2. Information We Collect About You
2.1 Website Visitors
When you visit the Website, we collect the following information (collectively, “Website Visitor Information”):
We collect certain information from you when you provide it to us directly. Specifically:
Making a donation. When you make a donation on the site, you may provide us with you first and last name, billing address, shipping address, phone number, email address, employer name, credit card number, expiration date, security code, bank name, bank routing number, bank checking account number, and/or PayPal account information so that the donation can be processed.
Forms. Users of this Website may be asked to complete registration forms for actions such as making a donation. During registration, a user is required to give certain information (such as name and email address). To complete these forms, you must provide contact information (like name, shipping address, and phone number) and financial information (like credit card number, expiration date). This information is used for billing purposes in processing donations. If we have trouble processing a donation, we’ll use this information to contact you. Information collected in these forms is securely stored in our third-party CRM database (Salesforce).
IP Address. Your IP Address is a number that is automatically assigned to your computer by your Internet Service Provider. An IP Address may be identified and logged automatically in our server log files whenever a user accesses the Site, along with the time of the visit and the pages visited.
Requesting User Support. If you email us with a support request or comments at a SFAF.org email address published on our Website, you may provide us with information so that we can respond, such as your contact information and a description of the issue.
From Your Browser or Device
Whenever you use any online service, certain information gets created and logged automatically; the same is true when you visit our Website. Here’s what we collect:
Log. When you visit our Website (whether on your computer or on a mobile device), we gather certain information automatically and store it in log files. This information includes IP addresses, the Internet Service Provider, referring/exit pages, date/time stamps, clickstream data, login/logout times, and duration of time spent on our Website.
Device. In addition to log data, we collect information about the device you’re using to access the Website; this includes the type of device, browser type, operating system, settings, unique device identifiers, and crash data that helps us understand when something goes wrong.
Pixels. San Francisco AIDS Foundation uses Facebook, Instagram and Twitter pixels to reach website visitors after they have left this site. Visitors to this site may see San Francisco AIDS Foundation advertisements while using Facebook, Instagram or Twitter.
2.2 Other Services
3. Use of Your Data
3.1 Website Visitor Information
We use the data we collect about visitors to our Website as follows:
To provide and maintain the Website.
We use the information we collect to provide or serve our Website, and maintain and improve the Website, including understanding the content that our visitors find valuable.
To provide information you’ve requested.
We will inform you – via the email address you provide us – of other initiatives, news, requests for applications, and job opportunities related to SFAF.
To communicate with you.
We may also use your information to directly communicate with you about your use of the Website or to respond to an email or submission from you.
To process your donation.
We will use the information to process your donation. All Information collected in for this purpose is securely stored in our third-party CRM database (Salesforce).
3.2 Other Service Information
We use information from Other Services to understand the particular materials that we posted or linked to that users of those Other Services found most valuable and to inform our marketing efforts.
Our Website does not include advertisements for third-party goods and services. However, we may use advertising to promote the products, programs, and services that we provide and/or support. Subject to your settings, we may use your email address or cookies to direct ads for our own programs to you on third-party sites. Additionally, we do share aggregated demographic information with our partners and advertisers. This is not linked to any personal information that can identify any individual person.
4. Sharing Your Data
Except in the instances listed below, we will not disclose your personal information to others unless you consent to it, nor will we ever sell your personal information to advertisers or other third parties. However, we share your information in the following ways:
Third-Party Service Providers. SFAF works with vendors, service providers, and other partners that help us provide the Website by providing services on our behalf. These services are, for example, sending emails, performing statistical analysis, database management services, database hosting, providing customer support software, and security. In the course of providing these services, our service providers may have access to your information, including personal information.
Legal and Safety Reasons. We may disclose information if we believe in good faith that it’s necessary (a) in connection with any legal investigation; (b) to comply with relevant laws or to respond to subpoenas or warrants served on us; (c) to protect or defend our rights or property or users of our Services or others; and/or (d) to investigate or assist in preventing any violation of the law.
5. Choices and Rights Over Your Personal Data
You have the following rights with respect to the personal data we have about you:
Delete data. You can ask us to erase or delete all or some of your personal data.
Change or correct personal data. You can also ask us to change, update, or fix your data in certain cases, particularly if it’s inaccurate.
Object to, limit, or restrict use of personal data. You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).
Right to access and/or take your personal data. You can ask us for a copy of your personal data in machine-readable form.
The right not to be discriminated against. SFAF will not discriminate against you in any manner for exercising any of the above rights with respect to your personal data.
Contact us at privacyofficer@SFAF.org if you have questions or would like to exercise any rights you have under applicable law to control your personal data. If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.
(b) Additional Controls
You have choices available to you through the device you use to access the Website. For example, your browser may let you control cookies and other types of local data storage. Where we receive information about you from Other Services (as described in Section 2.2 above), those Other Services – like social media sites – may offer their own controls around the data you choose to share with us.
6. Retention and Deletion
We will keep your information only for as long as we believe that we need it for the purpose we have collected it (as described above) or to meet legal obligations, resolve disputes, maintain security, prevent fraud and abuse, enforce our agreements with you, or fulfill your request to unsubscribe from further messages from us. When your information is no longer needed, we will destroy or de-identify it.
7. Data Transfer
SFAF is based in the United States; when you engage with the Website, you are sending personal data into the United States, which may have different data protection rules than those of your country. We process data both inside and outside of the United States.
8. Our Legal Bases
We will collect, use, and share your personal data only where we have a legal right to do so. This section explains our legal bases for processing personal data, including under GDPR.
Consent. We rely on consent to engage in certain data collection activities, like through cookies.
Legitimate Interests. We rely on legitimate interests to process the data we collect when you browse our Website. We process this data based on our legitimate interest in understanding how our Website is being used, and your legitimate interest in accessing our Website.
Where we rely on consent, you have the right to revoke your consent; and where we rely on legitimate interests, you have the right to object by emailing us at privacyofficer@SFAF.org.
9. Other Important Information
(a) Security of Your Information
Security of personal data is important to us. We implement security safeguards designed to protect your personal data, including reasonable administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, use, alteration, and destruction. Despite these efforts, we cannot guarantee that your data may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or administrative safeguards. Please notify us immediately at privacyofficer@SFAF.org if you become aware of any security issues relating to our Services.
(b) Your Communications Preferences
The personal information you voluntarily provide for our mailing lists allows us to keep you posted on our latest announcements, requests for applications, job opportunities, and upcoming events. If you no longer want to be on our mailing lists, you can opt out any time by updating your preferences. You may update your preferences or request to unsubscribe from our mailing lists by using the “Unsubscribe ” link at the bottom of any email sent to a SFAF mailing list. You may also send an email to privacyofficer@SFAF.org requesting to unsubscribe.
(c) Do Not Track Signals
The Services are not designed or intended for individuals under the age of 13 and, we do not knowingly collect Personal Information from individuals under the age of 13. If we become aware that we have the information of such children collected through the Services, we will promptly delete it.
(f) Contact Information