Last updated: May 25, 2018
This website is owned and operated by the Open Society Foundations.
If you have any questions, please feel free to contact us using the contact details included at section 17.
We may obtain your personal information from a number of sources including:
We may collect, store, and otherwise process the following kinds of personal information:
We will also collect certain information automatically every time you interact with our website. We do this through server log files, cookies, and pixel tags. While the information obtained may not be personal information under the laws of the country you are based in, we recognize that there are certain laws (e.g., EU law) where this information is likely to be personal information.
For instance, we identify and log the Internet Protocol (IP) address of the device you use to access our website automatically in our server log files whenever you visit our website, along with the time of your visit and pages you visit. While the intention of such a practice is to calculate website usage levels and to help us diagnose problems with the website’s servers, we recognize that an IP address is also an online identifier which can be used to create profiles of individuals behind devices. Thus, if we combine non-personal information with personal information, we will treat the combined information as personal information as long as it is combined.
Certain countries have laws that recognize particular types of personal information as more sensitive and therefore requiring greater protection. We collect these types of personal information in limited circumstances. For instance, we may collect personal information about health, religion, ethnicity, sexual life, and political opinions. We may also collect personal information about criminal convictions and offenses.
We will only collect and use this sensitive information if there is a valid reason for doing so and where the law allows us to. For instance, there are stricter rules about the collection and use of sensitive information where EU law applies. When we collect sensitive information or criminal conviction data about you and we are required to tell you what our lawful basis is for doing so, we will set this out.
OSF will use your personal information:
Under certain laws, we are required to rely on one or more lawful grounds to collect and use the personal information that we have outlined above. We consider the grounds listed below to be relevant:
We may make available certain interactive services through our website such as message boards, blogs, and wikis
(Forums). You will be able to post information and materials to Forums. Please see our Community Guidelines.
Any information (including personal information) that you post in a Forum becomes public information and may be available to other visitors to our website and to the general public. In addition, your name may be available in association with any posting you make. Additionally, information regarding your Forum activities is also available for other users to view.
If you are a resident of California, under 18, and a registered user of the services, you may ask us to remove content or information that you have posted to the services by contacting us using the details at section 17. Please note that your request does not ensure complete or comprehensive removal of the content or information, as, for example, some of your content may have been reposted by another user.
For instance, we use a third-party marketing automation platform to assist with managing email addresses and sending emails to our subscribers. When you sign up to receive email updates from us and provide us with your email address, you will receive an automated email originating from this third party confirming your subscription and providing you with a link to unsubscribe from the list.
We may also engage third parties to assist us with website hosting, data analysis, transaction processing, grant making, and other administrative services.
We reserve the right to disclose your personal information to third parties:
Certain countries have rules around the transfer of personal information and require us to ensure that personal information remains protected according to appropriate standards. If you are located in the United Kingdom or the EU or your personal data is collected and used by an organization in the United Kingdom or the EU, please note that certain countries outside of the United Kingdom or the EU have a different standard of protection for personal information. In such cases, where your personal information is transferred, stored, and/or otherwise processed outside the United Kingdom or EU on a regular basis, we will implement appropriate safeguards designed to protect your personal information. The full list of countries recognized by the European Commission as providing an adequate level of protection is available here.
We may engage third parties outside the United Kingdom and the EU to process personal information on our behalf. Since personal information may be shared between OSF entities, personal information is transferred outside the United Kingdom and the EU to OSF in the United States.
If you have any questions about the transfer of your personal information, please contact us using the details at section 17.
OSF takes reasonable technical and organizational precautions to prevent the loss, misuse, or alteration of your personal information. We restrict access to those who have a need to know and we train staff in handling the information securely. Unfortunately, there is no such thing as perfect security in the online environment. As a result, we cannot and do not guarantee the security of any information you transmit to us through or in connection with the website.
If you believe that your interaction with us is no longer secure (e.g., you consider that the security of any account you might have with us has been compromised) please immediately notify us by contacting us at firstname.lastname@example.org.
We will keep your personal information for as long as necessary:
If you have any questions about the retention periods for holding your personal information, please contact us using the details at section 17 below.
Our website is not intended to be used by individuals who are under the age of sixteen (16). If you are under the age of sixteen (16), please do not provide personal information to us or through our website.
Please note that we will honor your requests to exercise your rights to the extent possible and required under applicable law. Certain of these rights may only be available to individuals who interact with our UK or EU offices and to individuals who are located in the United Kingdom or the EU who are on our mailing list.
You have the right to:
Please note that you also have the right to lodge a complaint with your local data protection authority about how we use your personal information if you are located in the United Kingdom or the EU or your personal data is collected and used by an organization in the United Kingdom or the EU. Please always consider raising your concern with us first by contacting us using the contact details in section 17 below.
Your choices regarding our use and disclosure of your personal information
We give you choices regarding our use and disclosure of your personal information for marketing purposes. You may opt-out from:
: If you no longer want to receive marketing-related emails or text messages from us on a going-forward basis, you may opt-out by sending an email to email@example.com or by regular mail using the address provided at section 17. You may also opt out of our email updates by using the unsubscribe link at the bottom of these emails.
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing-related emails, text messages, or paper communications from us, we may still send you important administrative messages, from which you cannot opt-out.
OSF’s Data Governance Group is responsible for monitoring compliance with relevant legislation in relation to personal information. You can contact the Data Governance Group if you have any questions about this privacy notice or our treatment of your personal information: