Policy:Donor privacy policy: Difference between revisions

From Wikimedia Foundation Governance Wiki
Content deleted Content added
m moved Donor privacy policy to Donor policy: per email from Geoff
m →‎How Long We Keep Your Donor Information: link updates, replaced: :m:Special:MyLanguage/Data → Special:MyLanguage/Legal:Data
 
(92 intermediate revisions by 15 users not shown)
Line 1: Line 1:
<languages />{{DISPLAYTITLE:<translate><!--T:80--> Wikimedia Foundation Donor Privacy Policy</translate>|noerror}}
<noinclude>{{policy}}</noinclude>
{{policy-staff}}
__NOTOC__
{{hatnote|1=<translate><!--T:40-->
== Donor Bill of Rights ==
This page documents the Wikimedia Foundation's donor privacy policy. You can make a donation to the Wikimedia Foundation at <tvar name="donate">[[donate:|donate.wikimedia.org]]</tvar>.</translate>}}
We support the Donor Bill of Rights.
<translate>
== Welcome! == <!--T:2-->


<!--T:42-->
Philanthropy is based on voluntary action for the common good. It is a tradition of giving and sharing that is primary to the quality of life. To assure that philanthropy merits the respect and trust of the general public, and that donors and prospective donors can have full confidence in the not-for-profit organizations and causes they are asked to support, we declare that all donors have these rights:
Welcome to the Wikimedia Foundation's Donor Privacy Policy. The Wikimedia Foundation ("WMF") has put this policy in place to protect the privacy rights of our donors. We recognize that our donors care deeply about how their personal information is used and shared, and we value the privacy and security of our donors. This Donor Privacy Policy addresses our practices for collecting, using, maintaining, protecting, and disclosing donor information. Please carefully read this policy together with our [[<tvar name="tou">Special:MyLanguage/Policy:Terms of Use</tvar>|Terms of Use]]. '''We will never sell, trade, or rent your nonpublic personal information.'''


== Important Information == <!--T:3-->
# To be informed of the organization's mission, of the way the organization intends to use donated resources, and of its capacity to use donations effectively for their intended purposes.
# To be informed of the identity of those serving on the organization's governing board, and to expect the board to exercise prudent judgment in its stewardship responsibilities.
# To have access to the organization's most recent financial statements.
# To be assured their gifts will be used for the purposes for which they were given.
# To receive appropriate acknowledgment and recognition.
# To be assured that information about their donations is handled with respect and with confidentiality to the extent provided by law.
# To expect that all relationships with individuals representing organizations of interest to the donor will be professional in nature.
# To be informed whether those seeking donations are volunteers, employees of the organization or hired solicitors.
# To have the opportunity for their names to be deleted from mailing lists that an organization may intend to share.
# To feel free to ask questions when making a donation and to receive prompt, truthful and forthright answers.


<!--T:43-->
The text of this statement in its entirety was developed by the Association of Fundraising Professionals (AFP), Association for Healthcare Philanthropy (AHP), Council for Advancement and Support of Education (CASE), and the Giving Institute: Leading Consultants to Non-Profits.
'''By donating to WMF, you understand that your donation entails the collection, transfer, processing, storage, disclosure, and use of your information in or to the United States ("U.S."), and other locations that may have different or less stringent data protection laws than your country, for the purposes stated in this policy. If you do not agree with the terms of the Donor Privacy Policy and the WMF Terms of Use, please immediately discontinue use of Wikimedia Fundraising Services (as defined below).'''


== Definitions == <!--T:4-->
== The Wikimedia Donor Privacy Policy ==


<!--T:44-->
The content of this page is an official policy approved by the Wikimedia Foundation [[Board of Trustees]].
"'''WMF'''", "'''us'''", "'''we'''", and "'''our'''" refer to the [[<tvar name="wmf">foundationsite:</tvar>|Wikimedia Foundation]].
Wikimedia maintains the highest level of respect for the privacy of its donors. In furtherance of our commitment to honor your rights, we have developed this Donor Privacy Policy to guide our staff and volunteers on how they may and may not use your personal information.


<!--T:5-->
=== What information we collect===
"'''Donor Privacy Policy'''" and "'''policy'''" refers to this document.


<!--T:66-->
<u>Wikimedia.</u> We use personal information collected from donors for the purposes of processing payments and communicating with donors about Wikimedia as well as conducting the fundraising and other operations of Wikimedia. This information may include name, amount donated, address, telephone number, donor comments, e-mail address, and any other personal information provided to us (“Donor Data”). For donations by check, Donor Data also includes the data visible on the check.
"'''Personal Information'''" is information you provide us or information we collect from or about you through the Fundraising Services that identifies or could be used to identify you. For more information, please see [[<tvar name="1">Special:MyLanguage/Policy:Donor privacy policy#collected</tvar>|What Information We Collect]].


<!--T:81-->
As part of providing an online experience for donors, we may store various data that are collected as part of standard web operations (including things like user agent strings, ip addresses, referrer strings, and cookies). We may use this data for the purposes described in this policy.
"'''Wikimedia Fundraising Services'''" are Wikimedia Foundation fundraising sites, such as <tvar name="donate">[[donate:|donate.wikimedia.org]]</tvar>, as well as fundraising-related emails from WMF and fundraising-related banners on other Wikimedia Foundation sites.


== What This Policy Covers == <!--T:8-->
<u>Payment Processors and Other Service Providers.</u> Payment processors allow donors to give electronically using a payment services account (such as PayPal) or a credit card. These processors collect certain information from donors, and you should consult their privacy policies to determine their practices.


<!--T:45-->
To provide donors the best possible experience, we work with service providers and may share Donor Data and other information with them. Such service providers include, for example, collocation facilities and bandwidth providers as well as organizations that help non-profit organizations with fundraising.
This Donor Privacy Policy covers the collection, transfer, processing, storage, disclosure, and use of information collected from you during the process of making a donation to the Wikimedia Foundation and through your interactions with the Wikimedia Fundraising Services ("'''Donor Information'''"). This policy '''''<u>does not cover</u>''''' the collection, transfer, processing, storage, disclosure, or use of your information related to your use of other WMF projects or features, such as Wikipedia. For more information regarding WMF's privacy practices in that respect, please review our main [[<tvar name="priv">Special:MyLanguage/Policy:Privacy policy</tvar>|Privacy Policy]]. This policy also '''''<u>does not cover</u>''''' the collection, transfer, processing, storage, disclosure, and use of information collected from you during the process of making a donation to, or other interactions you may have with, a Wikimedia [[<tvar name="aff">:m:Special:MyLanguage/Wikimedia movement affiliates/Portal</tvar>|affiliate]], such as a [[<tvar name="chap">:m:Special:MyLanguage/Wikimedia chapters</tvar>|chapter]]. For more information about the privacy practices of those organizations, please review their respective privacy policies.</translate>
{{anchor|collected}}
<translate>
== What Information We Collect == <!--T:9-->


<!--T:46-->
===How we use that information===
As a result of your interaction with our donation pages, making a donation, participating in a donor survey or providing feedback related to donating, or otherwise using the Wikimedia Fundraising Services, WMF may collect certain Personal Information, such as your name, contact details (such as address, phone number, email address, identification number on government-issued ID), financial information (such as bank account number), device details (such as IP address, web browser user-agent information), demographic details (such as gender or age) and information about your interests and affiliations. We also collect such Personal Information about U.S. donors through publicly-available sources and other commercially available sources.


<!--T:67-->
<u>Donor Data</u>. Donor Data may be used for these kinds of purposes:
We also collect or automatically receive some other information, such as:


<!--T:10-->
* Distributing receipts and thanking donors for donations
* the web page that referred you to our donation pages;
* Informing donors about upcoming fundraising and other activities of Wikimedia
* the amount you donated;
* Internal analysis, such as research and analytics
* which of our pages you request and visit;
* Record keeping
* the date and time of each request you make to our donation pages;
* Reporting to applicable government agencies as required by law
* comments and suggestions from you;
* Surveys, metrics, and other analytical purposes
* correspondence between you and WMF; and
* Other purposes related to the fundraising operations
* any other information you provide to us.


<!--T:11-->
Unless otherwise stated, we do not publish, sell, trade, rent or exchange Donor Data. Anonymized donor information may be used for promotional and fundraising activities. Comments that are provided by donors may be publicly published and may be used in promotional materials. We may use available information to supplement the Donor Data to improve the information we use to drive our fundraising efforts. We allow donors the option to have their name publicly associated with their donation unless otherwise requested as part of the online donation process.
We keep Donor Information confidential, meaning that we will not share this information outside of the Wikimedia Foundation except as permitted by this policy or in de-identified form.


== Cookies and Other Tracking Technologies == <!--T:12-->
We use data gathered for payment processors and other service providers only for the purposes described in this policy.


<!--T:47-->
===Financial information===
As you interact with the Wikimedia Fundraising Services, we may use automatic data collection and other locally stored data technologies such as [[<tvar name="pixel">Special:MyLanguage/Policy:Privacy policy/Glossary of key terms#tracking-pixel</tvar>|tracking pixels]], [[<tvar name="js">Special:MyLanguage/Policy:Privacy policy/Glossary of key terms#javascript</tvar>|JavaScript]], [[<tvar name="cookies">Policy:Privacy policy/Glossary of key terms#cookies</tvar>|cookies]], and [[<tvar name="locstor">Special:MyLanguage/Policy:Privacy policy/Glossary of key terms#local-storage</tvar>|local storage]] to collect certain information about your device.


<!--T:82-->
It is our internal policy to limit access to financial information to professional staff and volunteers who need to process that information for the purposes described above. Personal financial information is not sold to or traded with other parties.
WMF uses cookies and other locally stored data to enhance your donation experience. We also use this information to create a safer online environment and gain a better understanding of donor preferences and interactions with the Wikimedia Fundraising Services. In general, cookies and other locally stored data are used to:


<!--T:63-->
We use partners to provide online payment processing services. The privacy policies of these organizations will be presented to you on their respective websites and typically also as part of your donation process. If you pay by credit card, we do not store your credit card information, bank account numbers, or other financial account data sent directly to those processing services.
* Help the Wikimedia Fundraising Services function and deliver new and relevant content to you;
* Provide you with a personalized experience by storing your preferences so that they can be used the next time you visit the Wikimedia Fundraising Services;
* Analyze the performance of donation processes so that we can better understand how they work and improve them for you and other WMF donors; and
* Analyze interactions with fundraising emails so we can refine and improve the donation process.


<!--T:68-->
Donations to Wikimedia made by check go to a bank lockbox. This provides a particularly high level of security and confidentiality.
For additional information about the use of cookies and similar tracking technologies, please see our [[<tvar name="1">Special:MyLanguage/Policy:Cookie statement</tvar>|Cookie statement]].


== Limiting Data Collection by Cookies and Other Tracking Technologies == <!--T:14-->
===Contact us===


<!--T:48-->
If you have questions about this Donor Privacy Policy or requests about the status and correctness of your donor data, please email donate<at>wikimedia.org or write to:
We believe that the collection of this data helps improve your donation experience; however, you may remove or disable some or all cookies through your browser settings. While not a comprehensive list, you can limit the use of cookies and other locally stored data on your device by:
{{Foundation address}}


<!--T:49-->
If you want to make a donation by check, please send the check to:
* Removing or disabling specific locally stored data on your browser's settings;
{{Lockbox address}}
* Using a browser that can block-third party cookies; and
* Installing a plugin to block locally stored data, if available.


<!--T:50-->
===Security===
Although donations to WMF via the Wikimedia Fundraising Services are possible without cookies and other locally stored data, please note that the removal or disabling of these features may affect your navigation of these sites and the personalization of your experience.


== Do Not Track == <!--T:15-->
We are committed to protecting donor personal information from unauthorized access, alteration, disclosure, or destruction. Among other things, we undertake a range of security practices, including measures to secure web access to sensitive data and undertake efforts to address security vulnerabilities for various tools and databases.


<!--T:51-->
=== Other Disclosures ===
WMF is committed to protecting the information we collect from all of our donors. We do not share this information with third parties, except in the specific circumstances described in the "Sharing Donor Information" section of this policy. Because we protect all donors in this manner, we do not change our behavior in response to a web browser's [[<tvar name="dnt">Special:MyLanguage/Policy:Privacy policy/Frequently asked questions#DNTFAQ</tvar>|Do Not Track]] signal. For information about DNT on Wikimedia sites, please visit the main Wikimedia Foundation [[<tvar name="2">Special:MyLanguage/Policy:Privacy policy/Frequently asked questions#DNTFAQ</tvar>|Privacy Policy FAQ]].


== How We Use Donor Information == <!--T:16-->
We may disclose information when required by law, when needed to protect our rights, privacy, safety, property, donors, or users, and when necessary to enforce our terms of service.


<!--T:52-->
=== Updates ===
We use Donor Information collected from you for general administrative purposes and to operate our fundraising processes. This includes:


<!--T:53-->
We may change the Donor Privacy Policy from time to time. Any and all changes will be reflected on this page. Substantive changes may also be announced through the standard mechanisms by which we communicate with our users and community. You should periodically check this page for any changes to the current policy.
* administering the Wikimedia Fundraising Services;
* updating you about upcoming fundraising and other WMF activities;
* thanking you for your donation; and
* setting language preferences.


<!--T:69-->
===Data Destination ===
We engage in the foregoing activities to manage our contractual relationship with you and for our legitimate interests in managing the Wikimedia Fundraising Services.


<!--T:70-->
Wikimedia is a worldwide organization. By donating, you consent to the transfer of the collected information to the United States and other places as may be necessary to carry out the purposes and objectives set out in this policy.
We also use Donor Information collected from you to comply with various obligations relating to recordkeeping and reporting. This includes:


<!--T:71-->
===Data Retention===
* distributing donation receipts;
* maintaining our internal records test features;
* complying with applicable tax requirements;
* reporting to applicable government agencies as required by applicable law; and
* communicating substantive changes to this policy and related policies.


<!--T:72-->
We seek to retain donor-related information only as needed to fulfill the purposes described in this policy unless a longer retention period is required by law or regulations. For example, tax laws in the United States and the State of Florida require the Foundation to keep contact information and contribution level of donors on file.
We engage in the foregoing activities to comply with our legal obligations and for our legitimate interests in managing our donation processes.


<!--T:73-->
===Scope===
And we use Donor Information collected from you to improve and update the Wikimedia Fundraising Services. This includes:


<!--T:74-->
This particular policy applies to the entity that is posting it. If you visit the Wikimedia donation page from a location that has a Chapter, you may be redirected to that Chapter’s website. Chapters are independent and may post different policies and practices depending on local law requirements and other considerations. Chapters who participate in the fundraising, however, are expected to adhere to the general principles set out in this policy.
* customizing content (for more detail, please see below);
* understanding donors' interest in WMF;
* improving our fundraising processes and efforts;
* conducting internal analyses, such as research and analytics;
* providing greater security; and
* conducting survey and metric reports.


<!--T:75-->
This policy does not address data from sources other than donations, such as edits or content contributions to projects.
We engage in the foregoing activities for our legitimate interests such as improving and protecting our fundraising processes and efforts.


<!--T:83-->
: ''Last Updated June, 2011''
Where processing is based on your consent, you may withdraw your consent at any time consistent with applicable law.
: <span class="plainlinks">[http://wikimediafoundation.org/w/index.php?title=Donor_privacy_policy&oldid=60022 ''Prior Policy (2009)'' ]</span> (for reference)

[[Category:English]]
== Providing Customized Services == <!--T:84-->

<!--T:85-->
To enhance your experience with Wikimedia Fundraising Services, we use your geographic location to customize the currency, content, and language of our banners. We may also customize what fundraising banners you see or messages you receive, depending on your interactions with past banners or messages.

== Accessing Your Donor Information == <!--T:17-->

<!--T:54-->
WMF works hard to accurately process and maintain Donor Information. If you would like to request to access, correct, update, suppress, restrict or delete the Personal Information we have about you, object to our processing of such Personal Information, or if you would like to request to receive an electronic copy of your Personal Information for purposes of transmitting it to another organization (to the extent this right to data portability is provided to you by applicable law), please let us know by contacting us at <tvar name="email">{{email|donate|wikimedia.org}}</tvar>. While we will make reasonable efforts to comply with your request consistent with applicable law, there are certain situations where we may not grant your request (such as when we cannot adequately verify your identity to give you access to Personal Information, when we are legally required to retain information, or when we are not technologically able to change or delete information at that time).

<!--T:76-->
All emails sent relating to Wikimedia Fundraising Services (with the exception of receipts or administrative notices) include an easy option to unsubscribe. If you would like to change your communication preferences, you (or an authorized representative) can let us know by contacting us at <tvar name="email">{{email|donate|wikimedia.org}}</tvar> at any time, or clicking the unsubscribe link in an email you receive from us.</translate>
{{anchor|sharing}}
<translate>

=== Sharing Donor Information === <!--T:18-->

<!--T:55-->
We understand that donors may wish to remain anonymous, and we strive to honor such requests and preserve your anonymity. However, in limited circumstances, we use and share Donor Information in the situations and under the conditions described below. We will never sell, trade, or rent your nonpublic Personal Information.

<!--T:19-->
''With your permission.'' With your consent, we may share your information for a particular purpose. For example, we may give donors the option to have their name publicly associated with their donation.

<!--T:20-->
''In anonymized form.'' We may publish or share anonymized Donor Information. For example, we may share anonymized data sets to show donation trends.

<!--T:21-->
''Comments and suggestions.'' We may publish any comments or suggestions that donors provide us, including in promotional materials, in anonymous form. In the rare instance that we do publish such information with donor attribution, we will do so only with your written (which may be electronic) consent.

<!--T:22-->
''Online payment processors.'' In order to facilitate online donations, we have partnered with payment processors. When you make a donation to WMF through the Wikimedia Fundraising Services, whether by credit card, debit card, or other methods of online payment, you transmit your payment data directly to the payment processor. We do our best to use contractual agreements and other mechanisms to help ensure that these processors maintain the confidentiality of your information. However, please be aware that WMF is not responsible for the privacy practices of these processors; please consult the privacy policies of the applicable payment processor for more information about its practices.

<!--T:23-->
''Other service providers.'' We use third-party service providers or contractors who assist with the organization and facilitation of the Wikimedia Fundraising Services, or who help run our fundraising operations or improve your experience with them. Some of our service providers ask us to post links to their privacy policies; a list of these service providers and links to their policies can be found [[<tvar name="1">Special:MyLanguage/Policy:Donor privacy policy/Supplement</tvar>|on this page]]. We may give access to your personal or non-personal information to these providers or contractors as needed to perform their services for us or to use their tools and services. While we cannot ensure the privacy or security of services provided by third-party providers, we do our best to use contractual agreements and other mechanisms to help ensure that these service providers or contractors treat your information consistent with, and in a manner no less protective than, the principles of this policy.

<!--T:24-->
''For legal reasons.'' On certain rare occasions, consistent with our legitimate interest and/or to comply with our legal obligations, we may access, preserve, or disclose to public authorities or other persons your Personal Information if we reasonably believe it is necessary to satisfy a valid and legally enforceable warrant, subpoena, court order, law or regulation, or other judicial or administrative order. If we believe that a particular request for disclosure of a donor's information is legally invalid or an abuse of the legal system, and the affected donor does not intend to oppose the disclosure themselves, we will do our best to fight the request. WMF is committed to notifying you via email at least ten (10) calendar days, when possible, before we disclose your personal information in response to a legal demand. However, we may only be able to provide notice if we are not legally restrained from contacting you, there is no credible threat to bodily harm that is created or increased by notifying you of the request, and you have provided us with an email address or other current contact information.

<!--T:25-->
Nothing in this policy is intended to limit any legal objections or defenses you may have to a third party's request (whether it be civil, criminal, or governmental) to disclose your information. We recommend seeking the advice of legal counsel immediately if such a request is made involving you.

<!--T:26-->
''If the organization is transferred.'' In the extremely unlikely event that ownership of all or substantially all of the WMF changes, or we go through a reorganization (such as a merger, consolidation, or acquisition), further to our legitimate interest, your Personal Information may be transferred. We will provide notice to you via the Wikimedia sites, and a notification on [[<tvar name="wma">mail:wikimediaannounce-l</tvar>|WikimediaAnnounce-L]] or similar mailing list, at least thirty (30) calendar days before any Personal Information is transferred or becomes subject to a different donor privacy policy.

<!--T:27-->
''To protect you, ourselves, or others.'' If necessary, we may need to use or share your personal information to: enforce or investigate potential violations of our [[<tvar name="tou">Special:MyLanguage/Policy:Terms of Use</tvar>|Terms of Use]], this Donor Privacy Policy, or any Foundation or user community-based policies; investigate and defend ourselves against legal threats or actions; prevent imminent and serious bodily harm or death to a person; protect our organization, employees, contractors, users, or the public; or detect, prevent, or otherwise assess and address potential spam, malware, fraud, abuse, unlawful activity, and security or technical concerns. We do so to manage our relationship with you, further to our legitimate interest, and/or to comply with our legal obligations.

== How We Protect Your Donor Information == <!--T:28-->

<!--T:56-->
To ensure a high level of security and confidentiality, WMF employs a variety of physical, administrative, and technical measures, policies, and procedures to help protect your personal and financial information from unauthorized access, use, alteration, disclosure, or destruction. However, you should be aware that no storage system or data transmission is 100% secure. Therefore, we cannot guarantee that our security protocols will not be compromised.

== How Long We Keep Your Donor Information == <!--T:29-->

<!--T:57-->
Once we receive Personal Information from you, we keep it for the shortest possible interval that is consistent with the maintenance, understanding, and improvement of the WMF donation process, and our obligations under applicable law.

<!--T:30-->
For information on Wikimedia's general data retention policies on the Wikimedia projects, please see our [[<tvar name="drg">Special:MyLanguage/Legal:Data retention guidelines</tvar>|Data Retention Guidelines]].

== Wikimedia Affiliates == <!--T:31-->

<!--T:58-->
Wikimedia [[<tvar name="aff">:m:Special:MyLanguage/Wikimedia movement affiliates/Models</tvar>|affiliates]] (such as [[<tvar name="chap">:m:Special:MyLanguage/Wikimedia local chapters</tvar>|chapters]]) are independent organizations, which sometimes conduct their own fundraising efforts. While some affiliates may give a portion of the funds they raise to WMF, WMF is not involved in processing donations made to these organizations. Wikimedia affiliates have different privacy policies and practices depending on local legal requirements and other considerations. This policy does not explicitly cover donations made to them.

== Changes to This Donor Privacy Policy == <!--T:32-->

<!--T:59-->
From time to time, it may be necessary to modify this policy in order to accurately reflect our data collection and disclosure practices. We reserve the right to do so, and we will provide notice of such changes in a reasonable manner and time. We encourage you to review the most up-to-date version of our Donor Privacy Policy periodically.

<!--T:77-->
Your continued use of the Wikimedia Fundraising Services after any effective date of a subsequent version of this Privacy Policy constitutes acceptance of that version of the Donor Privacy Policy on your part.
</translate>

== {{int string|Contact us}} ==

<translate><!--T:61-->
WMF values what our donors have to say about our services and our policies. If you have questions or suggestions about this policy, or the information collected under the Donor Privacy Policy, we want to hear from you. See our [[<tvar name="contact">Contact us</tvar>|Contact Us page]] for information on how to reach out. For more information about the privacy practices that govern the [<tvar name="wikim">//wikimedia.org</tvar> Wikimedia projects], please review our main [[<tvar name="priv">Special:MyLanguage/Policy:Privacy policy</tvar>|Privacy Policy]].

<!--T:78-->
If you are located in the European Economic Area and have questions about your personal data or would like to request to access, update, or delete it, you may contact our representative via email at <tvar name="email1">{{email|EUrepresentative.Wikimedia|twobirds.com}}</tvar>, or via mail at:</translate>

:: Bird & Bird GDPR Representative Ireland
:: 29 Earlsfort Terrace
:: Dublin 2
:: D02 AY28
:: Ireland<translate>

<!--T:86-->
: Main point of contact: <tvar name="1">Vincent Rezzouk-Hammachi</tvar>

<!--T:87-->
If you are an individual located in the United Kingdom, and have questions about your personal data or would like to request to access, update, or delete it, you may contact our representative via email at <tvar name="email1">{{email|UKrepresentative.Wikimedia|twobirds.com}}</tvar>, or via mail at:</translate>

:: Bird & Bird GDPR Representative Services UK
:: 12 New Fetter Lane
:: London
:: EC4A 1JP
:: United Kingdom<translate>

<!--T:88-->
: Main point of contact: <tvar name="1">Vincent Rezzouk-Hammachi</tvar>

<!--T:89-->
Our European Economic Area and United Kingdom Representative can only be contacted for queries in relation to data protection.

<!--T:90-->
Depending on your jurisdiction, you also may have the right to lodge a complaint with a supervisory authority competent for your country or region.

<!--T:91-->
'''This Donor Privacy Policy went into effect June 25, 2021. Previous versions can be found below:'''

<!--T:92-->
''[<tvar name="1">//foundation.wikimedia.org/w/index.php?title=Donor_privacy_policy/en&oldid=122990</tvar> Donor Privacy Policy (June 2019)]''

<!--T:36-->
''[<tvar name="1">//foundation.wikimedia.org/w/index.php?title=Donor_privacy_policy/en&oldid=122670</tvar> Donor Privacy Policy (February 2017)]''

<!--T:79-->
''[<tvar name="1">//foundation.wikimedia.org/w/index.php?title=Donor_policy/en&oldid=94164</tvar> Donor Privacy Policy (September 2011)]''

<!--T:37-->
''[<tvar name="1">//foundation.wikimedia.org/w/index.php?title=Donor_policy&oldid=62924</tvar> Donor Privacy Policy (July 2011)]''

<!--T:38-->
''[<tvar name="1">//foundation.wikimedia.org/w/index.php?title=Donor_privacy_policy&oldid=60022</tvar> Donor Privacy Policy (2009)]''
</translate>
<hr />
'''{{Disclaimer for translation|textonly=yes}}'''

{{Privacy policy navigation 2}}

[[Category:Policies{{#translation:}}]]
[[Category:Privacy policy{{#translation:}}]]

Latest revision as of 14:40, 26 March 2024

Welcome!

Welcome to the Wikimedia Foundation's Donor Privacy Policy. The Wikimedia Foundation ("WMF") has put this policy in place to protect the privacy rights of our donors. We recognize that our donors care deeply about how their personal information is used and shared, and we value the privacy and security of our donors. This Donor Privacy Policy addresses our practices for collecting, using, maintaining, protecting, and disclosing donor information. Please carefully read this policy together with our Terms of Use. We will never sell, trade, or rent your nonpublic personal information.

Important Information

By donating to WMF, you understand that your donation entails the collection, transfer, processing, storage, disclosure, and use of your information in or to the United States ("U.S."), and other locations that may have different or less stringent data protection laws than your country, for the purposes stated in this policy. If you do not agree with the terms of the Donor Privacy Policy and the WMF Terms of Use, please immediately discontinue use of Wikimedia Fundraising Services (as defined below).

Definitions

"WMF", "us", "we", and "our" refer to the Wikimedia Foundation.

"Donor Privacy Policy" and "policy" refers to this document.

"Personal Information" is information you provide us or information we collect from or about you through the Fundraising Services that identifies or could be used to identify you. For more information, please see What Information We Collect.

"Wikimedia Fundraising Services" are Wikimedia Foundation fundraising sites, such as donate.wikimedia.org, as well as fundraising-related emails from WMF and fundraising-related banners on other Wikimedia Foundation sites.

What This Policy Covers

This Donor Privacy Policy covers the collection, transfer, processing, storage, disclosure, and use of information collected from you during the process of making a donation to the Wikimedia Foundation and through your interactions with the Wikimedia Fundraising Services ("Donor Information"). This policy does not cover the collection, transfer, processing, storage, disclosure, or use of your information related to your use of other WMF projects or features, such as Wikipedia. For more information regarding WMF's privacy practices in that respect, please review our main Privacy Policy. This policy also does not cover the collection, transfer, processing, storage, disclosure, and use of information collected from you during the process of making a donation to, or other interactions you may have with, a Wikimedia affiliate, such as a chapter. For more information about the privacy practices of those organizations, please review their respective privacy policies.

What Information We Collect

As a result of your interaction with our donation pages, making a donation, participating in a donor survey or providing feedback related to donating, or otherwise using the Wikimedia Fundraising Services, WMF may collect certain Personal Information, such as your name, contact details (such as address, phone number, email address, identification number on government-issued ID), financial information (such as bank account number), device details (such as IP address, web browser user-agent information), demographic details (such as gender or age) and information about your interests and affiliations. We also collect such Personal Information about U.S. donors through publicly-available sources and other commercially available sources.

We also collect or automatically receive some other information, such as:

  • the web page that referred you to our donation pages;
  • the amount you donated;
  • which of our pages you request and visit;
  • the date and time of each request you make to our donation pages;
  • comments and suggestions from you;
  • correspondence between you and WMF; and
  • any other information you provide to us.

We keep Donor Information confidential, meaning that we will not share this information outside of the Wikimedia Foundation except as permitted by this policy or in de-identified form.

Cookies and Other Tracking Technologies

As you interact with the Wikimedia Fundraising Services, we may use automatic data collection and other locally stored data technologies such as tracking pixels, JavaScript, cookies, and local storage to collect certain information about your device.

WMF uses cookies and other locally stored data to enhance your donation experience. We also use this information to create a safer online environment and gain a better understanding of donor preferences and interactions with the Wikimedia Fundraising Services. In general, cookies and other locally stored data are used to:

  • Help the Wikimedia Fundraising Services function and deliver new and relevant content to you;
  • Provide you with a personalized experience by storing your preferences so that they can be used the next time you visit the Wikimedia Fundraising Services;
  • Analyze the performance of donation processes so that we can better understand how they work and improve them for you and other WMF donors; and
  • Analyze interactions with fundraising emails so we can refine and improve the donation process.

For additional information about the use of cookies and similar tracking technologies, please see our Cookie statement.

Limiting Data Collection by Cookies and Other Tracking Technologies

We believe that the collection of this data helps improve your donation experience; however, you may remove or disable some or all cookies through your browser settings. While not a comprehensive list, you can limit the use of cookies and other locally stored data on your device by:

  • Removing or disabling specific locally stored data on your browser's settings;
  • Using a browser that can block-third party cookies; and
  • Installing a plugin to block locally stored data, if available.

Although donations to WMF via the Wikimedia Fundraising Services are possible without cookies and other locally stored data, please note that the removal or disabling of these features may affect your navigation of these sites and the personalization of your experience.

Do Not Track

WMF is committed to protecting the information we collect from all of our donors. We do not share this information with third parties, except in the specific circumstances described in the "Sharing Donor Information" section of this policy. Because we protect all donors in this manner, we do not change our behavior in response to a web browser's Do Not Track signal. For information about DNT on Wikimedia sites, please visit the main Wikimedia Foundation Privacy Policy FAQ.

How We Use Donor Information

We use Donor Information collected from you for general administrative purposes and to operate our fundraising processes. This includes:

  • administering the Wikimedia Fundraising Services;
  • updating you about upcoming fundraising and other WMF activities;
  • thanking you for your donation; and
  • setting language preferences.

We engage in the foregoing activities to manage our contractual relationship with you and for our legitimate interests in managing the Wikimedia Fundraising Services.

We also use Donor Information collected from you to comply with various obligations relating to recordkeeping and reporting. This includes:

  • distributing donation receipts;
  • maintaining our internal records test features;
  • complying with applicable tax requirements;
  • reporting to applicable government agencies as required by applicable law; and
  • communicating substantive changes to this policy and related policies.

We engage in the foregoing activities to comply with our legal obligations and for our legitimate interests in managing our donation processes.

And we use Donor Information collected from you to improve and update the Wikimedia Fundraising Services. This includes:

  • customizing content (for more detail, please see below);
  • understanding donors' interest in WMF;
  • improving our fundraising processes and efforts;
  • conducting internal analyses, such as research and analytics;
  • providing greater security; and
  • conducting survey and metric reports.

We engage in the foregoing activities for our legitimate interests such as improving and protecting our fundraising processes and efforts.

Where processing is based on your consent, you may withdraw your consent at any time consistent with applicable law.

Providing Customized Services

To enhance your experience with Wikimedia Fundraising Services, we use your geographic location to customize the currency, content, and language of our banners. We may also customize what fundraising banners you see or messages you receive, depending on your interactions with past banners or messages.

Accessing Your Donor Information

WMF works hard to accurately process and maintain Donor Information. If you would like to request to access, correct, update, suppress, restrict or delete the Personal Information we have about you, object to our processing of such Personal Information, or if you would like to request to receive an electronic copy of your Personal Information for purposes of transmitting it to another organization (to the extent this right to data portability is provided to you by applicable law), please let us know by contacting us at donate@wikimedia.org. While we will make reasonable efforts to comply with your request consistent with applicable law, there are certain situations where we may not grant your request (such as when we cannot adequately verify your identity to give you access to Personal Information, when we are legally required to retain information, or when we are not technologically able to change or delete information at that time).

All emails sent relating to Wikimedia Fundraising Services (with the exception of receipts or administrative notices) include an easy option to unsubscribe. If you would like to change your communication preferences, you (or an authorized representative) can let us know by contacting us at donate@wikimedia.org at any time, or clicking the unsubscribe link in an email you receive from us.

Sharing Donor Information

We understand that donors may wish to remain anonymous, and we strive to honor such requests and preserve your anonymity. However, in limited circumstances, we use and share Donor Information in the situations and under the conditions described below. We will never sell, trade, or rent your nonpublic Personal Information.

With your permission. With your consent, we may share your information for a particular purpose. For example, we may give donors the option to have their name publicly associated with their donation.

In anonymized form. We may publish or share anonymized Donor Information. For example, we may share anonymized data sets to show donation trends.

Comments and suggestions. We may publish any comments or suggestions that donors provide us, including in promotional materials, in anonymous form. In the rare instance that we do publish such information with donor attribution, we will do so only with your written (which may be electronic) consent.

Online payment processors. In order to facilitate online donations, we have partnered with payment processors. When you make a donation to WMF through the Wikimedia Fundraising Services, whether by credit card, debit card, or other methods of online payment, you transmit your payment data directly to the payment processor. We do our best to use contractual agreements and other mechanisms to help ensure that these processors maintain the confidentiality of your information. However, please be aware that WMF is not responsible for the privacy practices of these processors; please consult the privacy policies of the applicable payment processor for more information about its practices.

Other service providers. We use third-party service providers or contractors who assist with the organization and facilitation of the Wikimedia Fundraising Services, or who help run our fundraising operations or improve your experience with them. Some of our service providers ask us to post links to their privacy policies; a list of these service providers and links to their policies can be found on this page. We may give access to your personal or non-personal information to these providers or contractors as needed to perform their services for us or to use their tools and services. While we cannot ensure the privacy or security of services provided by third-party providers, we do our best to use contractual agreements and other mechanisms to help ensure that these service providers or contractors treat your information consistent with, and in a manner no less protective than, the principles of this policy.

For legal reasons. On certain rare occasions, consistent with our legitimate interest and/or to comply with our legal obligations, we may access, preserve, or disclose to public authorities or other persons your Personal Information if we reasonably believe it is necessary to satisfy a valid and legally enforceable warrant, subpoena, court order, law or regulation, or other judicial or administrative order. If we believe that a particular request for disclosure of a donor's information is legally invalid or an abuse of the legal system, and the affected donor does not intend to oppose the disclosure themselves, we will do our best to fight the request. WMF is committed to notifying you via email at least ten (10) calendar days, when possible, before we disclose your personal information in response to a legal demand. However, we may only be able to provide notice if we are not legally restrained from contacting you, there is no credible threat to bodily harm that is created or increased by notifying you of the request, and you have provided us with an email address or other current contact information.

Nothing in this policy is intended to limit any legal objections or defenses you may have to a third party's request (whether it be civil, criminal, or governmental) to disclose your information. We recommend seeking the advice of legal counsel immediately if such a request is made involving you.

If the organization is transferred. In the extremely unlikely event that ownership of all or substantially all of the WMF changes, or we go through a reorganization (such as a merger, consolidation, or acquisition), further to our legitimate interest, your Personal Information may be transferred. We will provide notice to you via the Wikimedia sites, and a notification on WikimediaAnnounce-L or similar mailing list, at least thirty (30) calendar days before any Personal Information is transferred or becomes subject to a different donor privacy policy.

To protect you, ourselves, or others. If necessary, we may need to use or share your personal information to: enforce or investigate potential violations of our Terms of Use, this Donor Privacy Policy, or any Foundation or user community-based policies; investigate and defend ourselves against legal threats or actions; prevent imminent and serious bodily harm or death to a person; protect our organization, employees, contractors, users, or the public; or detect, prevent, or otherwise assess and address potential spam, malware, fraud, abuse, unlawful activity, and security or technical concerns. We do so to manage our relationship with you, further to our legitimate interest, and/or to comply with our legal obligations.

How We Protect Your Donor Information

To ensure a high level of security and confidentiality, WMF employs a variety of physical, administrative, and technical measures, policies, and procedures to help protect your personal and financial information from unauthorized access, use, alteration, disclosure, or destruction. However, you should be aware that no storage system or data transmission is 100% secure. Therefore, we cannot guarantee that our security protocols will not be compromised.

How Long We Keep Your Donor Information

Once we receive Personal Information from you, we keep it for the shortest possible interval that is consistent with the maintenance, understanding, and improvement of the WMF donation process, and our obligations under applicable law.

For information on Wikimedia's general data retention policies on the Wikimedia projects, please see our Data Retention Guidelines.

Wikimedia Affiliates

Wikimedia affiliates (such as chapters) are independent organizations, which sometimes conduct their own fundraising efforts. While some affiliates may give a portion of the funds they raise to WMF, WMF is not involved in processing donations made to these organizations. Wikimedia affiliates have different privacy policies and practices depending on local legal requirements and other considerations. This policy does not explicitly cover donations made to them.

Changes to This Donor Privacy Policy

From time to time, it may be necessary to modify this policy in order to accurately reflect our data collection and disclosure practices. We reserve the right to do so, and we will provide notice of such changes in a reasonable manner and time. We encourage you to review the most up-to-date version of our Donor Privacy Policy periodically.

Your continued use of the Wikimedia Fundraising Services after any effective date of a subsequent version of this Privacy Policy constitutes acceptance of that version of the Donor Privacy Policy on your part.

Contact us

WMF values what our donors have to say about our services and our policies. If you have questions or suggestions about this policy, or the information collected under the Donor Privacy Policy, we want to hear from you. See our Contact Us page for information on how to reach out. For more information about the privacy practices that govern the Wikimedia projects, please review our main Privacy Policy.

If you are located in the European Economic Area and have questions about your personal data or would like to request to access, update, or delete it, you may contact our representative via email at EUrepresentative.Wikimedia@twobirds.com, or via mail at:

Bird & Bird GDPR Representative Ireland
29 Earlsfort Terrace
Dublin 2
D02 AY28
Ireland
Main point of contact: Vincent Rezzouk-Hammachi

If you are an individual located in the United Kingdom, and have questions about your personal data or would like to request to access, update, or delete it, you may contact our representative via email at UKrepresentative.Wikimedia@twobirds.com, or via mail at:

Bird & Bird GDPR Representative Services UK
12 New Fetter Lane
London
EC4A 1JP
United Kingdom
Main point of contact: Vincent Rezzouk-Hammachi

Our European Economic Area and United Kingdom Representative can only be contacted for queries in relation to data protection.

Depending on your jurisdiction, you also may have the right to lodge a complaint with a supervisory authority competent for your country or region.

This Donor Privacy Policy went into effect June 25, 2021. Previous versions can be found below:

Donor Privacy Policy (June 2019)

Donor Privacy Policy (February 2017)

Donor Privacy Policy (September 2011)

Donor Privacy Policy (July 2011)

Donor Privacy Policy (2009)


Please note that in the event of any differences in meaning or interpretation between the original English version of this content and a translation, the original English version takes precedence.

Privacy-related pages