PRIVACY POLICY

1. Processing of data

MyDonorFamily collects and handles personal data about you, our customer. Your privacy and the protection of your personal information have our highest priority.

In this Privacy Policy you can read in which way MyDonorFamily processes, collects, stores, uses, shares, transfers to others or deletes your personal data.

2. Types of data - and our purpose of processing them

MyDonorFamily processes the following types of personal information about you in the following cases:

- 2.1 If you subscribe to a MyDonorFamily membership (Basic or Premium) and then use MyDonorFamily

- 2.2 If you visit us on our website without being a member

- 2.3 If you contact us directly

2.1 If you subscribe to a MyDonorFamily membership (Basic or Premium) and then use MyDonorFamily.

During the registration process, we you provide us with the following information:

Your chosen username and password, e-mail address, country of residence and zip/postal code, phone number, profile photo (optional), your relation (donor parent or donor offspring of a sperm or an egg donor), your gender and birth year (or of your donor child/children if you are a donor parent), profile photos of your donor child/children if you are a donor parent (optional), your sperm bank, egg bank or clinic and your donor name and/or number, date and time of login and IP address.

If you register as a Premium Member, we (or our payment service provider) also process your credit card or other payment details. Furthermore, we process your activity in the donor group, e.g. your group messages and chat with the other group members, and the content you upload in the donor group, e.g. photos.

2.1.1 Disclosure of your information to other Members

As a Basic Member the following information will be generally publicly visible to MyDonorFamily Premium Members in your donor group: If you are a parent or a donor offspring, your country of residence, your location on a map based on the entered postal/zip code, your gender and birth year (or of your donor child/children if you are a donor parent), last time and date of login.

As a Premium Member the following information will be publicly available to other MyDonorFamily Premium Members in your donor group:

If you are a parent or a donor offspring, your country of residence, your location on a map based on the entered postal/zip code, your gender and birth year (or of your donor child/children if you are a donor parent), last time and date of login, the messages, photos, including profile photos, and other content you have uploaded in the group. Messages, photos and other content that you have entered or uploaded in the message board for a specific Member will only be visible to that specific Member.

You will be able to delete all messages, photos or other content that you have uploaded in the group by clicking “delete message/image”.

In general, MyDonorFamily will not disclose any identifying information about you on the Site, unless you choose to reveal the information yourself in your group messages or chat with the other group members, or in the photos or other content you upload.

2.1.2 Purpose and legal basis for processing of your data as a Member

We need to process these data in order to provide you with the MyDonorFamily Service as described in the General Terms and Conditions of Use:

  • To create and manage your Membership
  • To help you connect and interact with other Members in your donor group
  • To ensure a consistent experience across your devices
  • To improve our services and develop and provide new ones

    • The legal basis for processing of information specified in the purposes 1-4 is contractual necessity (Data Protection Act article 6 (1)(b) GDPR). The legal basis for our processing of any sensitive personal information that you choose to share in the donor group, is your consent (Data Protection Act article 9(2)(a) GDPR), and the fact that the personal data are manifestly made public by you (Data Protection Act, article 9(2)(e) GDPR).

  • To prevent, detect and fight violation of our Code of Conduct, fraud or other illegal or unauthorized activities
  • To ensure legal compliance
  • To comply with legal requirements
  • To assist law enforcement
  • To enforce or exercise our rights, for example our General Terms & Conditions of Use

    • The legal basis for the activities specified in the purposes 5-9 is the legitimate interests of MyDonorFamily to fulfil our legal obligations and our legitimate interest in asserting and defending our rights (Data Protection Act article 6(1)(c) and 6(1)(f) GDPR)

    2.2 If you visit us on our website without being a member

    In these cases, we collect your usage data. This means that, even if you have not signed up to be an MyDonorFamily Member, we will collect and use this information about you. This data is sent to us by your Internet browser and is stored in log files. This data includes: Information about your browser type and your internet service provider, the IP address of the device you use to access our Site and information about the page that you have accessed.

    You will find further information about the processing of personal data regarding the use of “cookies” and other tracking technologies when using the MyDonorFamily Site in our Cookie Policy.

    2.2.1 Purpose and legal basis for processing of your data

    The information is processed on the basis of our legitimate interest in asserting and defending our rights by working with information security, including monitoring access to our systems (Data Protection Act article 6(1)(f) GDPR).

    2.3 If you contact us directly

    In these cases, we process the information you provide to us during such interaction.

    2.3.1 Purpose and legal basis for processing of your data

    We need to process these data in order to communicate with you about our requests and about our services, including order management and billing.

    The legal basis for processing of this information is contractual necessity (Data Protection Act article 6 (1)(b) GDPR). The legal basis for our processing of any sensitive personal information that you choose to share in our communication, is your consent (Data Protection Act article 9(2)(a) GDPR), and the fact that the personal data are manifestly made public by you (Data Protection Act, article 9(2)(e) GDPR).

    3. Providing information voluntarily

    When we collect personal information directly from you, you provide personal data voluntarily. You are not under obligation to provide this personal information to us. The consequence of not giving us the personal data will be that we cannot fulfil the objectives stated above, and we will not be able to provide you with the Service.

    4. Revocation of consent

    If the processing of your personal data is based on consent, you have the right to revoke consent. See further in Clause 6 below. If you revoke your consent, this does not affect the processing prior to the withdrawal of consent, including disclosure based on consent.

    5. Use of data processors

    Your personal data may be processed and stored by our data processors which store the data on our behalf and at our instruction. Our data processors include:

  • Payment service provider
  • Website company, including domain hosting company
  • IT company providing back-up and support services, etc.
  • IT software provider (Microsoft)

    • 6. Storage period

    We store personal information about you for as long as is necessary for the provision of our Service, and as long as we need to perform the above stated purposes.

    For Basic Members: You can terminate your Basic Membership anytime and automatically erase your personal profile data as described in the General Terms and Conditions of Use Clause 5.1

    For Premium Members: Your personal data will be stored for the duration of our contractual relationship. However, we will erase your data on your request as long as there is no legal storage obligation that applies to that information. You will also be able to delete messages, photos or other content as described above in Clause 2.1.1.

    Once your Premium Membership is over, your Premium Membership will be converted into a Basic Membership. In this case, your information (parent/donor offspring, country of residence, location based on the entered postal/zip code, gender and birth year of or your donor child/children, last time and date of login, the messages, photos, including profile photos, and other content you have uploaded in the group), will still be available to the other group members, until you choose to terminate your account, as described in the Terms and Conditions Clause 5.1.

    Log files are stored by MyDonorFamily for 30 days and then deleted. Log files whose further retention is required for evidentiary purposes are exempt from deletion until the incident is finally resolved and may be forwarded to investigative authorities as appropriate in individual cases.

    If you contact us, we will store our communication with you for 6 months after the matter is concluded. MyDonorFamily will also store any personal data which is required to demonstrate that MyDonorFamily has lawfully complied with a valid data subject rights request within the required period.

    Please note that circumstances may arise where we are obliged to keep your personal data for a longer period of time; for example, in connection with a complaint or a compensation claim, and according to limitation period rules. In this case, the information will be stored until the matter is concluded definitively.

    7. Your rights

    In accordance with the Data Protection Act, you have a number of rights in relation to MyDonorFamily’s processing of your information. You may at any time exercise your rights. If you wish to exercise your rights, you should contact us.

    Your rights are:

  • The right to view your information (right of access)

    You have the right to view the information that we process about you, as well as other additional information.

  • Right to rectification

    • You have the right to have inaccurate information about yourself corrected. MyDonorFamily has a duty to respond to the request.

  • Right to erasure

    In special cases, you have the right to have information deleted prior to the time the information would otherwise be deleted. MyDonorFamily has a duty to respond to the request.

  • The right to restrict the processing of information

    In some cases, you have the restrict the processing of your personal data. If you have the right to have processing restricted, we must, in the future, only process information — except for storage – with your consent, or for the purpose of establishing, enforcing or defending a legal claim, or for protecting a person or important social interests.

  • Right to object

    You have, in some cases, the right to object to our otherwise lawful treatment of your personal data.

  • Right for data portability

    You can to ask for transfer of your personal data to yourself or another data controller Your data must be provided or transferred in an electronic format.

    • You can read more about the rights in the Danish Data Protection Authority’s guidance on the rights of data subjects, which can be found at www.datatilsynet.dk (in Danish only), or directly in the European Data Protection Act which ca be found at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN

    Contact and complaints

    If you have any questions regarding the processing of your personal data, your rights, or you want to make a complaint, please feel free to contact us.

    Enquiries can be made to:

    MyDonorFamily ApS (VAT NO. 41716304)

    Store Torv 8, 3.

    8000 Aarhus C

    E-mail: info@mydonorfamily.com

    If your query or complaint is not resolved, a complaint can subsequently be addressed to the Danish Data Protection Authority. The contact address can be found at www.datatilsynet.dk

    Date: 6.10.2020.