Last Updated: November 2018
1. Personal Data You Provide to Us.
We may collect your personal data when you submit it to us (including though the Site). Data that we may collect includes your:
- Mailing address(es).
- Email address(es).
- Telephone number(s).
- Credit card information (if you make a donation).
- Your donation history.
- Data you provide in connection with any of our surveys.
- Technical data, including internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device identifiers, geolocation information, and other technology on the devices you use to access our Site.
We may collect personal data from various sources, including:
- The Site and other web properties via Google Analytics.
- Social media.
- DMP white-mail mail processing center; and.
- Third parties such as AlumniFinder, Wiland and WealthEngine.
Upon receiving your personal data, we create a user profile linked to that personal data. If the same personal data is provided in connection with future donations, actions or activities on the Site, such actions may be added to your user profile. As described below, you may review and update such information at any time.
The following list includes the most common ways that you may provide your personal data to us and the types of personal data that we may collect in these ways:
Registration. We do not ask that you register or enter any personal data to access or use most areas of the Site. However, you may choose to subscribe to certain newsletters or bulletins distributed by Yosemite Conservancy, or to join the Conservancy’s mailing list. To do so, you may be required to enter certain personal data, including your email address and mailing address. You may also have the option to provide us with your telephone number(s).
Contests. If we run a contest on the Site, it will be accompanied by a set of rules. The rules for each contest will specify how the information gathered from you for entry will be used and disclosed.
Donations and gifts. In order to make a donation, or a memorial or honor gift (i.e., a donation in someone else’s name), through the Site, you will be required to input your name, address, credit card information and email address. If you request notification of the memorial or honor gift to the honoree or other party, you will also need to provide the name and email address of the individual(s) to be notified. For honor gifts, Yosemite Conservancy will use your personal data and the honoree’s personal data that you provided to fulfill the gift membership. For memorial gifts, Yosemite Conservancy will use your personal data to fulfill the membership, and will use the data of the notified individual(s) for notification purposes. By submitting personal data about others, you represent and warrant that you have full authority to do so.
When you donate to Yosemite Conservancy via the Site, your donation information (i.e., your name, address, donation amount, credit card number, credit card expiration date, and any other submitted information as applicable) is encrypted and transmitted via a secure connection. The Conservancy uses your credit card information only for the purpose of processing your donation. We will not disclose credit card information except as necessary to process your donation or as required by law or legal process.
Communications between you and Yosemite Conservancy. As described in this Policy, you may contact the Conservancy or subscribe to newsletters and other mailings, and we may respond to your inquiries or subscription requests. Additionally, when you provide us with your email address and mailing address, we may contact you to ask you to become a donor to Yosemite Conservancy.
Other purposes. In addition to the above, Yosemite Conservancy may process personal data for other purposes for which either we or our client(s) will provide notice to you at the time of collection.
2. Cookies, Tracking and Analytics.
When you visit any website (including our Site), it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the Site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.
The Site also uses third-party tracking and ad tools, such as Google Ads, Facebook, and Google Analytics.
Using the settings of your Internet or mobile browser, you can choose to have your computer warn you each time a cookie is being sent. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, if you choose to disable any cookies, some features of the Site may become disabled, and some aspects of the Site may not function properly.
Deleting cookies does not necessarily delete Flash objects. You can learn more about Flash objects, including how to control and disable them, through the Adobe interface. If you choose to delete Flash objects from the Site, then you may not be able to access and use all or part of the Site. We also may use pixel tags to tell us what parts of the Site you have visited, to measure the effectiveness of any searches you do on the Site, or to interact with analytical tools or other marketing tools that gather data and usage information.
Strictly Necessary Cookies
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions you take that amount to a request for services, such as setting your privacy preferences, logging in, or completing forms.
You can set your browser to block or alert you about these cookies, but some parts of the Site may then not work properly. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of the Site. They help us know which pages are the most and least popular, and see how visitors move around the Site.
All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited the Site, and will not be able to monitor its performance.
These cookies enable the Site to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.
If you do not allow these cookies then the Site may not function properly.
These cookies may be set through the Site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites. These cookies uniquely identify your browser and device. If you do not allow these cookies, you will experience less targeted advertising
3. How You Can Access and Manage Your Information.
You can review and update certain elements of your personal data, and can also opt out of any type of communication from Yosemite Conservancy, at any time. This section provides information on how to do this.
You can opt out of any type of communication at any time by contacting firstname.lastname@example.org.
You can unsubscribe at any time from specific email publications that you are receiving from us by clicking a link that appears in the email publication itself.
You can choose not to receive requests to become a donor by contacting us at email@example.com.
If you do not want us to collect information about your geographic location, you must disable the technology that transmits this information.
4. Rights of Individuals in the European Union.
This section applies only to individuals in the European Union (the “EU”).
With respect to the personal data we collect directly from you, we are the “data controller,” as defined in the European Union’s General Data Protection Regulation (the “GDPR”).
We will only use your personal data when we have a lawful basis to do so under the GDPR. Usually, we will use your personal data in the following circumstances:
- When it is necessary for our legitimate interests, and your interests and fundamental rights do not override those interests.
- When we need to comply with a legal or regulatory obligation,
- When we have obtained your consent.
Under the GDPR, individuals in the European Union (“EU Individuals”) have certain rights in relation to their personal data, which are summarized below. These rights are subject to your exercising them in good faith and are subject to our legitimate interests or other valid basis to continue processing your personal data, in accordance with our policies and applicable law.
If asked by an EU Individual and if we are obligated to do so under applicable law, we will inform that individual about whether we are processing his/her personal data. If we are processing such EU Individual’s personal data, we will provide access to the personal data that we have about that individual. If you request additional copies of your personal data, we may charge you a reasonable fee.
Rectification (i.e., Correction)
If the personal data we hold about an EU Individual is inaccurate or incomplete, that individual may ask us to have it corrected.
EU Individuals may request that we erase (i.e., delete or remove) their personal data in certain circumstances. If you are legally entitled to erasure, and if we have shared such personal data with third parties, we will take reasonable steps (taking into account available technology and the cost of implementation) to inform such third parties of your request, to the extent we are required to do so by applicable law.
Restriction of Processing
EU Individuals have the right to restrict the processing of their personal data in certain circumstances, such as if they contest the accuracy of that personal data, if the processing of the personal data is unlawful, or if we no longer need the personal data for our business purposes. If you are legally entitled to restriction, and if we have shared your personal data with others, we will use reasonable efforts to inform such third parties of your request, if we are required to do so.
EU Individuals may ask to receive their personal data from us, where the legal basis of our processing is their consent, and where we carry out the processing of their personal data by automated means. If EU Individuals so request, we may transmit their personal information directly to another organization if it would be technically feasible to do so.
Objection to Processing
EU Individuals may object to the processing of their personal data where we are relying on a legitimate interest (or those of a third party). As noted above, you also have the right to object to (i.e., opt out of) our processing of your personal data for direct marketing purposes.
Automated Decision-Making and Profiling
EU Individuals have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and Yosemite Conservancy.
Processing of Special Categories of Personal Data
There are certain types of personal data that require a higher level of protection, known as “special categories” of personal data under the GDPR. We do not process special categories of personal data unless (a) we have obtained such individuals’ explicit consent or (b) we are otherwise legally permitted to do so.
In certain circumstances, EU Individuals have the right to withdraw their consent to our processing of their personal data. However, withdrawal of consent will not affect the lawfulness of any processing that had been carried out before consent is withdrawn. Moreover, if we rely on another legal basis (e.g., legitimate interest) to process your personal data, we may continue to process your personal data in accordance with such other legal basis even after you withdraw your consent. If you decide to withdraw your consent, we may not be able to provide certain services to you.
Please note that where we rely on consent to use your personal data, all users worldwide have the right to withdraw that consent at any time. This includes the option to unsubscribe from our email list at any time or to contact us to request to be excluded from our online campaign promotion lists.
EU Individuals who wish to exercise any of the rights they have under the GDPR should contact our data privacy team at firstname.lastname@example.org. We may need to request specific information to help us confirm your identity, so that your personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request.
Generally, EU Individuals will not have to pay a fee to exercise the rights described above. However, we may charge a reasonable fee if your request is unfounded, repetitive or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
EU Individuals may lodge a complaint with the appropriate regulatory body or supervisory authority in the country where they reside, where they work, or in the place of the alleged infringement of the law.
5. Sharing of Your Personal Data.
Yosemite Conservancy does not disclose your personal data to any third parties, except (i) to manage the Site and our database with the help of service providers (who are obligated to maintain its confidentiality), (ii) to send you communications about your interactions with us or about features of the Site, including any future changes to this Policy, or (iii) as required by law or requested by governmental or law enforcement authorities, subpoena, court order or discovery request, or when we otherwise believe in good faith that such disclosure is appropriate to enforce our Terms of Service or in connection with any activity that may violate the law or the rights of others, threaten the safety or security of any person or property (including the Site) or expose us to liability, or (iv) sometimes shares or rents its postal mailing list to other nonprofit organizations that we feel you may be interested in hearing from. Please contact us at email@example.com if you do not wish us to share your postal address for these mailings. Be sure to include your name, address and email address to help expedite your request.
6. Retention of Personal Data.
We may retain your personal data for as long as is necessary to fulfill the purposes for which we have collected it, including for the purposes of satisfying any legal, regulatory, accounting, reporting, insurance, professional indemnity, internal policy or other requirements.
We may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes. In such cases, we may use this information indefinitely without further notice to you.
7. Other Websites.
This Policy applies only to the Site. If you visit any unaffiliated website linked to the Site (for example, Twitter, Facebook or other social media sites), you are subject to that entity’s own privacy policies, which we do not control or monitor. You should review the privacy policies of all third-party website before you visit them. Yosemite Conservancy has not reviewed all of the sites linked to the Site, and we make no representations or warranties as to the privacy practices, functioning or content of any site linked to the Site.
8. International Use.
We are based in the United States and our computer servers are located in the United States. Accordingly, all personal data in our possession and control is collected and processed by us in the United States. Any party that provides personal data to us is thereby transferring such data to the United States.
Access to the Site from countries or territories where such access is illegal or contrary to applicable rules or regulations is prohibited. Those who access the Site from outside the United States do so of their own volition and are responsible for compliance with local laws, rules and regulations.
9. Children’s Privacy.
The Site is not targeted toward, and we do not seek or desire to collect information from, children under the age of 13 in the United States (or age 16 outside the United States). Therefore, we will not knowingly request information from persons under such ages. Please do not provide any personal data to us for any reason unless you are at least the age of 13 in the United States (or age 16 outside the United States), and please caution your children not to do so.
If a child under the age of 13 in the United States (or age 16 outside the United States) has provided personal data to us through the Site without verifiable parental consent, a parent or guardian may inform us at firstname.lastname@example.org, and we will use commercially reasonable efforts to delete such information within a reasonable period of time, subject to applicable law and this Policy.
10. California Privacy Rights / “Do Not Track” Signals.
Yosemite Conservancy does not track its users over time and across third-party websites to provide targeted advertising, and therefore does not respond to Do Not Track (DNT) signals. However, some third-party sites do keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. If you are visiting such sites, certain web browsers allow you to set the DNT signal on your browser so that third parties (particularly advertisers) know that you do not want to be tracked. Consult your web browser’s “help” feature for instructions on how to set the DNT signal.
Third parties that have content embedded on the Conservancy’s website, such as a social media feature, may set cookies on a user’s browser and/or obtain information about the fact that a web browser visited the Site from a certain IP address. The Conservancy does not control or monitor such practices. You should contact such third parties directly to opt out.
11. Security Measures.
We have implemented appropriate technical and organizational measures to ensure a level of security of personal data appropriate to the risk.
13. How You Can Reach Us.
Last Updated: November 2018
To read about State Nonprofit Disclosures, please click here.