GDPR Compliant Privacy Policy
Effective Date: July 1, 2025
Data Protection Officer (DPO): Rodney Royer
1. Introduction
We are committed to protecting the personal data of our supporters, donors, volunteers, and beneficiaries. This policy explains how we collect, use, and protect personal data in accordance with the GDPR.
2. Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: When individuals opt in to receive communications or participate in activities.
- Contractual necessity: For fulfilling agreements (e.g., event registration).
- Legal obligation: For compliance with financial or regulatory requirements.
- Legitimate interests: For fundraising, outreach, and improving services, balanced against individual rights.
3. Data We Collect
We may collect:
- Identity data: Name, date of birth, gender
- Contact data: Email, phone number, mailing address
- Financial data: Donation amounts, payment details
- Technical data: IP address, browser type, cookies
- Communication preferences and consent records
4. How We Use Your Data
We use personal data to:
- Process donations and issue receipts
- Send newsletters, updates, and event invitations
- Manage volunteer participation
- Analyze website usage and improve services
- Comply with legal and regulatory obligations
5. Consent Management
- Consent is obtained through clear opt-in mechanisms.
- Individuals may withdraw consent at any time.
- We maintain records of when and how consent was given.
6. Data Subject Rights
Under GDPR, individuals have the right to:
- Access their personal data
- Rectify inaccurate data
- Erase data (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Lodge a complaint with a supervisory authority
To exercise these rights, contact us at info@doveinternational.com.
7. Data Sharing and Transfers
We do not sell personal data. We may share data with:
- Trusted service providers (e.g., payment processors, email platforms)
- No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties
- Regulatory authorities when legally required
If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards (e.g., Standard Contractual Clauses).
8. Data Retention
We retain personal data only as long as necessary for the purposes stated. Retention periods are reviewed regularly.
9. Data Security
We implement:
- Encryption and secure servers
- Access controls and staff training
- Regular audits and breach response protocols
10. Cookies and Tracking
Our website uses cookies and analytics tools. Visitors can manage cookie preferences via browser settings. A cookie banner is displayed upon first visit.
11. Policy Updates
We may update this policy to reflect changes in law or our practices. Updates will be posted on our website with a revised effective date.
12. Contact Information
For questions or concerns about this policy or your data rights:
info@doveinternational.com
11 Toll Gate Road Lititz, PA 17543
