1. Processing of data
2. Types of data - and our purpose of processing them
MyDonorFamily processes the following types of personal information about you in the following cases:
- 2.1 If you subscribe to a MyDonorFamily membership (Basic or Premium) and then use MyDonorFamily
- 2.2 If you visit us on our website without being a member
- 2.3 If you contact us directly
2.1 If you subscribe to a MyDonorFamily membership (Basic or Premium) and then use MyDonorFamily.
During the registration process, we you provide us with the following information:
Your chosen username and password, e-mail address, country of residence and zip/postal code, phone number, profile photo (optional), your relation (donor parent or donor offspring of a sperm or an egg donor), your gender and birth year (or of your donor child/children if you are a donor parent), profile photos of your donor child/children if you are a donor parent (optional), your sperm bank, egg bank or clinic and your donor name and/or number, date and time of login and IP address.
If you register as a Premium Member, we (or our payment service provider) also process your credit card or other payment details. Furthermore, we process your activity in the donor group, e.g. your group messages and chat with the other group members, and the content you upload in the donor group, e.g. photos.
2.1.1 Disclosure of your information to other Members
As a Basic Member the following information will be generally publicly visible to MyDonorFamily Premium Members in your donor group: If you are a parent or a donor offspring, your country of residence, your location on a map based on the entered postal/zip code, your gender and birth year (or of your donor child/children if you are a donor parent), last time and date of login.As a Premium Member the following information will be publicly available to other MyDonorFamily Premium Members in your donor group:
If you are a parent or a donor offspring, your country of residence, your location on a map based on the entered postal/zip code, your gender and birth year (or of your donor child/children if you are a donor parent), last time and date of login, the messages, photos, including profile photos, and other content you have uploaded in the group. Messages, photos and other content that you have entered or uploaded in the message board for a specific Member will only be visible to that specific Member.
You will be able to delete all messages, photos or other content that you have uploaded in the group by clicking “delete message/image”.
In general, MyDonorFamily will not disclose any identifying information about you on the Site, unless you choose to reveal the information yourself in your group messages or chat with the other group members, or in the photos or other content you upload.
2.1.2 Purpose and legal basis for processing of your data as a Member
We need to process these data in order to provide you with the MyDonorFamily Service as described in the General Terms and Conditions of Use:
The legal basis for processing of information specified in the purposes 1-4 is contractual necessity (Data Protection Act article 6 (1)(b) GDPR). The legal basis for our processing of any sensitive personal information that you choose to share in the donor group, is your consent (Data Protection Act article 9(2)(a) GDPR), and the fact that the personal data are manifestly made public by you (Data Protection Act, article 9(2)(e) GDPR).
The legal basis for the activities specified in the purposes 5-9 is the legitimate interests of MyDonorFamily to fulfil our legal obligations and our legitimate interest in asserting and defending our rights (Data Protection Act article 6(1)(c) and 6(1)(f) GDPR)
2.2 If you visit us on our website without being a member
In these cases, we collect your usage data. This means that, even if you have not signed up to be an MyDonorFamily Member, we will collect and use this information about you. This data is sent to us by your Internet browser and is stored in log files. This data includes: Information about your browser type and your internet service provider, the IP address of the device you use to access our Site and information about the page that you have accessed.
2.2.1 Purpose and legal basis for processing of your data
The information is processed on the basis of our legitimate interest in asserting and defending our rights by working with information security, including monitoring access to our systems (Data Protection Act article 6(1)(f) GDPR).
2.3 If you contact us directly
In these cases, we process the information you provide to us during such interaction.
2.3.1 Purpose and legal basis for processing of your data
We need to process these data in order to communicate with you about our requests and about our services, including order management and billing.
The legal basis for processing of this information is contractual necessity (Data Protection Act article 6 (1)(b) GDPR). The legal basis for our processing of any sensitive personal information that you choose to share in our communication, is your consent (Data Protection Act article 9(2)(a) GDPR), and the fact that the personal data are manifestly made public by you (Data Protection Act, article 9(2)(e) GDPR).
3. Providing information voluntarily
When we collect personal information directly from you, you provide personal data voluntarily. You are not under obligation to provide this personal information to us. The consequence of not giving us the personal data will be that we cannot fulfil the objectives stated above, and we will not be able to provide you with the Service.
4. Revocation of consent
If the processing of your personal data is based on consent, you have the right to revoke consent. See further in Clause 6 below. If you revoke your consent, this does not affect the processing prior to the withdrawal of consent, including disclosure based on consent.
5. Use of data processors
Your personal data may be processed and stored by our data processors which store the data on our behalf and at our instruction. Our data processors include:
6. Storage period
We store personal information about you for as long as is necessary for the provision of our Service, and as long as we need to perform the above stated purposes.For Basic Members: You can terminate your Basic Membership anytime and automatically erase your personal profile data as described in the General Terms and Conditions of Use Clause 5.1
For Premium Members: Your personal data will be stored for the duration of our contractual relationship. However, we will erase your data on your request as long as there is no legal storage obligation that applies to that information. You will also be able to delete messages, photos or other content as described above in Clause 2.1.1.
Once your Premium Membership is over, your Premium Membership will be converted into a Basic Membership. In this case, your information (parent/donor offspring, country of residence, location based on the entered postal/zip code, gender and birth year of or your donor child/children, last time and date of login, the messages, photos, including profile photos, and other content you have uploaded in the group), will still be available to the other group members, until you choose to terminate your account, as described in the Terms and Conditions Clause 5.1.
Log files are stored by MyDonorFamily for 30 days and then deleted. Log files whose further retention is required for evidentiary purposes are exempt from deletion until the incident is finally resolved and may be forwarded to investigative authorities as appropriate in individual cases.
If you contact us, we will store our communication with you for 6 months after the matter is concluded. MyDonorFamily will also store any personal data which is required to demonstrate that MyDonorFamily has lawfully complied with a valid data subject rights request within the required period.
Please note that circumstances may arise where we are obliged to keep your personal data for a longer period of time; for example, in connection with a complaint or a compensation claim, and according to limitation period rules. In this case, the information will be stored until the matter is concluded definitively.
7. Your rights
In accordance with the Data Protection Act, you have a number of rights in relation to MyDonorFamily’s processing of your information. You may at any time exercise your rights. If you wish to exercise your rights, you should contact us.
Your rights are:
You have the right to view the information that we process about you, as well as other additional information.
You have the right to have inaccurate information about yourself corrected. MyDonorFamily has a duty to respond to the request.
In special cases, you have the right to have information deleted prior to the time the information would otherwise be deleted. MyDonorFamily has a duty to respond to the request.
In some cases, you have the restrict the processing of your personal data. If you have the right to have processing restricted, we must, in the future, only process information — except for storage – with your consent, or for the purpose of establishing, enforcing or defending a legal claim, or for protecting a person or important social interests.
You have, in some cases, the right to object to our otherwise lawful treatment of your personal data.
You can to ask for transfer of your personal data to yourself or another data controller Your data must be provided or transferred in an electronic format.
You can read more about the rights in the Danish Data Protection Authority’s guidance on the rights of data subjects, which can be found at www.datatilsynet.dk (in Danish only), or directly in the European Data Protection Act which ca be found at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN
Contact and complaints
If you have any questions regarding the processing of your personal data, your rights, or you want to make a complaint, please feel free to contact us.
Enquiries can be made to:
MyDonorFamily ApS (VAT NO. 41716304)
Store Torv 8, 3.
8000 Aarhus C
If your query or complaint is not resolved, a complaint can subsequently be addressed to the Danish Data Protection Authority. The contact address can be found at www.datatilsynet.dk