Effective date: December 21, 2018
Career Girls, a 501(c)(3) nonprofit organization (“us”, “we”, or “our”) operates the www.careergirls.org website (the “Website”). This page informs you of our policies regarding the collection, use, and disclosure of Personal Data when you use our Website and the choices you have associated with that data. We use your data to provide and improve the Website. By using the Website, you agree to the collection and use of information in accordance with this policy.
- Personal Data. Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
- Usage Data. Usage Data is data collected automatically either generated by the use of the Website or from the Website infrastructure itself (for example, the duration of a page visit).
- Data Controller. Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any Personal Data are, or are to be, processed.
- Data Processors. Data Processor means any natural or legal person who processes the data on behalf of the Data Controller.
How we collect your Personal Data:
You are not required to register or provide information to us in order to view our Website. We collect information from you in the following ways:
- Your submission of Personal Data when you voluntarily choose to communicate with us on the “Contact Us” page of our Website or when you communicate with us by telephone or email;
- Your submission of Personal Data when you submit stories, poems, photos and artwork through our “Submit a Story” page on our Website;
- Your submission of Personal Data when you submit testimonials about what you love about Career Girls through our “Teen Testimonials” page on our Website;
- Your submission of Personal Data when you voluntarily choose to communicate with us on the “Volunteer” page on our Website;
- Your election to donate through the functionality provided by our third party payment Data Processor;
- Information submitted by or obtainable from your internet service provider, software, computer, mobile device, or other method of accessing the Website (which you may be able to control through the settings of your software and devices) which we collect in our server logs.
What types of Personal Data we collect:
We collect information through use of our Website and third party Data Processors:
- While using the “Contact Us” page of our Website, we ask you to provide us with certain Personal Data: email address, first name and last name;
- While using the “Submit a Story” page of our Website, we ask you to provide us with certain Personal Data, including: name, grade level, country, email address, Instagram handle, Facebook name, YouTube Channel;
- While using the “Teen Testimonials” page of our Website, we ask you to provide us with certain Personal Data, including: name, grade level, country, email address;
- While using the “Volunteer” page of our Website, we ask you to provide us with certain Personal Data, including: email address, first name and last name;
- When you elect to donate, unless you choose to do so anonymously, we receive from our third party payment Data Processor your following Personal Data: email address, first name and last name;
- Through the use of Usage Data, including without limitation button clicks, pages visits, the length of time using the Website or any portion thereof, your interactions with the Website and the frequency of your use of the Website or any portion thereof;
- Device and connection information, including without limitation details regarding your IP address, browser, operating system, screen display.
How we process and use your Personal Data:
We may process and use your Personal Data primarily to perform a contract with you, and to otherwise deliver information that you request, including:
- To provide and maintain our Website.
We may also process your Personal Data because it is necessary for our or a third party's legitimate interests and it’s not overridden by your rights. In this respect, we may use your Personal Data to:
- To provide customer support or reply to your message or communication to us;
- To gather analysis or valuable information so that we can improve our Website;
- To monitor the usage of our Website;
- To detect, prevent and address technical issues.
We may also process your Personal Data for our compliance with our legal obligations. In this respect, we may use your Personal Data for the following:
- To satisfy laws or governmental or legal requests for such information or otherwise meet our compliance and regulatory obligations, both in the US and the EU, including with respect to any EU Member State where we are providing our Website;
- To prevent or investigate possible wrongdoing in connection with the Website;
- To protect the personal safety of users of the Website or the public;
- To protect against legal liability;
- For fraud prevention via third party Website.
In addition, we may also process your Personal Data:
- When we have your specific or, where necessary, explicit consent to do so.
With whom will we share your Personal Data:
We generally do not share your Personal Data with third parties. However, we may share your Personal Data:
- With users of our Website, specifically when you (or, if you are under 18 years old, your legal guardian) gives us permission to post your submission in the “Teen Testimonials” page of our Website. We will only share the following specific Personal Data: your first name and your grade level;
- With our employees, if necessary for the development, improvement, and provision of our Website;
- Under certain circumstances, if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency);
- If in good faith, we believe that such action is necessary to comply with a legal obligation or to protect and defend the rights or property of Career Girls.
When do we transfer your Personal Data outside of the EU:
If your Personal Data is subject to GDPR, in the course of providing the Website to you, we may transfer your Personal Data outside of the EU, principally to our servers in the United States; this means that your Personal Data will not have the automatic protection of European data protection laws (including the GDPR) which apply in the EU. In these circumstances, in order to ensure that your Personal Data continues to have adequate protection when it is transferred outside the EU, your Personal Data will only be transferred on one of the following bases:
- Where the transfer is subject to one or more of the appropriate safeguards for international transfers prescribed by applicable law (for example, standard data protection clauses adopted by the European Commission);
- a European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection; or
- there exists another situation where the transfer is permitted under applicable law (for example, where we have your explicit consent).
You can obtain more details of the protection given to your Personal Data when it is transferred outside the EU by contacting us using the details set out below.
Our liability for transfers of your Personal Data:
Retention of Data:
We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Website, or we are legally obligated to retain this data for longer time periods.
Security of Data:
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
California residents -- Your California privacy rights:
California's "Shine the Light" law, Civil Code section 1798.83, requires certain businesses to respond to requests from California customers asking about the business' practices related to disclosing Personal Data to third parties for the third parties' direct marketing purposes. Alternately, businesses may have in place a policy not to disclose Personal Data of customers to third parties for the third parties' direct marketing purposes if the customer has exercised an option to opt-out of such information-sharing. We require you to expressly opt-in to any disclosure of your Personal Data to third parties for the third parties' direct marketing purposes which is stricter than required under California law.
Your Data Protection Rights Under General Data Protection Regulation (GDPR)
If you are a resident of the EU, you have certain data protection rights. We aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us at /about/contact-us/.
In certain circumstances, you have the following data protection rights. Please note that these rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
- The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
- The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
- The right to object. You have the right to object to our processing of your Personal Data.
- The right of restriction. You have the right to request that we restrict the processing of your Personal Data.
- The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
- The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your Personal Data.
Please note that we may ask you to verify your identity before responding to such requests.
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EU.
We solicit donations within the Website through the use of third-party Data Controllers for payment processing.
Links to Other Sites
Children’s Privacy and international considerations:
Our Website does not address anyone under the age of 18 (“Children”).
We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers. We encourage parents to regularly monitor their children’s online activities—in keeping with the principle regarding web pages targeted to children under 13 put forth by the Children’s Advertising Review Unit (CARU) of the Better Business Bureau.
We are headquartered in the United States and any information that you submit or we otherwise obtain will be transferred to, collected, and held in the United States. We may subsequently transfer such information to any other country or jurisdiction in connection with the authorized uses and disclosures of information set forth herein. Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there.