Privacy Policy

For members, donors, participants in signature campaigns, and recipients of newsletters from Stikado.

The protection of your personal data and your personal integrity is very important to us at Stikado, and we, therefore, work actively and continuously to ensure that all our processing of personal data complies with current legislation, regulations, case law, and guidance and decisions from the supervisory authorities. We have created this privacy statement to inform you about how we process your personal information and increase your understanding of how Stikado works. We are also required by law to inform you about our processing of your personal data.

If you wish to exercise your rights in accordance with personal data legislation, or otherwise wish to contact us in connection with our processing of your personal data, you can do so through our contact form.

1. Who is responsible for how we process your personal information?

Stikado, registered in Norway with organization number 928 693 309, is responsible for the processing of your personal data and is responsible for ensuring that all processing of your personal data takes place in accordance with applicable laws and regulations. When we write "we", "us", or "our'' in this privacy statement, we are referring to the non-profit association called Stikado.

2. General information about your rights under applicable privacy laws

In accordance with applicable privacy laws, you have a number of rights in connection with the access to and processing of your personal data.

You have the right at any time to request access to which personal data we process about you and/ or demand correction of your personal data if these are inaccurate or incomplete. In certain circumstances, you also have the right to request that we delete your personal information in certain circumstances.

In certain circumstances, you also have the right to request that we limit the processing of your personal data and/ or protest against the processing of your personal data. You also have the right at any time to reserve yourself against the processing of your personal data for direct marketing.

In certain situations, you have the right to receive (receive) in a structured, regular and machine-readable format, personal information about you that you have shared with Stikado, and you can request that this be transferred to another data controller (so-called right to data portability) .

If you are not satisfied with the way your personal data is processed, you have the right to lodge a complaint with the Norwegian Data Protection Authority. The Data Inspectorate's contact information and more information on how to complain can be found at www.datatilsynet.no.

If you have more questions about privacy or want to know more about your rights and what they entail in practice, you are welcome to contact us. You will find our contact information in point 1 above.

3. What information do we process about you and why?

In various situations you come into contact with us, you may provide personal information.

Stikado is an organization that works for human rights and development cooperation, and your privacy is important to us. Therefore, we treat your personal information with respect, and only for the purposes that are in accordance with the organization's activities and values, which is; projects, activism, and information dissemination to promote human rights and development cooperation in the world and to raise funds to be able to conduct such projects, activism and information activities.

The matrix under point 4 describes what personal data we process about you, for what purposes, what legal basis in the privacy legislation we have for this, after how long the data is deleted, and how the processing takes place. The matrix is divided based on your relationship with Stikado, where we process personal information about members, donors, participants in signature campaigns, and recipients of newsletters.

4. Detailed information about our processing of personal data

How we process your personal information depends on your relationship with Stikado; see the matrix below. If you have several relationships with Stikado, your personal information will be stored together.

If your relationship with Stikado is of a non-financial nature, we will store all information we have about you related to your relationship with us as long as you have an ongoing relationship with us and then for up to three years after the last ongoing relationship ended.

However, if your relationship with Stikado is of a financial nature (for example, that you have donated money to the organization), the Accounting Act requires that we retain personal information subject to accounting for you for five years after the end of the financial year. In these cases, we will keep the total personal information we have about you for five years, but there will be no activity directed at you in the last two years of this period.

Personal information we store can be name, address, telephone number, e-mail address, gender, and date of birth. We store the relationship (s) you have to Stikado, inquiries we make to you, responses we receive from you, including action signatures, and payment history.

If you have given gifts that allow you to claim a tax deduction in accordance with the Tax Act § 6-50, you can choose for us to store your social security number. We will then report your gift amount to the tax authorities.

If you are a member, we also store usernames, passwords (in encrypted form), and login history.

Your relationship with Stikado	Purpose of the processing of personal data	Description of the processing of personal data	Is the personal information disclosed to third parties?	Legal basis for processing personal data
When you become a member of Stikado	Membership administration. Contacting you for marketing inquiries (activism and/ or donations).	Your personal information is processed with regard to the importance of secure identification and to ensure that we have correct and up-to-date information. The purpose of this is to provide good and accurate donor service and communication. The information is also processed to fulfill statutory obligations, and we use the information for statistical purposes where the information is then processed anonymously. Contact by phone, e-mail, or letter.	Personal information may be disclosed to public authorities in statutory cases.	Fulfillment of agreement, cf. GDPR art. 6 No. 1 b. In order to fulfill a legal obligation, cf. GDPR art. 6 No. 1 c. Marketing inquiries are processed on the basis of GDPR art. 6 no. 1 f based on a specific balance of interests and in accordance with the Marketing Act.
When you give a gift via Vipps, bank transfer, bank card, or otherwise via the website.	Manage the donation and communication with you. Contact you for marketing inquiries (activism and/ or donations).	Your personal information is processed with regard to the importance of a secure identification and to ensure that we have correct and up-to-date information. The purpose of this is to provide good and accurate donor service and communication. The information is also processed to fulfill statutory obligations such as the Accounting Act, and we use the information for statistical purposes where the information is then processed anonymously. Contact by phone, e-mail, or letter.	Personal information may be disclosed to public authorities in statutory cases, such as tax authorities and to our bank.	Fulfillment of agreement, cf. GDPR art. 6 No. 1 b. In order to fulfill a legal obligation, cf. GDPR art. 6 No. 1 c. Marketing inquiries are processed on the basis of GDPR art. 6 no. 1 f based on a specific balance of interests and in accordance with the Marketing Act.
When you sign up for newsletters at stikado.org	Enable the sending of newsletters to you. Keep track of subscribers to the newsletter. Help engage supporters through information about promotions, campaigns, and fundraisers or sign up for membership. Contact you for marketing inquiries (activism and/ or donations).	We register your e-mail address in our system to start sending. Newsletters by email are sent out regularly, usually 1-3 times a month, to the active subscribers. Response storage. (Opening of newsletter). Registration of cancellations. You have the option to unsubscribe from each broadcast. Contact by phone, e-mail or letter.	No.	Fulfillment of agreement, cf. GDPR art. 6 No. 1 b. Marketing inquiries are processed on the basis of GDPR art. 6 no. 1 f based on a specific balance of interests and in accordance with the Marketing Act.
When you sign a signature campaign	Register and compile signatures for Stikado's signature campaigns. Advocacy work and spreading of information. Contact you for marketing inquiries (activism and/ or donations).	Saving signature on a specific signature campaign. Sending receipt of the signature by email. Your name is handed out by sending signature lists to the recipient stated in the signature campaign. As the issue develops, Stikado can send campaign updates by email to those who have signed the campaign. Contact by phone, e-mail or letter.	Your name and email address will be given to the recipient of the campaign.	Fulfillment of agreement, cf. GDPR art. 6 No. 1 b. Marketing inquiries are processed on the basis of GDPR art. 6 no. 1 f based on a specific balance of interests and in accordance with the Marketing Act.
When you sign up for meetings under the auspices of Stikado.	Name, address, e-mail address, and your affiliation with Stikado. In addition, account number and affiliation to an educational institution or workplace where applicable. Diet/ allergies, age, health, disability or other information of a personal nature where relevant and necessary for your experience with us to be as good as possible. Enable the sending of information about upcoming meetings to you. Enable the sending of meeting evaluation forms to you for feedback on a Stikado meeting you have attended.	Communication via email, mail or telephone for information exchange.	Your personal information may be given in the mentioned cases to hotels and travel companies when placing orders.	Our legitimate interest in managing the business as well as disseminating necessary information about training and other activities. Any information about health (eg allergy or disability) that you provide to us is processed on the basis of your express consent, cf. GDPR art. 9 No. 2 a. Fulfillment of agreement, cf. GDPR art. 6 No. 1 b. In order to fulfill a legal obligation, cf. GDPR art. 6 No. 1 c. Marketing inquiries are processed on the basis of GDPR art. 6 no. 1 f based on a specific balance of interests and in accordance with the Marketing Act.
When you have shown your interest in Stikado through possible membership, other donations and/ or activism	Follow up on your inquiry. Provide information about our work and the different ways you can get involved. Contact you for marketing inquiries (activism and/ or donations).	Registration of your interest in our database. Contact by phone, e-mail or letter.	No.	Fulfillment of agreement, cf. GDPR art. 6 No. 1 b. Stikado's legitimate interest in being able to contact you for the said purposes will not violate your interests or fundamental rights and freedoms, cf. GDPR art. 6 No. 1 f. Marketing inquiries are processed on the basis of GDPR art. 6 no. 1 f based on a specific balance of interests and in accordance with the Marketing Act.

It is voluntary to provide personal information to us. However, failure to provide your personal information may affect your ability to stay informed and support Stikado's activities.

5. Sending you information and requests for donations

Stikado will also be able to process your personal information to inform you about our activities, and sometimes request a donation in favor of our work. Your information may be used to send out information about our business and requests for gifts by phone, e-mail, or SMS until you reserve the right to be contacted by us for this purpose. Stikado also relates to the provisions of the Marketing Act for charities.

6. Who can access your personal information?

Your personal information is processed by Stikado in Norway.

In addition, your personal information may be shared with third parties who process personal information on our behalf, i.e. data processors. Stikado has entered into written data processor agreements with various players and providers of the information services we use in our daily operations, such as IT suppliers. These players will be able to access the personal information described in the privacy statement to the extent necessary to operate the services the players provide to Stikado. The suppliers may not use the personal data for purposes other than those we inform you about in the matrix in point 4. The agreements also set security requirements for the supplier to protect your personal information. To protect your personal information, we have imposed strict requirements on information security and confidentiality for our suppliers.

7. Is your personal data transferred to countries outside the EU or EEA (third countries)?

We, our suppliers, and other organizations that, according to the matrix in point 4, can access your personal information, generally only process these within the EU / EEA.

In the event that the personal data were to be processed outside the EU / EEA (in "third countries"), we will enter into a special agreement with the relevant organization based on standard agreement clauses approved by the EU Commission. To the extent that personal information should be transferred to recipients in the United States, it will then also be sufficient if the recipient is certified through the Privacy Shield scheme (if the relevant organization processes your personal information in the United States). Privacy Shield is a framework that companies and organizations in the United States can access and that ensures the protection of your personal information.

8. How do we protect your personal information?

We have implemented technical and organizational security measures to protect your personal data from unauthorized or unauthorized processing. When we procure services from external parties such as IT suppliers, we place high demands on security. Only persons who actually need access to your personal data in a readable format in order to achieve the purposes set out in point 4 have such access.

9. What rules apply to how long personal information is stored?

You can read about how long we store your personal information in different situations in the matrix in point 4. We comply with applicable laws and regulations and never process your personal information longer than necessary to fulfill the respective purposes.

In some cases, we may contact you to ask if you still want us to store your personal information to achieve the purposes set out in the matrix above.