Privacy Policy

Protecting your privacy is important to AquaAction (“AquaAction” or “we”). That's why we take the confidentiality of Personal Information (as defined below) of our members, employees, volunteers, and website users (the “Website”) seriously, along with compliance with applicable laws in this regard. This privacy policy (“the policy”) details our commitment and the measures taken to ensure the security of your Personal Information.

By using our aquaaction.org site, you agree to the terms of this policy.

1Scope of this policy

“Personal Information” means any information relating to an individual that identifies or can reasonably be linked directly or indirectly to that individual. The policy applies to Personal Information that AquaAction holds or controls, including information collected during the use of the Website and that of contractors interacting with AquaAction.

The policy also applies to Personal Information collected by AquaAction concerning its employees, volunteers, or candidates for a volunteer or employee position.

2Types of Personal Information collected

Personal Information collected automatically

When you visit aquaaction.org, we automatically collect information about your device and your interaction with our Website through Google Analytics. This includes the following Personal Information:

IP address
Approximate location associated with the IP address
Various hardware and software details
Content viewed on our website
Links clicked while navigating the website

Personal Information collected non-automatically

Online participation form

Personal Information of some Website users is also collected via the online participation form. This includes:

First name
Last name
Email
Any other Personal Information you voluntarily communicate to us

Donors

Personal Information on donors is collected, which includes, as applicable:

First name
Last name
Personal address
Email

You will also be subject to the policy and terms of use of our Donorbox service provider for your online payment method.

Entrepreneurs

Personal Information about contractors interacting with AquaAction is collected, via the “AquaEntrepreneur” application form or otherwise, which includes, as applicable:

First name
Last name
Personal address
Email
Phone number
Business project descriptions
Entrepreneurs' CVs
Other information required for application evaluation

Employees, volunteers and applicants

Personal Information about our employees and volunteers is collected, and from people applying for either of these titles, which includes, as applicable:

First name
Last name
Personal address
Email
Phone number
Personal banking details (for employees only)
CV submitted by applicants
Other Personal Information required for the supervision of employees and volunteers

Partners

Personal Information about various partners of AquaAction may also be collected from time to time.

Consent

Generally, AquaAction will seek your consent at the time of collecting your Personal Information, unless it is required or otherwise authorized by law. Your consent is presumed when you voluntarily submit Personal Information through a form, online or otherwise.

3Use of collected Personal Information

Please note that we only collect Personal Information that helps us achieve the purposes set out in this policy. We will not collect additional Personal Information without informing you in advance.

Purposes

We use the Personal Information collected by the Website to:

Send targeted communications via our newsletter;
Conduct statistical analyses to improve the website;
As part of a security protocol for Personal Information;
Respond to your communication requests.

Other purposes for which AquaAction collects your Personal Information are determined before or at the time of collection. AquaAction may use Personal Information about you to:

Enable you to make a donation;
Evaluate and, if appropriate, fund your business projects;
Establish and maintain our relationship with you;
Process your job application or volunteer position application;
Prevent errors and fraud;
Comply with legal requirements.

When you are an employee of AquaAction, it may use your Personal Information to:

Supervise your work;
Process your pay;
Perform pre-employment checks;
Verify your justification for absence;
Meet regulatory requirements related to occupational health and safety.

Communication to third parties

Occasionally, we will communicate Personal Information about contractors interacting with us to third parties, including lawyers and accountants who may advise these contractors. In all cases, we will obtain prior consent from the concerned contractor for this communication.

We also communicate Personal Information to third-party IT service providers, as required for them to provide such services to us.

4Security measures

AquaAction has implemented a series of security measures to protect your Personal Information against loss or theft and against unauthorized access, disclosure, reproduction, use, and modification, taking into account their sensitivity and the purposes for which they are used.

AquaAction is also committed to taking the necessary measures to ensure that all its employees are informed about the content of this policy and trained in best practices in protecting Personal Information. Your Personal Information is stored in a secure and controlled environment.

We use up-to-date TLS protocols to encrypt information exchanges across the Website, as well as robust security measures with two-factor authentication to prevent unauthorized access.

We commit to not selling or sharing your Personal Information with third parties for cross-context behavioral advertising, except as required by law or in legal proceedings. We may disclose to any member of our organization the user's Personal Information that they reasonably need to achieve the purposes set out in this policy.

Data Storage and Processing

User Personal Information is accessed, processed, and stored on secure servers located within the United States. Any transmission of information across state lines or to third-party service providers is conducted under strict confidentiality agreements and in compliance with applicable US federal and state privacy laws.

Duration of Personal Information storage

We store Personal Information for as long as necessary to fulfill the purposes outlined in this policy, or for a maximum period required by applicable tax and regulatory statutes. We will ensure that users are notified if their Personal Information is retained longer than required.

In case of incidents involving Personal Information

If we suspect a privacy incident that could affect Personal Information, we take reasonable steps to reduce the risks of harm and prevent similar incidents from occurring in the future.

If we become aware of a security breach involving your Personal Information that poses a risk of harm, we commit to notifying affected individuals and applicable state or federal regulatory authorities (such as state Attorneys General) in accordance with governing US data breach notification statutes.

5Your rights

User rights

Depending on your state of residence, you have specific privacy rights regarding your Personal Information under applicable US state and federal privacy laws:

To be informedTo receive clear notice of the collection, use, retention, and sharing of your Personal Information (as set out in this policy).

Access / Right to KnowTo access your Personal Information and confirm what categories or specific pieces of information we have collected and how they are used.

Opt-out of Sale / SharingTo opt out of the sale of your Personal Information or its sharing for targeted behavioral advertising.

CorrectionTo request the correction of inaccurate or incomplete Personal Information maintained in our records.

Deletion / ErasureTo request the deletion of your Personal Information, subject to applicable legal retention exceptions.

PortabilityTo receive your Personal Information in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact our Privacy Officer:

Privacy Officer

Soula Chronopoulos

Address: AquaAction
US ADDRESS
United States
Email: soula@aquaaction.org
Website: us.aquaaction.org

Right of access and rectification

AquaAction recognizes the importance of accurate, complete, and up-to-date Personal Information and takes reasonable measures to ensure the accuracy of the information it uses or communicates.

However, it is your responsibility to inform AquaAction of any significant changes to your Personal Information that may occur and to ensure that all Personal Information in your account is accurate, by making relevant changes directly in your account via our website or by contacting AquaAction by email at the address indicated above.

Consent and withdrawal of consent

You may visit our website without revealing your identity by adjusting your browser settings to disable cookies and using private browsing. However, some features may require the collection of certain Personal Information.

Minors

Our website is not directed to children under 13 years of age. In compliance with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect Personal Information from children under 13 without obtaining verifiable parental consent. If you are a parent or legal guardian and believe that a child under 13 has provided us with Personal Information without parental consent, please contact us immediately so we can promptly delete such information. Furthermore, we do not knowingly sell or share the personal information of consumers under 16 years of age without explicit opt-in consent.

External links

Our website may contain links to other websites. We are not responsible for their privacy practices.