01. Information We Collect

a. Personal Information:

We may collect personal information such as your name, email address, and any other information you voluntarily provide when you contact us through the provided contact forms.

b. Automatically Collected Information: We may automatically collect non-personal information, including your IP address, browser type, and device information when you access and use the Site.

02. Use of Information

a. Personal Information:

We may use your personal information to respond to your inquiries. We will not share or sell your personal information with third parties without your consent.

b. Automatically Collected Information: We use automatically collected information to analyze trends, administer the site, and gather demographic information for aggregate use.

03. Cookies and Tracking Technologies

Slacuganda.org may use cookies and other tracking technologies to enhance your browsing experience. You can set your browser to refuse cookies or to alert you when cookies are being sent.

04. Third-Party Links

Slacuganda.org contains links to third-party websites. We are not responsible for the privacy practices or the content of these third-party sites. Please review the privacy policies of these sites before providing any personal information.

05. Security

We take reasonable measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no data transmission over the internet or any wireless network can be guaranteed to be 100% secure.

06. Payment providers / data protection provisions for payments

Why do we use payment providers on our website?

We naturally want to offer the best possible service with our website and our integrated online store so that you feel comfortable on our site and make use of our offers. We know that your time is precious and that payment processes in particular need to work quickly and smoothly. For these reasons, we offer you various payment providers. You can choose your preferred payment provider and pay in the usual way.

What data is processed?

Which data is processed exactly depends of course on the respective payment provider. However, data such as name, address, bank details (account number, credit card number, passwords, TANs, etc.) are generally stored. This is necessary data in order to be able to carry out a transaction at all. In addition, any contract data and user data, such as when you visit our website, what content you are interested in or which subpages you click on, may also be stored. Your IP address and information about the computer you are using are also stored by most payment providers. The data is usually stored and processed on the payment provider's servers. We as the website operator do not receive this data. We are only informed whether the payment has worked or not. For identity and credit checks, payment providers may forward data to the relevant body. The business and data protection principles of the respective provider always apply to all payment transactions. Therefore, please always take a look at the payment provider's general terms and conditions and privacy policy. You also have the right to have data deleted or corrected at any time. Please contact the respective service provider regarding your rights (right of withdrawal, right to information and right to be affected).

Duration of data processing

We will inform you about the duration of data processing below if we have further information on this. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. If it is required by law, for example in the case of accounting, this storage period may also be exceeded. For example, we store accounting documents relating to a contract (invoices, contract documents, account statements, etc.) for 10 years (§ 147 AO) and other relevant business documents for 6 years (§ 247 HGB) after they are created.

Right of objection

You always have the right to information, correction and deletion of your personal data. If you have any questions, you can also contact the person responsible for the payment provider used at any time. Contact details can be found either in our specific privacy policy or on the website of the relevant payment provider.
Cookies that payment providers use for their functions can be deleted, deactivated or managed in your browser. Depending on which browser you use, this works in different ways. Please note, however, that the payment process may then no longer work.

Legal basis

We therefore offer other payment service providers in addition to the conventional banking/credit institutions for the processing of contractual or legal relationships (Art. 6 para. 1 lit. b GDPR). The privacy policies of the individual payment providers (such as Amazon Payments, Apple Pay or Discover) provide you with a detailed overview of data processing and data storage. In addition, you can always contact the person responsible if you have any questions about data protection issues.
Information on the specific payment providers - if available - can be found in the following sections. Translated with DeepL.com (free version)

07. Data protection provisions about PayPal as a payment method

What data is processed by PayPal?

In its privacy policy, PayPal distinguishes between different categories of personal data that can be processed through the use of the service. These include login and contact data, identification and signature data, payment information, information about imported contacts, data from your account profile, device data such as your IP address, location data and so-called derived data. This is information that can be derived from transactions or other data. This can include purchasing habits, behavioral patterns, creditworthiness or personal preferences.
Then there is also personal data that is collected by third parties (such as identity checkers, fraud detection providers or your bank). This data includes information from credit reference agencies, transaction data, regulatory information, technical usage data, location data and again derived data.
PayPal and its partners also use tracking technologies such as cookies, pixel tags, web beacons and widgets to recognize you as a user, to customize content and to perform analyses for interest-based advertising.
We offer the option of processing the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on at least the following data to PayPal, insofar as this is necessary for the fulfillment of the contract (Art. 6 para. 1 lit. b. GDPR).
First name, surname, address, email address, telephone number
The processing of the data specified in this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot process a payment via PayPal. You have the option of choosing a different payment method.
PayPal carries out a credit check for various services such as payment by direct debit to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the execution of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). For this purpose, your data (name, address and date of birth, bank account details) will be passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been carried out or rejected or whether a review is pending.
Further information on objection and removal options vis-à-vis PayPal can be found at: https://www.paypal.com/webapps/mpp/ua/privacy-full.

How long and where is the data stored?

In principle, PayPal stores the data for as long as it is necessary to fulfill its obligations and within the scope of the purpose. Personal data that is necessary for the customer relationship will be stored for 10 years after termination of the relationship. If PayPal is subject to a legal obligation, the retention period of the personal data is in accordance with the applicable law (e.g. insolvency law). PayPal also stores personal data for as long as necessary if retention is advisable with regard to legal disputes.
As PayPal is a global company, the service also has data centers worldwide where your data may be stored. This means that your data may also be stored on PayPal servers outside your country and also outside the scope of the GDPR.
Your data will be stored until payment processing has been completed. This also includes the period required for processing refunds, claims management and fraud prevention.

How can I delete my data or prevent data storage?

You have the right to information, correction or deletion and restriction of the processing of your personal data at any time. You can also withdraw your consent to the processing of data at any time.
If you generally want to deactivate, delete or manage cookies you will find the corresponding links to the respective instructions for the most popular browsers under the "Cookies" section.

Legal basis

We have a legitimate interest in integrating an external payment service with PayPal in order to make our offer more attractive and to improve it technically and economically. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). We would like to point out that you can only use PayPal if you enter into a contractual relationship with PayPal. In this case, it may be necessary to provide further data protection and contractual declarations (e.g. consent).
PayPal also processes your data in the USA, among other places. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may entail various risks for the legality and security of data processing.
As a basis for data processing with recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, PayPal uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 GDPR). Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards if it is transferred to third countries (such as the USA) and stored there. Through these clauses, PayPal undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
For more information on the standard contractual clauses and the data processed through the use of PayPal, please refer to the privacy policy at https://www.paypal.com/webapps/mpp/ua/privacy-full.
All texts are protected by copyright.

Source: Created with the data protection generator from AdSimple https://www.adsimple.de/datenschutz-generator/ (click here)

08. Your Choices

You may choose not to provide personal information or disable cookies in your browser settings. However, this may limit your ability to access certain features of slacuganda.org.

09. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated Privacy Policy on the Site.

10. Contact Information

If you have any questions or concerns about this Privacy Policy, please contact us at info(at)slacuganda(.)org.

11. Your Consent

By using slacuganda.org, you consent to our Privacy Policy.

Last updated: 15th of May 2024