Donor Privacy Notice 

We thank you for your intention to donate to the Population Council (the “Council”). Our efforts towards our mission would not be possible without the voluntary contributions we receive. Before you donate we would like to inform you, pursuant to applicable data protection laws, how we process your personal data. 

How We Collect Donor Information 

When individual donors decide to support our work through monetary donations, a donor relationship is established with the Council. The Council collects personal information from donors when the donor relationship is first established, when donations are made, and throughout the donor relationship. This means that we collect donor personal information at the following points: 

Donations through our website 

We collect donations through our website, www.popcouncil.org, both directly or via a link to an online platform hosted by Give Lively. When donations originate through our website, we receive donor contact information. 

Giving vehicle donations 

Donors may give to the Council via third-parties, such as through workplace giving programs or charity aggregator services. Some examples of these types of programs and services include Benevity and Charity Navigator. These third-parties may share with us the donor’s information if the donor elected to share it.  

Gift or memoriam donations 

Some donors give on behalf of others. In that case, we receive and store the Gifter’s information in order to administer the donation, and we receive and store the Giftee’s information to inform them that the donation was received in their name. 

Manual data collection 

We may collect and store manually gathered information about the donor after the donation has occurred, such as manually gathered publicly available wealth information. 

Personal Data or Categories of Personal Data That We Process 

Depending on how donors have chosen to communicate with us and to ensure we can provide them with information that is relevant and of interest to them, we generally process the following categories of personal data: 

  • Name (first and last) 
  • Prefix 
  • Contact information 
  • Job title and employer  
  • Data regarding donations, such as amount, purpose, date  
  • Donor’s interests regarding our organization’s mission and activities 
  • Relationships between Gifter and Giftee of gift or in memoriam donations  
  • General publicly available information 

Purpose and Lawful Bases of Processing 

The following are the purposes and lawful bases of our processing activities: 

Purpose  What we do  Lawful basis 
Administering the donation  Issue tax receipts   Contract: Art. 6.1b) GDPR 
Fulfill legal and administrative obligations  Produce proof of transactions, fulfill tax reporting obligations   Legal obligation: Art. 6.1c) GDPR 
Transparency on financial sources in accordance with the Council’s policies  Publish names of donors (who did not request anonymity)  Legitimate interest: Art. 6.1f) GDPR 
Direct marketing: keep the relationship with existing donors alive through email newsletter communication, inviting their interest and donations for our ongoing and coming activities and projects, understanding our donor’s interests  Thank you notes, taking notes of personal interactions with donors regarding their interests, emails regarding concrete projects and activities that donor has demonstrated interest in, invitations to events  Legitimate interest: Art. 6.1f) GDPR 
Send periodic newsletters to subscribers   Consent: Art. 6.1a) GDPR 
Direct marketing: engaging with our donors based on their interests and giving capacity, target our communication based on relevance of interest  Forming categories of donors based on their giving levels, geographic interest, topic interest  Legitimate interest: Art. 6.1f) GDPR 

 

Recipients or Categories of Recipients of Your Personal Data 

Aside from our vendors and service providers who carry out the above actions on our behalf, and solely for the purposes set forth in this Notice, we do not share donor personal data with any third parties, i.e. any third parties who would contact donors to market their own products or services.  

These vendors and service providers may be the following: 

  • Service providers that we use for our collection and processing of data in our database 
  • Service providers we use for our internal financial accounting systems, compliance systems, data screening within legal obligations and audits 
  • Public institutions and authorities regarding our legal reporting obligations 
  • Service providers you may choose for processing your donation, such as Give Lively or Benevity 
  • Service provider we use to send our newsletters 
  • Service providers we use for the maintenance and support of our IT systems 

Transfer of Personal Data  

We only transfer personal data to countries where we or our service providers have facilities, and solely for the purposes set forth in this Notice. When necessary under applicable law, we ensure appropriate safeguards for protecting your personal data are in place.  

Duration of Storage 

We hold your personal data in our systems only for as long as necessary for the purposes listed in this Notice.  

Your Data Protection Rights 

Under GDPR, you have the right, subject to applicable local data protection legislation, to: 

  • Withdraw your consent, when the collection and use of your personal data was based solely on your consent 
  • Request access to, and receive a copy of the personal data we hold 
  • Request correction or erasure of the personal data that are inaccurate 
  • Request the deletion of personal data in certain circumstances, such as withdrawal of consent or when the data is no longer necessary for the purpose for which it was collected or processed 
  • Restrict processing of personal data where the accuracy of the personal data is contested, the processing is unlawful, or if data subjects have objected to the processing  
  • Receive or have transferred to another processor the personal data in structured, commonly used and machine-readable format  
  • Object to processing for direct marketing 

Subject to certain limitations set forth herein or in applicable local data protection laws, you can exercise the above rights by contacting the Council. 

Contact Information 

For all questions and requests related to this Donor Privacy Notice, you can contact us at: datarequests@popcouncil.org. Please provide the following information when contacting us: First & Last Name/ Business Name, and Email Address. For specific requests about your personal data, we may need to request evidence of your identity to ensure your personal data is not provided to anyone other than you.  

If you prefer to contact us by mail:   

The Population Council
Attn: Legal – Privacy Notice Request
One Dag Hammarskjold Plaza
New York, New York 10017 

Effective date 

The effective date of this page is September 25, 2023.