Oxfam International respects your privacy and is committed to protecting your personal data. This Notice explains when and how we collect your personal data when you use our website, and the rights you have over your own information.
This Notice applies to the website of Oxfam in Laos, however, when you use this site you may be directed to the website of other members of the Oxfam confederation or links to third party websites or applications. These websites will have their own Privacy Notices, which you should also look at.
If you have any questions in relation to this Notice or would like to exercise your rights under it, please contact:
FAO Data Protection Officer for Oxfam International
Oxfam Ireland, 2nd Floor, Portview House, Thorncastle Street, Ringsend, Dublin 4.
Email address for queries: email@example.com
Information about who we are
Stichting Oxfam International is a Dutch Foundation (registration no. 41159611) with a registered Office at PO Box 30919, 2500 GX The Hague, The Netherlands. Further information, and details of our registration with data protection supervisory authorities are detailed below.
How our website works
The data we collect about you
There are a number of areas on our website where you may provide personal data to Oxfam in Laos, including when you:
- register for Oxfam email updates
- sign an Oxfam petition
- make a donation to Oxfam
- register to be involved in our campaigns
- submit an email enquiry
- apply for an open vacancy
The information we collect will depend on the nature of your action but may include name, email address, telephone number and country. Where you make a donation through our website, we do not collect your financial information but direct you to a payment provider to process your donation and forward it on to Oxfam’s global fund. Our payment provider is certified under the EU-US Privacy Shield.
When you provide your information to us, we will only use the information for the purposes for which it is provided, for any compatible purposes and to fulfil our legal or regulatory obligations unless you have agreed for your data to be used for other purposes.
When will we send you marketing communications?
We will only contact you for marketing purposes (for example keep you up to date on our work based on your previous responses to our campaigns, or let you know of ways in which you can support that work) where we have your consent.
At each place that you provide your personal data on our website, there is an opportunity for you to express your preferences in relation to marketing communications from us. Where you provide your consent to such communications, you can withdraw consent or change your preferences at any time by clicking the unsubscribe button on any marketing communication or by sending an email to [country/region email contact] expressing your preferences.
We will generally treat any marketing consent you give us as lasting for 5 years, as we have found our supporters may get involved with different campaigns at different points over this period of time.
We never sell or share your information with entities outside Oxfam for their marketing purposes.
Links to other Oxfam websites
For some actions that you may like to take when visiting our website, you will be redirected to another Oxfam website, including coalition ones. In these cases, that entity will collect your data rather than Oxfam in Laos, and you should look at their Privacy Notice to understand how they will use your data, and your rights. This includes where:
- you make a donation;
- register to participate in a event;
- sign up a petition;
- apply for employment or to be a volunteer; or
- register to participate in a local campaign.
Who might we share your information with
We may share your information with other members of the Oxfam confederation. We may also share your information with third parties who process data on our behalf, but only where we place obligations on them in relation to the security of the data and require them to use the data only as we instruct.
International transfers of data
In some cases, we may transfer your personal data to members of the Oxfam confederation and third-party service providers who are located outside your jurisdiction.
If you are in the European Union, and your personal data is transferred to an Oxfam Affiliate or third-party service provider outside the European Economic Area (EEA), this will occur under a safeguard mechanism recognized by the European Commission as providing adequate protection for your personal data. Transfers to Oxfam Affiliates will occur under the EC’s model data protection clauses. You may ask to see a copy of these clauses. Transfers of your data to other third parties outside the EEA, or to third parties outside any other jurisdiction in which you are located, will occur in accordance with local data protection laws.
Your data and social media
This section refers to the ability for you to like, re-tweet, share, etc. Oxfam International content on social media platforms, such as Facebook, Twitter, Instagram and YouTube. Additionally, when using our website, you can link through to such social media sites. When you do this, depending on your privacy settings, these networks will adjust their marketing to show you more Oxfam and/or Oxfam-type content. To change your settings on these services, please refer to their privacy notices, which will tell you how to do this.
Oxfam and social media
Many social media sites provide, or permit, tools that aggregate and highlight content that appears on their site. Oxfam uses such tools to analyse and assess the success of Oxfam campaigns and communications, the level of interest in issues Oxfam cares about, and the level of social media activity resulting from media stories about Oxfam or Oxfam/NGO activities. We use the native reporting tools of the social media networks, but may also use third-party tools. Oxfam uses such tools to respond directly to other users’ queries and comments related to Oxfam.
Our website is not intended for use by children and we do not knowingly collect data on children.
How do we protect your data
We ensure that there are appropriate technical controls in place to protect your personal details. For example, our online forms are always encrypted and our network is protected and routinely monitored.
We undertake regular reviews of who has access to information that we hold to ensure that your information is only accessible by appropriately trained staff, volunteers and contractors.
Where we use external companies to collect or process personal data on our behalf, we put a contract in place that sets out our expectations and requirements in relation to security of the data they access or process. These organizations - referred to as "Data Processors" also have legal liability for the way in which your data is used, providing you with additional protection.
How long do we keep your data
We will only retain the data you provide to us through our website for as long as required by applicable laws or as is necessary for the purpose for which it was collected and in accordance with any consents provided. We will delete personal data at the end of this period unless we wish to use it for statistical purposes, in which case we will anonymise it, such that you could never be re-identified with it.
You have the right to request details of the information we hold about you. If you would like a copy of some or all of your personal information, please make a request to our Data Protection officer at the details provided below. We will provide this information to you without charge, unless requests are manifestly unfounded, repetitive or excessive, in which case we are entitled to charge an administration fee.
You also have a right to have inaccurate information we hold about you rectified or removed and a right, in some circumstances, to restrict or object to us processing your information, or to seek erasure of your data. If you believe we are not respecting your rights, you are entitled to make a complaint to a relevant supervisory authority.
The legal basis on which we hold and use your data will vary depending on the activity involved. In some cases, we might hold the data because it is needed to fulfil a contract or meet our legal obligations (i.e. a donation), in others because it is in Oxfam’s legitimate interest to do so, and in others, because you have consented to this use. We note that the legal basis on which we process your data will influence your specific rights.
Changes to this notice
We may make changes to this notice from time to time. We will always detail, at the end of this notice, the date it was last updated and you should check back from time to time.
Data Controller postal address and data privacy registration details:
Oxfam International Secretariat
John Smith Drive
Oxford OX4 2JY
Telephone: +44 (0) 1865 339 100
Fax: +44 (0) 1865 330 101
ICO Registration Number (UK): Z8133290