Effective Date: May 21, 2018
We are committed to protecting your privacy when you interact with us. This Privacy Statement (“Privacy Statement” or “Statement”) sets out the privacy practices for the David and Lucile Packard Foundation (“Packard Foundation”, “Foundation”, “us” or “we”) with respect to information, including Personal Data (which means any information relating to an identified or identifiable natural person), we obtain from and about individuals interacting with the Packard Foundation, its websites (our “Site”), grant activities, initiatives, and events. This Statement does not apply to Packard Foundation employees.
Please read the information below to learn about the Personal Data collected about you and how it is used. Please note that there is a separate legal notice found in the “Legal” hyperlink located at the bottom of our Site. This Privacy Statement may be updated from time to time. We will notify you of any changes to our Privacy Statement by posting the new Privacy Statement on our Site and updating the Effective Date listed above.
If you are visiting our Site from the European Union (“EU”) or where applicable EU data protection laws so provide, please see Section 11 on your EU Privacy Rights for additional information.
Privacy Statement Contents
- Personal Data Collected
- How We Process Your Personal Data and On Which Legal Grounds
- With Whom We Share Personal Data
- Your Choices
- Retention of Data
- Security of Data
- Online Tracking and California Do Not Track Disclosures
- Links to and Privacy Statements of Third Party Sites
- Children’s Privacy
- International Transfers of Your Personal Data
- Your EU Privacy Rights
- Contact Information
1. Personal Data Collected
The type of Personal Data we collect depends on how you use this Site or interact with the Packard Foundation.
Sources of Personal Data
Personal Data is collected directly from you when you:
- Register your email address with us or opt-in to receive newsletters and other Foundation updates,
- Register with us for an event that we are hosting or sponsoring,
- Submit information about your organization and limited information about yourself as part of a grant proposal or mission investing,
- Send email messages or feedback, submit forms or transmit other information by email,
- Contact the Packard Foundation for information or support directly, including by phone, mail, or any type of electronic message,
- Complete a survey.
In addition, the Packard Foundation receives Personal Data from third parties who provide services to us, such as web analytics providers. The Foundation may also receive limited contact and organizational information about you from third parties who refer you to us for grantmaking purposes.
Categories of Personal Data
The Packard Foundation generally collects Personal Data directly from you (electronically, in writing, or verbally). The categories of Personal Data include:
- Contact information (such as name, email address, mailing address and phone numbers),
- Event registration information (contact information such as name, email address, phone and cell phone numbers, guest names, administrative assistant’s email address, and travel information),
- Account log-in credentials,
- Financial information you provide to us related to the grantmaking process,
- Any other information you provide to us voluntarily as part of the grantmaking or investment process,
- Any information you publicly post on our Site,
- Photographs, images, video and other user-generated content such as materials that you may submit to us,
- Job applicant data (such as name, email, resume, social media profiles (e.g., LinkedIn), cover letter, and any other information you upload as part of your application), and
- Data gathered by technology when you visit our Site.
In the course of fulfilling our mission, as further described in the following section and on our website, we may process data that may be considered Special Categories of Personal Data as defined by applicable law, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, and data concerning health or data concerning a natural person’s sex life or sexual orientation.
We also automatically collect information about you from cookies and other similar technologies, which may be considered Personal Data under applicable laws. For more information on cookies, please see the Online Tracking section below.
2. How We Process Your Personal Data and On Which Legal Grounds
We process your Personal Data to:
- Provide and administer grants and manage our investments related to our mission (which includes conservation and science, reproductive health, children families and communities, local grantmaking, agriculture livelihoods and conservation, organizational effectiveness, and mission investing) – these activities are in the legitimate interests of both our Foundation and the grantees we serve, and in certain instances may also be necessary for the performance of a contract with you or in the public interest.
- Advance the objectives of the Foundation, including diversity, equity and inclusion in our own grantmaking and across the field of philanthropy, in the legitimate interests of both the Foundation, you, and the philanthropic community, including our grantees and those they serve.
- Register you for events we host, in the legitimate interest of providing you with travel and event services so that the Packard Foundation may host events, and in order to provide you with arrangements for your attendance.
- Send you administrative notices to inform you about important changes in our contractual relationship, which is necessary for the performance of a contract with you or for our legitimate interest to do so.
- Consider your Packard Foundation employment application, in the legitimate interests of both our Foundation and the applicants who wish to be considered for employment and in order to comply with our legal obligations.
- Provide you with efficient and customized marketing experience related to our programs, activities, initiatives, events, and news that may be of interest to you; to statistically analyze Site use; improve our information and service offerings; and enhance our Site’s content, layout, and services – these activities are necessary for our legitimate interests as set out herein or based on your consent (in which case we would ask you separately to provide your consent to a particular processing activity).
3. With Whom We Share Personal Data
We may provide some of our services through contractual arrangements with other companies and service providers who process the Personal Data on our behalf, in particular for IT support, investment management systems, hosting and maintenance services, marketing and email automation platforms, and other mailing or delivery/transport services.
We also share your Personal Data with accounting and consulting firms and external counsel. We do not sell any of your Personal Data, including your name, mailing address or email address, to any companies. We may occasionally share your Personal Data with our organizational and funding partners, grantees, or co-sponsors of our programs, activities, initiatives, and events if it is necessary for the performance of a contract with you, or in the legitimate interests of our mission.
Occasionally we may be required by law enforcement or other public authorities as well as judicial authorities, courts or tribunals to share Personal Data with them or other parties. We will disclose Personal Data upon receipt of a court order, subpoena, warrant, or other legal process to the extent necessary to meet legal, national security, public interest, or law enforcement obligations or defend our interests in legal, administrative or other proceedings, which may require us to share Personal Data with other parties to the proceedings and their external counsel. We reserve the right to report to law enforcement agencies any activities that we in good faith believe to be unlawful.
You should be aware that when you voluntarily disclose your Personal Data in any public areas on our Site, that Personal Data, along with any information disclosed in your communication, can be collected and used by third parties and may result in unsolicited messages from third parties. Such activities are beyond our control. If you do not want your comments to be viewed by third parties, you are advised not to make any public submissions.
4. Your Choices
If you do not wish to receive information regarding our programs, activities, initiatives, events, and news, please click on the “Unsubscribe” link at the bottom of our emails and electronic newsletters to you or contact us at email@example.com or the address listed below and we will remove your name from our mailing lists.
You can also access your Personal Data by emailing us at firstname.lastname@example.org. Please include your name, address, and/or email address when you contact us. It is possible that you may be denied access to your Personal Data. For instance, access can be denied when: giving one person access would compromise another’s privacy rights; disclosure is likely to interfere with the safeguarding of national security, defense, or public security; and disclosure could interfere with law enforcement or legal actions. These are only examples, and access may be denied in other situations in compliance with applicable laws. For additional information about EU rights, please see the Your EU Rights section below.
5. Retention of Data
We will keep your Personal Data as reasonably necessary to fulfill the purposes for which Personal Data is collected as stated herein; for as long as is necessary for the performance of the contract between you and us, if any; and to comply with legal and statutory obligations, such as in tax, trade and corporate laws. When we no longer need your Personal Data for our purposes, we will destroy, delete or erase that Personal Data or convert it into an anonymous form.
6. Security of Data
The Packard Foundation will take reasonable steps to protect your Personal Data in our possession from loss, misuse, unauthorized access, disclosure, alteration, and destruction. For example, we use security measures including safeguarding and monitoring our network and controlling access to our files, equipment, and buildings.
7. Online Tracking and California Do Not Track Disclosures
Our Site automatically gathers certain traffic information, such as Internet Protocol (“IP”) addresses and other numeric codes used to identify a computer, which may be considered Personal Data under applicable laws. However, this information is aggregated and may not personally identify you. It is collected to help us improve the Site and the services we offer. For example, we may use IP addresses to monitor Site usage to better prepare for anticipated traffic patterns. We may also gather user information that we save on your computer (not on our server) as “cookies” in order to streamline the Site experience.
You can opt out from any of these cookies by adjusting your browser settings to reject cookies. If you have previously visited our Site, you may also have to delete any existing cookies from your browser. Many of our cookies are functionality cookies and some of these cookies are managed for us by third parties. You can control the use of these cookies through your browser settings, but if you opt out from them, we may be unable to offer some services or support and we may also be unable to remember your preferences or that you did not want a certain service.
California Do Not Track Disclosures
Some browsers have incorporated Do Not Track (“DNT”) preferences. Most of these features, when turned on, send signals to the website you are visiting that you do not wish to have information about your online searching and browsing activities collected and used. As there is not yet a common agreement about how to interpret DNT signals, we do not honor DNT signals from website browsers at this time. However, you may refuse or delete cookies as described above.
8. Links to and Privacy Statements of Third Party Sites
This Statement only applies to the processing activities of the Packard Foundation, including as it relates to the Personal Data collected from this Site. Once you click on a link to another website (“Linked Site”), you are no longer on this Site. This Statement does not apply to the content or privacy practices of any Linked Site and the Packard Foundation is not responsible for the operation of such Linked Sites. We encourage you to read the privacy statements of each and every website or Linked Site that collects Personal Data. You should contact advertisers, other websites or Linked Sites directly if you have any questions about their privacy policies or their use of the information they collect.
9. Children’s Privacy
The Packard Foundation does not knowingly collect information from individuals under the age of 13 on our Site. In the event that we learn that we have collected information from a child under the age of 13 on our Site, we will delete that information.
10. International Transfers of Your Personal Data
By using the Site or providing Personal Data to the Packard Foundation, your Personal Data is transferred to the United States where the Packard Foundation is headquartered. If you are not a resident of the United States, your country’s laws governing data collection and use may differ from those in the United States. For example, the data protection laws of the United States have not been found by the European Commission to provide the same level of protection as EU data protection law. Some of the third parties with whom we share your Personal Data are also located in third countries that do not provide the same level of protection to your Personal Data. Certain third countries have been officially recognized by the European Commission as providing an adequate level of protection (list available here). Transfers to third parties located in other third countries outside the European Economic Area (“EEA”) take place using an acceptable data transfer mechanism, such as the EU-U.S. Privacy Shield for transfers to self-certified U.S. organizations, the EU Standard Contractual Clauses, Binding Corporate Rules, approved Codes of Conduct and Certifications or in exceptional circumstances on the basis of permissible statutory derogations. Please contact email@example.com, if you want to receive further information or, where available, a copy of the relevant data transfer mechanism.
11. Your EU Privacy Rights
If you are visiting the Site from the EU or where applicable EU data protection laws so provide, you may exercise the following rights regarding your Personal Data:
You have the right to obtain from us confirmation if your Personal Data is being processed and certain information in this regard.
You have the right the request the rectification of inaccurate Personal Data and to have incomplete data completed.
You have the right, when we process Personal Data on the grounds of legitimate interests, to object to the processing of your Personal Data for compelling and legitimate reasons relating to your particular situation, except in cases where legal provisions expressly provide for that processing. In addition, you have the right to object at any time where your Personal Data is processed for direct marketing purposes.
You may receive your Personal Data that you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit them to other data controllers without hindrance. This right only exists if the processing is based on your consent or a contract and the processing is carried out by automated means.
You may request to restrict processing of your Personal Data (i) while we verify your request – if you have contested the accuracy of the Personal Data about you which we hold; (ii) if the processing is unlawful and you oppose the erasure of it and request restriction instead; (iii) if we no longer need it, but you tell us you need it to establish, exercise or defend a legal claim; or (iv) while we verify your request if you have objected to processing based on public or legitimate interest.
You may request to erase your Personal Data if it is no longer necessary for the purposes for which we have collected it, you have withdrawn your consent and no other legal ground for the processing exists, you objected and no overriding legitimate grounds for the processing exist, the processing is unlawful, or erasure is required to comply with a legal obligation.
Right to lodge a complaint
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, or the location where the issue that is the subject of the complaint occurred.
Right to refuse or withdraw consent
Please note that in case we ask for your consent to certain processing, you are free to refuse to give consent and you can withdraw your consent at any time without any adverse negative consequences. The lawfulness of any processing of your Personal Data that occurred prior to the withdrawal of your consent will not be affected.
If you have questions about exercising any of those rights or their applicability to any of our particular processing activities or have questions about any data transfer mechanism or want a copy thereof, you may contact us at firstname.lastname@example.org or at the address provided in the section below.
12. Contact Information
Unless otherwise stated, the Packard Foundation is a data controller for Personal Data processed subject to this Statement. If you have any questions about this Statement or if you believe that your Personal Data has been processed or disclosed in violation of this Statement, please contact us by sending an email to email@example.com, or a letter to:
The David and Lucile Packard Foundation
343 Second Street
Los Altos, CA 94022 USA
Attn: General Counsel