimedia Fundraising Services. This includes:

  • customizing content;
  • understanding donors' interest in WMF;
  • improving our fundraising processes and efforts;
  • conducting internal analyses, such as research and analytics;
  • providing greater security; and
  • conducting survey and metric reports.

We engage in the foregoing activities for our legitimate interests such as improving and protecting our fundraising processes and efforts.

Accessing Your Donor Information

WMF works hard to accurately process and maintain Donor Information. If you would like to request to access, correct, update, suppress, restrict or delete the personal information we have about you, object to our processing of such personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another organization (to the extent this right to data portability is provided to you by applicable law), please let us know by contacting us at donate@wikimedia.org. While we will make reasonable efforts to comply with your request, there are certain situations where we may not grant your request (such as when we cannot adequately verify your identity to give you access to personal information, when we are legally required to retain information, or when we are not technologically able to change or delete information). Therefore, the granting of such requests remains at the discretion of WMF.

All emails sent relating to Wikimedia Fundraising Services (with the exception of receipts or administrative notices) include an easy option to unsubscribe. If you would like to change your communication preferences, you (or an authorized representative) can let us know by contacting us at donate@wikimedia.org at any time, or clicking the unsubscribe link in an email you receive from us.

Sharing Donor Information

We understand that donors may wish to remain anonymous, and we strive to honor such requests and preserve your anonymity. However, in limited circumstances, we may share Donor Information in the situations and under the conditions described below. We will never sell, trade, or rent your nonpublic personal information.

With your permission. With your consent, we may share your information for a particular purpose. For example, we may give donors the option to have their name publicly associated with their donation.

In anonymized form. We may publish or share anonymized Donor Information. For example, we may share anonymized data sets to show donation trends.

Comments and suggestions. We may publish any comments or suggestions that donors provide us, including in promotional materials, in anonymous form. In the rare instance that we do publish such information with donor attribution, we will do so only with your written consent.

Online payment processors. In order to facilitate online donations, we have partnered with payment processors. When you make a donation to WMF through the Wikimedia Fundraising Services, whether by credit card, debit card, or other methods of online payment, you transmit your payment data directly to the payment processor. We do our best to use contractual agreements and other mechanisms to help ensure that these processors maintain the confidentiality of your information. However, please be aware that WMF is not responsible for the privacy practices of these processors; please consult the privacy policies of the applicable payment processor for more information about its practices.

Other service providers. We use third-party service providers or contractors who assist with the organization and facilitation of the Wikimedia Fundraising Services, or who help run our donation pages or improve your experience with them. We may give access to your personal or non-personal information to these providers or contractors as needed to perform their services for us or to use their tools and services. While we cannot ensure the privacy or security of services provided by third-party providers, we do our best to use contractual agreements and other mechanisms to help ensure that these service providers or contractors treat your information consistent with, and in a manner no less protective than, the principles of this policy.

For legal reasons. On certain rare occasions, we may access, preserve, or disclose your personal information if we reasonably believe it is necessary to satisfy a valid and legally enforceable warrant, subpoena, court order, law or regulation, or other judicial or administrative order. If we believe that a particular request for disclosure of a donor's information is legally invalid or an abuse of the legal system, and the affected donor does not intend to oppose the disclosure themselves, we will do our best to fight the request. WMF is committed to notifying you via email at least ten (10) calendar days, when possible, before we disclose your personal information in response to a legal demand. However, we may only be able to provide notice if we are not legally restrained from contacting you, there is no credible threat to bodily harm that is created or increased by notifying you of the request, and you have provided us with an email address or other current contact information.

Nothing in this policy is intended to limit any legal objections or defenses you may have to a third party's request (whether it be civil, criminal, or governmental) to disclose your information. We recommend seeking the advice of legal counsel immediately if such a request is made involving you.

If the organization is transferred. In the extremely unlikely event that ownership of all or substantially all of the WMF changes, or we go through a reorganization (such as a merger, consolidation, or acquisition), your personal information may be transferred. We will provide notice to you via the Wikimedia sites, and a notification on WikimediaAnnounce-L or similar mailing list, at least thirty (30) calendar days before any personal information is transferred or becomes subject to a different donor privacy policy.

To protect you, ourselves, or others. If necessary, we may need to use or share your personal information to: enforce or investigate potential violations of our Terms of Use, this Donor Privacy Policy, or any Foundation or user community-based policies; investigate and defend ourselves against legal threats or actions; prevent imminent and serious bodily harm or death to a person; protect our organization, employees, contractors, users, or the public; or detect, prevent, or otherwise assess and address potential spam, malware, fraud, abuse, unlawful activity, and security or technical concerns.

How We Protect Your Donor Information

To ensure a high level of security and confidentiality, WMF employs a variety of physical, administrative, and technical measures, policies, and procedures to help protect your personal and financial information from unauthorized access, use, alteration, disclosure, or destruction. However, you should be aware that no storage system or data transmission is 100% secure. Therefore, we cannot guarantee that our security protocols will not be compromised.

How Long We Keep Your Donor Information

Once we receive personal information from you, we keep it for the shortest possible interval that is consistent with the maintenance, understanding, and improvement of the WMF donation process, and our obligations under applicable U.S. law.

For information on Wikimedia's general data retention policies on the Wikimedia projects, please see our Data Retention Guidelines.

Wikimedia Affiliates

Wikimedia affiliates (such as chapters) are independent organizations, which sometimes conduct their own fundraising efforts. While some affiliates may give a portion of the funds they raise to WMF, WMF is not involved in processing donations made to these organizations. Wikimedia affiliates have different privacy policies and practices depending on local legal requirements and other considerations. This policy does not explicitly cover donations made to them.

Changes to This Donor Privacy Policy

From time to time, it may be necessary to modify this policy in order to accurately reflect our data collection and disclosure practices. We reserve the right to do so, and we will provide notice of such changes in a reasonable manner and time. We encourage you to review the most up-to-date version of our Donor Privacy Policy periodically.

Your continued use of the Wikimedia Fundraising Services after any subsequent version of this Privacy Policy becomes effective constitutes acceptance of that version of the Donor Privacy Policy on your part.

Contact Us

WMF values what our donors have to say about our services and our policies. If you have questions or suggestions about this policy, or the information collected under the Donor Privacy Policy, we want to hear from you. See our Contact Us page for information on how to reach out. For more information about the privacy practices that govern the Wikimedia projects, please review our main Privacy Policy.

Depending on your jurisdiction, you also may have the right to lodge a complaint with a supervisory authority competent for your country or region.

This Donor Privacy Policy went into effect April 15, 2019. Previous versions can be found below:

Donor Privacy Policy (February 2017)

Donor Privacy Policy (September 2011)

Donor Privacy Policy (July 2011)

Donor Privacy Policy (2009)

Please note that in the event of any differences in meaning or interpretation between the original English version of this Donor Privacy Policy and a translation, the original English version takes precedence.