We developed this Privacy Policy to provide you with information about the types of personal data we collect from you and how we process your personal data when you use this website (collectively, “our Site”) and other BTSADV services (collectively, “our Services”).

1. PERSONAL DATA WE COLLECT AND HOW WE USE IT (INCLUDING PURPOSES AND LEGAL BASIS FOR PROCESSING)

When you visit our Site, we collect information about your use of our Site through actions you take, including, but not limited to, clicking on links and buttons, searching our Site and submitting content.

Personal data that is processed when you communicate with us.

When you interact with us via email, telephone, online, chat, social media outlets and written communications or otherwise, we may collect personal data, including, without limitation, your name, phone number, email address and language preferences, as well as information pertaining to the issue with which you are communicating with us.

If you provide us with contact information (e.g., email address, home address, phone number), we may use that contact information to communicate with you using various means, including by email, text messages, online chats, written communications and telephone calls. If you provide us with your telephone number, we may contact you via telephone about your support, your submissions, and other matters related to BTSADV programs.

We also may create event logs that we use to diagnose Site performance issues and to capture information relating to the Site or service issue.

Personal data that is processed when you create and send a submission through our site or otherwise seek access to BTSADV services and information.

When you create and send a submission or donation through our Site or otherwise seek access to our Services and information, we collect personal data, including your name, phone number, street address, email address, demographic information (e.g. birthday, gender, marital status), language preference, credit card and other payment information, your contacts with us (including any Site content and photos you provide), and others via our Site services, as well as information about your giving history.

Purposes and legal grounds:

Providing you with account information. We also process your contact information for the purpose of sending you information about our related services. The name you provide is associated with your account profile. We process your contact information for these purposes because of our legitimate interest in providing you with information about BTSADV donations, and our related services.

Providing you with requested information. If you choose to sign up for our emails or any other communications from us, we will use your contact information for the purposes of sending you the information you have requested. We process your contact information for this purpose because of our legitimate interest in providing you with the information for which you signed up.

Providing you with information concerning BTSADVl in general and donation opportunities. BTSADV and our trusted third-party service providers also may use your email address, telephone number and other contact information for the purpose of sending you surveys and providing you with communications concerning donation and fundraising opportunities, and sponsor and supporter community activities and networking opportunities.

We process your email address and other contact information for this purpose because of our legitimate interest in sending marketing communications relating to donation opportunities.

Where and as required by law, we will provide you with the opportunity to either opt in or opt out of receiving any such communications from BTSADV at the time we collect your contact information. If you do not initially opt out of receiving marketing communications, but subsequently decide that you no longer wish to receive marketing communications from BTSADV, you will have the opportunity to opt out from receiving marketing communications from BTSADV at any time by clicking the preferences or unsubscribe link provided at the bottom of our marketing emails or by contacting us to adjust your communication preferences.

The communications you receive from BTSADV may be based on information that you provide to us when you sign up for a BTSADV newsletter or program. The reason for processing your personal data for this purpose is because of our legitimate interest in providing our current and potential survivors, legacy families, and donors with information they have requested and with electronic marketing communications that are likely to be of interest to them.

Personal data that is processed when you donate through our site

When you donate money, we collect and store your payment information, which may include credit and debit card data, including account number, account type and account holder name. For electronic ACH (Automated Clearing House) payments, routing number and account number (which is encrypted) will be stored.

Safeguarding your personal information is very important to us and the vendors we use to process electronic payments. We use SSL encryption on all website connections; we follow strict guidelines around password protection.

We use third-party electronic payment vendors to process payment card and ACH data, as well as other personal data required to authenticate certain online payments when contributions are made.

Purposes and legal grounds:

Payment processing. When you provide donations via credit card or debit card or ACH, that information is provided directly to third-party electronic payment vendors (also known as payment gateways) that process electronic payment data so that you may pay for such services. For all such payments, BTSADV only transfers payment data through protected servers.

Personal data that is processed concerning volunteer or scholarship applicants

If you send us your résumé (or equivalent), via email or otherwise, to apply for an open position at BTSADV, we may collect a variety of personal data, including your name, mailing address, email address, phone number, work experience, education history, references, information about your applicable degrees, licenses and certifications.

Purposes and legal grounds: We process this information for the purpose of permitting you to be considered for positions that BTSADV is seeking to fill. This information is processed in support of our legitimate interest in analyzing résumé information in connection with identifying qualified candidates to fill positions at BTSADV.

Usage data automatically collected through cookies and tracking technologies data

Data collected through our cookies. Like most websites, we automatically collect usage data (such as your IP address and browser details) when you interact online with our Site through cookies and other types of data files (such as web beacons and similar tracking technologies). Cookies allow us to identify your computer or other electronic device, your location (if location services are enabled), the type of device you are using, and other information relating to your Site usage. We use this information to improve our Site and offerings, and to enhance your experience on the Site.

Data collected through third-party cookies. When you visit our Site, cookies also may be placed on your computer or device by third-party services that are integrated into our Site. For example, third-party cookies are used by Google Universal Analytics for purposes of tracking our Site traffic. This allows us to better understand how our users use our Site across devices. These cookies collect certain data (such as your IP address, the type of browser and/or operating system you use, time and date, and information relating to the content you are viewing) when you visit our Site. These third parties also may use such cookie data in order to provide advertisements to you about our events, programs, and giving opportunities that are anticipated to be of interest to you.

Cookie consent. If you are in the European Union or another country that requires obtaining your consent before processing your cookie and other usage data, we will seek your consent before doing so and will process your personal data based on your consent. You may withdraw your consent at any time by following the instructions in the next section.

Your control of cookies. Most web browsers allow users some control of most cookies through browser settings. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.

Find out how to manage cookies on popular browsers:

• • • Google Chrome
    • Microsoft Edge
    • Mozilla Firefox
    • Microsoft Internet Explorer
    • Opera
    • Apple Safari

To find information relating to other browsers, visit the browser developer’s website.

To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.

Personal data that is processed for legal purposes

We may need to disclose your information, including your personal data, when required by subpoena or other legal process, or if we have a good faith belief that disclosure is necessary to protect the survivors we serve, to protect our legal rights, or for any other valid legal purpose.

Purposes and legal grounds: We process this information because of our legitimate interest in meeting our legal obligations and protecting our legal interests.

Personal data obtained from third parties

We may combine the personal data that is obtained through this Site with other personal data (e.g., demographic information) that we have collected online and offline, including data from third party sources.

2. THIRD PARTIES WITH WHICH WE SHARE PERSONAL DATA

We share your personal data with the following types of third parties under the following circumstances:

Third-party service providers. We share your personal data with our third-party service providers, who may use your personal data in connection with hosting and operating our Site and performing other requested services for us (e.g., data storage, data analytics, data quality enhancements, research, marketing). To the extent that you provide your personal data directly to an identified third-party service provider, you should review that service provider’s privacy policy for information on its privacy practices relating to payment card data and other personal data.

Third-party electronic payment vendors. We use third-party electronic payment vendors to process payment card and ACH data, as well as other personal data required to authenticate certain online payments when contributions are made.

Governmental entities and third parties. We may disclose personal data about you to governmental entities, such as regulatory agencies, law enforcement and judicial authorities, including to meet national security or law enforcement requirements, as well as other third parties under any of the following conditions: (a) if we have your valid consent to do so; (b) to comply with a valid subpoena, legal order, court order, search warrant, legal process, or other legal obligation; (c) to enforce any of our terms and conditions or policies; (d) as necessary in the case of emergencies or internal security matters; or (e) as necessary to pursue available legal remedies or defend legal claims.

Other site users: Unless you designate a Survivor or Angel Story submission as Anonymous, the basic information provided (for instance, your name and photo, if any) will be available to other users of the Site. Additionally, if you provide any additional content to your Angel Page, such as photos, text and other works, such content will be available to other users of https://angels.breakthesilencedv.org.

3. RETENTION OF PERSONAL DATA

BTSADV will retain your personal data for only as long as needed for the purposes set forth in this Privacy Policy and to meet BTSADV’s legal obligations.

4. CROSS-BORDER TRANSFERS OF PERSONAL DATA

Our Site is hosted in the United States, and is governed by United States law. If you are visiting our Site from outside the United States, your personal data will be transferred to, stored and processed in the United States where our Site platform is located. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country. For example, personal data transferred to the United States may be subject to lawful access requests by federal and state authorities in the United States.

5. DATA SUBJECT RIGHTS

Right to object to processing

If you reside in the European Union, you have a right to object to the processing of your personal data for direct marketing purposes, including profiling related to direct marketing. “Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a data subject, such as when we provide you with a specific type of direct marketing information based on information you provided us. If you exercise your right to object to processing for direct marketing purposes, including profiling related to direct marketing, we will no longer process your personal data for such purposes.

Additionally, if you reside in the European Union, you have a right to object when we process your personal data based on the legitimate interests of BTSADV or a third party. If you exercise your right to object where our processing or sharing of your personal data is based on legitimate interests, that may result in the cancellation of your submission. BTSADV will no longer process or share the personal data covered by your objection unless BTSADV has compelling legitimate grounds for the processing or sharing that override your objection or that relate to the establishment, exercise or defense of legal claims.

If you live in the European Union and wish to exercise your right to object, please contact BTSADV by emailing marketing@breakthesilencedv.org or by writing to Break The Silence Against Domestic Violence, 530 Communications Circle, Colorado Springs, CO 80905, USA.

If you reside outside of the European Union, you may have a similar right to object under your local laws. If you do not live in the European Union but you think you have a right to object under your local laws, please contact BTSADV by emailing marketing@breakthesilencedv.org or by writing to Break The Silence Against Domestic Violence, 530 Communications Circle, Colorado Springs, CO 80905, USA.

Other data subject rights

If you reside in the European Union, you may also, under certain circumstances specified within the General Data Protection Regulation (GDPR), have the right to request access to and rectification or erasure of your personal data, data portability, restriction of processing of your personal data, and the right to lodge a complaint with a supervisory authority.

If you live in the European Union, and if you wish to exercise any of these rights, please contact BTSADV by emailing marketing@breakthesilencedv.org or by writing to Break The Silence Against Domestic Violence, 530 Communications Circle, Colorado Springs, CO 80905, USA. For more information on lodging a complaint, you should contact your local data protection authority in the European Economic Area (EEA).

If you reside outside of the European Union, you may have similar rights under your local laws. If you wish to exercise any available data subject rights, please contact BTSADV by emailing marketing@breakthesilencedv.org or by writing to Break The Silence Against Domestic Violence, 530 Communications Circle, Colorado Springs, CO 80905, USA.

Online tracking

BTSADV does not track our users over time and across third-party websites and online services (e.g., mobile apps), and therefore does not respond to Do Not Track (DNT) signals. However, some third-party sites and apps may track your browsing activities when they provide you content, which enables them to tailor what they present to you. Third parties may collect personal data relating to your online activities over time and across different websites and apps when you use our Site.

Request for California privacy information

Under California’s “Shine the Light” law, a part of California’s Consumer Records Act, BTSADV customers who are California residents may request, once per calendar year, information regarding the types of customer information shared by BTSADV with third parties for their direct marketing purposes, during the previous calendar year, and the identities of those third parties. To request this information, California customers may send an email to marketing@breakthesilencedv.org with “Request for California Privacy Information” in the subject line.

California notice for minors

BTSADV does not collect personal information on minors under 13 years of age.

Under California’s “Privacy Rights for California Minors in the Digital World,” if you are a California resident under the age of 18, you have the right to remove or request and obtain removal of certain content that you have publicly posted on our Site. There may be circumstances under which the law does not require or permit removal even if requested. Additionally, complete or comprehensive removal of content or information posted our Site cannot be ensured. If you are a California minor wanting to request removal, please send an email detailing the specific information you would like removed to marketing@breakthesilencedv.org.

Please note that we may ask you to verify your identity before responding to any such requests.

6. INFORMATION SECURITY

We implement appropriate technical and organizational measures designed to assist in maintaining the security and confidentiality of personal data; safeguarding against anticipated threats to the confidentiality, integrity, and availability of personal data; and protecting your personal data against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access.

However, whenever personal data is processed, there is a risk that such data could be lost, misused, modified, hacked, breached and/or otherwise accessed by an unauthorized third party. No system or online transmission of data is completely secure. In addition to the technical and organizational measures that BTSADV has in place to protect your personal data, you should use appropriate security measures to protect your personal data.

7. DATA CONTROLLER CONTACT INFORMATION

Your personal data collected through our Site is controlled by Break The Silence Against Domestic Violence, which is located at 530 Communications Circle, Colorado Springs, CO 80905, USA.

8. PRIVACY POLICY UPDATES

We may update or modify this Privacy Policy from time to time for any reason, which may include but is not limited to new or changed services, improvements of our services, and changes in technologies and laws. You can determine the effective date of this Privacy Policy by referring to the “Effective Date” legend at the top of this Privacy Policy.

We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. Such notice will be provided on our Site.