Privacy Policy

(March 1st, 2023)

All information on this website is copyrighted by the Adventist Development and Relief Agency (ADRA). All rights are reserved. United States copyright law protects all materials contained on this site. By using this site, you acknowledge that ADRA owns all intellectual property rights in and to the site and its contents and that these rights are valid and protected in all forms. You may not modify, remove, delete, augment, add to, exploit, publish, transmit, participate in the transfer or sale of, and/or create derivative works from the content either in whole or in part without the express written permission of ADRA’s Marketing and Development Bureau.

CONTROLLER OF PERSONAL DATA/ INFORMATION
Any Personal Data/ Information provided or to be gathered by ADRA.ORG is controlled by the Adventist Development and Relief Agency.

COLLECTION AND USE OF PERSONAL DATA/ INFORMATION ABOUT SUPPORTERS
The information we gather from supporters helps us to fulfil your requests and continually improve your experience and since it is voluntarily submitted we Process it under Legitimate Interest.

We use the information to deliver publications, update our records, and generally maintain your contact details and communication records held in our database.

We also use this information to prevent or detect fraud or abuses of our website and to enable third parties to carry out technical, logistical, or other functions on our behalf, which is Processed in this case also under Legitimate Interest or even a Legal Obligation (depending on local law).

INFORMATION YOU GIVE US
We collect personal data using forms on our website. We receive and store information you enter on our website or give us in any other way, hence we Process that Personal Data/ Information under Legitimate Interest.

Use of these forms is entirely voluntary on your part, so if you do not want us to hold any Personal Data/ Information pertaining to you, then please do not submit the forms. The Personal Data/ Information collected includes, but is not limited to, the following:

Your name
Your telephone number(s)
Your email address

This information allows ADRA to provide a more personalized experience. You can choose not to provide certain information, but it may limit some features.

We collect this data for limited purposes. Our team may use it for statistical data and to contact you in the future via email or by phone, including mobile phone, about ADRA.

Your Personal Data/ Information may also be required for compliance regarding donations or other legal matters.

We do not collect or use this Personal Data/ Information for any other purpose.

Information about our supporters is an important part of our organization and we do not sell nor share your Personal Data/ Information with third parties who aren’t contracted to act on our behalf (our Processors).

DONOR PRIVACY POLICY
ADRA will never sell Personal Data/ Information nor send donor mailings on behalf of other organizations, and will only share it with contracted third parties acting as an agent on our behalf or other Processors. These third parties may control your personal data for the purpose of processing and communication (i.e. ADRA may share your data with an ADRA office in another country who are responsible for a project or action in which you’ve expressed interest for the purpose of communicating with you further). Only with your permission will we use your donation data to create a model (called a “co-op” list) that will help identify other potential donors to ADRA. You can learn more about out data policies and the third parties we work with here.

CHILDREN’S PRIVACY NOTICE
Our website is not directed to children. All offers and solicitations are meant only for adult users of this website. Children who visit our website are free to access the various features our site offers without disclosing any Personal Data/ Information. We do not directly solicit or knowingly collect any information directly from children. Should it ever come to our attention that a child’s Personal Data/ Information has in some way been provided to us, we will immediately erase that information.

EMAIL COMMUNICATIONS
We receive and store your email address when you fill in one of our online forms and also if you subscribe to our newsletters or other e-publications we may offer.

Email addresses are never divulged by ADRA to other organizations (except Processors) and are only shared with contracted third parties if required by law. The Processors may control your personal data for the purpose of processing and communication (i.e. ADRA may share your data with an ADRA office in another country who are responsible for a project or action in which you’ve expressed interest for the purpose of communicating with you further; or companies which provide accessory services to our online services such as the hosting provider).

INFORMATION FROM OTHER SOURCES
We may gather Personal Data/ Information from other sources where it serves the purpose of maintaining your Personal Data/ Information up to date (i.e. such address information from our carriers which we use to correct our records and deliver your next communication more easily).

COOKIES
Cookies are small amounts of data code that are transferred to a site visitor’s hard drive through their web browser. ADRA uses cookies only for the purposes outlined in this notice.

SECURITY
We work to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software which encrypts sensitive information you input.

We transmit your entire contact details and credit card number to the appropriate credit card company during donation processing using SSL encryption.

GDPR
ADRA International and ADRA’s worldwide offices respect the provisions of GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation.)) Under GDPR provisions, you are entitled to object at any time to the processing of your personal data in the following situations:

Personal data being used for direct marketing purposes,
Personal data being used in order to exercise legitimate interests of those who control it.

YOUR RIGHTS UNDER THE LAW
[GDPR] Right of access. The right to obtain from the controller confirmation as to whether their Personal Data are being processed, and, if so, to access such Personal Data as well as related information. ADRA will share the Personal Data over a secure channel, and that (depending on the type of data as well as volume) may necessitate a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.

[CCPA/CPRA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California residents have the right to:

Know the categories of personal information we collect and the categories of sources from which we got the information;
Know the business or commercial purposes for which we collect and share personal information;
Know the categories of third parties and other entities with whom we share personal information; and
Access the specific pieces of personal information we have collected about you.

[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.

[GDPR] Right to erasure. The right to have Personal Data pertaining to a Data Subject that is processed by ADRA erased and, therefore, to have processing stopped, unless a legal duty or have a legitimate legal basis to retain certain data prevents ADRA from observing such right, in which case the Data Subject shall be duly informed.

[CCPA/CPRA] Right to deletion – again similar to the GDPR regime, natural persons who reside in the state of California may, in some circumstances, ask us to delete their Personal Data/ information. We may refuse the exercise of such right if it prevents us from exercising legal defense, if we cannot do so because of a legal obligation or there is the risk that by doing so, we cannot fulfill any current contractual obligations.

[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and impose processing restrictions (in scope and purpose) for Personal Data that pertains to a Data Subject. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to processing, asking for additional confirmation prior to implementing the request.

[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy as arising under the legal basis of Legitimate Interest on the part of ADRA. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing service (and not necessarily to cancel the service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to cease and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to processing, asking for additional confirmation prior to implementing the request.

[CCPA/CPRA] Right to opt out of sales – We do not sell your data.

[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. ADRA will share the Personal Data over a secure channel, and that (depending on the type of data as well as volume) may necessitate a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.

[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of the occurrence of such disclosure or knowledge by ADRA of potential disclosure, as the case may be.

[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding ADRA’s processing activities in relation to Personal Data with any of the EU Member States’ data protection Supervisory Authorities. ADRA is however also available to provide any clarification towards those Data Subjects who may feel that its processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. A Data Subject may submit a complaint via the request process as here defined above.

[CCPA/CPRA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. For any of the above-mentioned CCPA/CPRA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may mean that it takes additional time to fulfil your request.

Furthermore, where the processing is based on your consent you have a right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

In order to exercise your rights under the law please send an email to dpo@ADRA.org.

Your data may be stored until the end of the limitation period of potential claims related to your relation with ADRA. Data may be stored longer only if such an obligation is provided by applicable laws.

ADRA International, who is the Controller and owns ADRA.org, maintains its headquarters in the United States, but the ADRA network events/services/donations are addressed to consignees internationally, which act as Processors. As a result, personal data may be transferred to a third party or international organization, in particular to ADRA branch offices or ADRA partner offices, outside of the US. The base of lawfulness of such a transfer is in agreement between ADRA International and third parties.

CONFIDENTIALITY
We maintain physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of personally identifiable supporter information. Our security procedures mean that we may occasionally request proof of identity before we disclose Personal Data/ Information to you.

We have implemented security policies, rules, and technical measures to ensure that any personal data held under our control is protected from unauthorized access, unauthorized modification, unlawful destruction, accidental loss, improper use, or improper disclosure. Our employees and data processors who have access to, and are associated with the processing of, personal data are obliged to respect the confidentiality of our site visitor’s personal data.

TRADEMARK
ADRA owns the trademark for the name Adventist Development and Relief Agency, as well as all related trademarks. In addition to registration with the United States Patent and Trademark Office, registrations are also current or pending in various other jurisdictions. All rights in ADRA’s trademarks are reserved by ADRA and may not be used without permission.

GENERAL DISCLAIMER
ADRA is providing this website for your information purposes only. Certain organizations may choose to link this website to their own website. Such linkage is not meant to imply that ADRA agrees with, supports or concurs with the content such websites may contain. If you visit other websites in such a context please be aware that you must also read that website Privacy Notice/ Privacy Policy for their Purpose and Scope of Processing Personal Data/ Information is NOT the same as herein described in this Privacy Notice.

ADRA has taken reasonably commercial steps to provide accurate content and defect-free operation of this website. However, ADRA IS PROVIDING THIS SITE AND ITS CONTENTS “AS IS” WITHOUT ANY OBLIGATIONS, LIABILITIES OR WARRANTIES, EXPRESS OR IMPLIED, WHATSOEVER TO ANYONE WHO CHOOSES TO ACCESS THIS WEBSITE. EACH USER EXPRESSLY ACKNOWLEDGES THAT USE OF THIS WEBSITE AND ITS CONTENTS IS AT THE USER’S SOLE RISK. ADRA DOES NOT WARRANT THAT THIS WEBSITE OR ANY OF ITS CONTENTS WILL BE CONTINUOUSLY AVAILABLE, ACCESSIBLE, NON-INFRINGING OR FREE OF TECHNICAL ERRORS OR VIRUSES OR ANYTHING ELSE MANIFESTING CONTAMINATING OR DESTRUCTIVE PROPERTIES, OR THAT THE INFORMATION CONTAINED IN IT IS COMPLETELY FREE OF INACCURACIES IN SPITE OF TAKING STEPS TO DO SO. ADRA WILL NOT BE LIABLE FOR ANY DAMAGES OR INJURY (INCLUDING INDIRECT, SPECIAL, AND CONSEQUENTIAL DAMAGES) THAT MAY RESULT FROM THE USE OF OR INABILITY TO USE ANY PART OF THE WEBSITE, OR FROM ANYTHING SUBMITTED OR POSTED BY USERS. THE TERMS OF THIS PARAGRAPH WILL SURVIVE ANY TERMINATION OF THIS NOTICE AND WEBSITE.

This site is created and controlled under the laws of the State of Maryland, which shall be the law giving effect to and interpretation of all terms and conditions hereunder. Notwithstanding that fact, ADRA meets the requirements of applicable Personal Data Protection legislation always following the “highest standard”, regardless of where you are located around the Globe.

Any action pertaining to this website shall be in the State of Maryland with Montgomery County the venue for such action. Any person named a party to any action regarding this website agrees to submit to the exclusive jurisdiction of the courts of the State of Maryland and of the United States of America located in the State of Maryland. This does not deprive the consumer of any protection afforded by provisions from agreement by virtue of the law which, in the absence of choice, would have been applicable and cannot be derogated.

Our Privacy Notice may change from time to time. Check our website frequently for all updated changes, the date is at the top right after the title. For further information regarding this website or anything related to it, you may send email to dpo@ADRA.org or write to:

ADRA International
Attention: Webmaster, Marketing and Development Bureau
12501 Old Columbia Pike
Silver Spring, MD 20904