Privacy policy of Petitions.nz

When you create a petition

• What personal data do you process about me, and how do you collect it?
  • Personal data you provide yourself
    • Your name
    • Email address
    • Country
  • Personal data your browser provides us automatically
    • IP address
    • Display resolution
    • Name of the browser and its version number
    • Operating system and its version number
• What are the legal basis and purposes for processing personal data about me?
  • Execution of a contract in the following cases:
    • To identify you
    • To contact you.
    • To display your name on the petition page.
  • Legal obligation in the following cases:
    • We will process your data when we have a legal obligation to do so, for example, if we are responding to legal process or an enforceable governmental request.
• How long will you store my personal data?
  • Your personal data related to the petition is stored until the petition is either deleted by you or by our team.
• How do you keep my personal data safe?
  • Organizational measures
    • Employee training
    • Our workers only have access to the data that is needed for their work.
  • Technical measures
    • We use Security Sockets Layer (SSL) encryption technology to encrypt all the data before it travels over the internet.
    • Firewalls
    • Daily backups
    • Passwords are not saved in clear text. We calculate hash sums of the passwords and use salts.
• Frequently asked questions
  • How do I remove my petition?

When you sign a petition or edit your signature

• Personal data you provide yourself
  • The author of each petition determines what information is requested from the signatories. Please check the privacy policy of the petition you are interested in.
• Purpose:
  • The author of each petition determines the purposes for processing the personal data of the signatories. Please check the privacy policy of the petition you are interested in.
• Legal Basis
  • Please check the privacy policy of the petition you are interested in.
• How long will you store my personal data?
  • The author of each petition determines the retention period for the personal data of the signatories. Please check the privacy policy of the petition you are interested in.
• Roles and Responsibilities:
  • Our company acts as a Data Processor, meaning we process personal data on behalf of the petition's author, who is the Data Controller. The Data Controller is responsible for deciding what data is collected, why it is collected, and how long it is retained. As the Data Processor, we manage the technical aspects of this process, including data storage, security, and processing.

When you send a message to the author of a petition

• Personal data you provide yourself
  • Name
  • Email address
  • Content of the Message
Personal data your browser provides us automatically
• IP address
• Display resolution
• Name of the browser and its version number
• Operating system and its version number
• Purpose:
  • To enable communication between the author and individuals interested in the topic of the petition.
• Legal Basis
  • Consent of the data subject
• Data Retention
  • Max 5 years
• How is my personal data shared?
• The author of the petition will receive the information provided in the contact form.

When you create or edit a user account

• Personal data you provide yourself
  • Name
  • Email address
  • City
  • Country
Personal data your browser provides us automatically
• IP address
• Display resolution
• Name of the browser and its version number
• Operating system and its version number
• Purpose:
  • Email address is used for communication with you.
  • The email address serves as the username for your account.
  • To manage your user account
  • To pre-fill the signature forms
  • To manage petitions you have created
  • To manage your own signatures
• Legal Basis
  • Consent of the data subject
• Data Retention
  • Retained as long as the user account is active.

When you buy an advertising campaign

• Personal data you provide yourself
  • Your name
  • Your email address
  • Your country
Personal data your browser provides us automatically
• IP address
• Display resolution
• Name of the browser and its version number
• Operating system and its version number
• Purpose:
  • Country information is used to determine the vat rate.
  • Email address is used for communication with you.
    • Example 1: We send a message when the advertising campaign starts.
    • Example 2: We send a message when the advertising campaign ends.
• How is my personal data shared?
  • We share your name and country with our bookkeeper and with our auditor.
• Legal Basis:
  • Execution of a contract
  • Comply with law.
• How long will you store my personal data?
  • The data is kept for 6 years from the end of the financial year in which they relate.

When You Try to Log In

• Personal data you provide yourself
  • Email address
Personal data your browser provides us automatically
• IP address
• Display resolution
• Name of the browser and its version number
• Operating system and its version number
• What are the legal basis for collecting information about me?
  • Your consent in the following cases:
    • To verify your identity and grant access to your account
  • Controller's legitimate interests in the following cases:
    • Detecting, preventing, or otherwise addressing fraud, abuse, security, or technical issues with our services
• Data Retention
  • 5 years

When You Write or Edit a Comment

This does not mean the comment field when you sign a petition.

• Personal data you provide yourself
  • Name
  • Email address
  • Content of the comment
Personal data your browser provides us automatically
• IP address
• Display resolution
• Name of the browser and its version number
• Operating system and its version number
• Purpose:
  • To display and manage your comment on the platform
• Legal Basis
  • Consent of the data subject
• How is my personal data shared?
  • -
• Data Retention
  • Retained for as long as the petition has not been removed.

When You Make a Request to Manage Your Signatures

• Personal data you provide yourself
  • Email address
Personal data your browser provides us automatically
• IP address
• Display resolution
• Name of the browser and its version number
• Operating system and its version number
• Purpose:
  • To identify and provide you with the capability to manage your signatures
• Legal Basis
  • Consent of the data subject
• Data Retention
  • 365 days

When You View any Page on Our Website

Personal data your browser provides us automatically
• IP address
• Display resolution
• Name of the browser and its version number
• Operating system and its version number
• Purpose:
  • To measure the number of page views
  • To measure the number of visits
  • To improve the website
  • To analyze user behaviour
  • Detecting, preventing, or otherwise addressing fraud, abuse, security, or technical issues with our services
• Legal Basis
  • Controller's legitimate interests
• Data Retention
  • 365 days

When You View an Ad of Petition on Our Website

Personal data your browser provides us automatically
• IP address
• Display resolution
• Name of the browser and its version number
• Operating system and its version number
• Purpose:
  • Measure the effectiveness of ad campaigns
  • To target petition ads better
• Legal Basis
  • Controller's legitimate interests
• Data Retention
  • 365 days

When you click Facebook Share Button

• When you click the Facebook share button on our website, you have the option to share content from our site on your Facebook profile.
• Clicking this button may result in Facebook collecting data about you, such as your interaction with the button and the date and time of the action. However, Facebook only receives this information when you actively click the share button.

Your Privacy with Facebook

• These features are governed by Facebook's privacy policy, and we do not have control over how Facebook processes the data once it is shared.
• We recommend reviewing Facebook’s privacy policy and your privacy settings on Facebook to understand how your data is handled.

Remember, using this Facebook feature is entirely optional. If you have any concerns about privacy related to this feature, you may choose to avoid using this feature.

When you click Facebook Login Button

• We offer the option to sign in to our website using Facebook Login for your convenience.
• When you use Facebook Login, Facebook will provide us with access to certain information in your Facebook account, as per your privacy settings on Facebook. This can include your name, email, and profile picture.
• Please note that Facebook only shares this information with us if you choose to use Facebook Login and give consent for data sharing.

Your Privacy with Facebook

• These features are governed by Facebook's privacy policy, and we do not have control over how Facebook processes the data once it is shared.
• We recommend reviewing Facebook’s privacy policy and your privacy settings on Facebook to understand how your data is handled.

Remember, using this Facebook feature is entirely optional. If you have any concerns about privacy related to this feature, you may choose to avoid using this feature.

When you click WhatsApp Share Button

We have integrated a WhatsApp share button on our website. This feature allows you to share content from our site with others through WhatsApp. Here's how it affects your data:

• When you click the WhatsApp share button, it enables you to share links or content from our website directly through your WhatsApp account.
• Using this button may involve WhatsApp accessing information about your action, such as the fact that you shared a specific link. However, WhatsApp only receives this information when you actively use the share button.
• We do not collect any personal data through the use of the WhatsApp share button. However, WhatsApp's data processing practices are governed by its own privacy policy.

We recommend reviewing WhatsApp’s privacy policy to understand how your data is handled when using this feature. Remember, using the WhatsApp share button is completely optional.

Personal data we receive if you pay us using payment processor PayTrail

• Your name
• Name of your bank

Personal data we receive if you pay us using payment processor Paypal

• Your name
• Email address
• Phone number
• Residence country

When you receive an email from us or send us an email

Google

Google Services for Email Handling: We utilize Google's email services for both sending emails to our users and storing emails we receive. This integration with Google allows us to maintain efficient, reliable communication and ensure that our email records are securely managed.

Data Processing: The use of Google's email services involves processing personal data, including but not limited to, email addresses and the content of the emails. This processing is essential for the delivery and storage of emails, enabling us to keep in touch with our users and effectively manage our services.

Data Protection: We take the privacy and security of your personal data seriously. Google provides robust security measures to protect the data processed through its email services against unauthorized access, loss, or compromise. In line with our commitment to data protection, we have implemented appropriate safeguards to ensure that your personal data is handled securely and in accordance with applicable data protection laws.

Legal Basis: Our use of Google's email services to send and store emails is based on our legitimate interest in utilizing secure and efficient tools for business communication. This practice helps us in fulfilling our contractual obligations, providing support, and delivering important information to our users.

AWS SES

We utilize Amazon Web Services Simple Email Service (AWS SES) as our email sending service.

Data Processing and Security: When sending emails via AWS SES, certain personal data, including email addresses and potentially names (if included in the email content), are processed through AWS's servers.

Legal Basis for Using AWS SES: The use of AWS SES for email communication is based on our legitimate interests in utilizing efficient and secure methods for sending emails to our users.

Data Protection: We have implemented appropriate safeguards to ensure the confidentiality and security of your data when processed by AWS SES. This includes data encryption in transit and adherence to strict data processing agreements that comply with applicable data protection laws.

For more information on how AWS handles data and their commitment to data protection, please refer to the AWS Privacy Notice.