Petitions.com的隐私政策

当您创建请愿书时

• 关于我，您会处理哪些个人数据，您是如何收集这些数据的？
  • 您自己提供的个人数据
    • 您的姓名
    • 电子邮件地址
    • 国家
  • 您的浏览器自动向我们提供的个人数据
    • IP地址
    • 显示分辨率
    • 浏览器的名称及其版本号
    • 操作系统及其版本号
• 处理我的个人数据的法律依据和目的是什么？
  • 履行合同的以下情况：
    • To identify you
    • To contact you.
    • To display your name on the petition page and in petition listings.
  • 法律义务在以下情况下：
    • We will process your data when we have a legal obligation to do so, for example, if we are responding to legal process or an enforceable governmental request.
• 您会保存我的个人数据多久？
  • Your personal data related to the petition is stored until the petition is either deleted by you or by our team.
• 您如何保障我的个人数据安全？
  • 组织措施
    • Employee training
    • Our workers only have access to the data that is needed for their work.
  • 技术措施
    • We use Security Sockets Layer (SSL) encryption technology to encrypt all the data before it travels over the internet.
    • Firewalls
    • Daily backups
    • Passwords are not saved in clear text. We calculate hash sums of the passwords and use salts.
• 常见问题
  • 如何删除我的请愿书？

数据保留期：直到您发布或删除草稿为止。当您发布时，草稿的文本副本将被删除。12个月未更改的草稿将被删除，我们会在此之前30天通过电子邮件通知您。

当您签署请愿书或编辑您的签名时

• 您自己提供的个人数据
  • The author of each petition determines what information is requested from the signatories. 请查看您感兴趣的请愿书的隐私政策。
• 目的
  • The author of each petition determines the purposes for processing the personal data of the signatories. 请查看您感兴趣的请愿书的隐私政策。
• 合法依据
  • 请查看您感兴趣的请愿书的隐私政策。
• 您会保存我的个人数据多久？
  • The author of each petition determines the retention period for the personal data of the signatories. 请查看您感兴趣的请愿书的隐私政策。
• Roles and Responsibilities:
  • 我们公司作为数据处理者（Data Processor），代表这份请愿书的作者，即数据控制者（Data Controller），处理个人数据。 The Data Controller is responsible for deciding what data is collected, why it is collected, and how long it is retained. As the Data Processor, we manage the technical aspects of this process, including data storage, security, and processing.

When you send a message to the author of a petition

• 您自己提供的个人数据
  • 姓名
  • 电子邮件地址
  • Content of the Message
您的浏览器自动向我们提供的个人数据
• IP地址
• 显示分辨率
• 浏览器的名称及其版本号
• 操作系统及其版本号
• 目的
  • To enable communication between the author and individuals interested in the topic of the petition.
• 合法依据
  • Consent of the data subject
• 数据保留期限
  • 最多5年
• How is my personal data shared?
• The author of the petition will receive the information provided in the contact form.

当您创建或编辑用户帐户时

• 您自己提供的个人数据
  • 姓名
  • 电子邮件地址
  • 城市
  • 国家
您的浏览器自动向我们提供的个人数据
• IP地址
• 显示分辨率
• 浏览器的名称及其版本号
• 操作系统及其版本号
• 目的
  • Email address is used for communication with you.
  • The email address serves as the username for your account.
  • To manage your user account
  • To pre-fill the signature forms
  • To manage petitions you have created
  • To manage your own signatures
• 合法依据
  • Consent of the data subject
• 数据保留期限
  • Retained as long as the user account is active.

当您购买广告活动时

• 您自己提供的个人数据
  • 您的姓名
  • 您的电子邮件地址
  • Your country
您的浏览器自动向我们提供的个人数据
• IP地址
• 显示分辨率
• 浏览器的名称及其版本号
• 操作系统及其版本号
• 目的
  • Country information is used to determine the vat rate.
  • Email address is used for communication with you.
    • Example 1: We send a message when the advertising campaign starts.
    • Example 2: We send a message when the advertising campaign ends.
• How is my personal data shared?
  • We share your name and country with our bookkeeper and with our auditor.
• 合法依据
  • Execution of a contract
  • Comply with law.
• 您会保存我的个人数据多久？
  • The data is kept for 6 years from the end of the financial year in which they relate.

当您尝试登录时

• 您自己提供的个人数据
  • 电子邮件地址
您的浏览器自动向我们提供的个人数据
• IP地址
• 显示分辨率
• 浏览器的名称及其版本号
• 操作系统及其版本号
• What are the legal basis for collecting information about me?
  • Your consent in the following cases:
    • To verify your identity and grant access to your account
  • Controller's legitimate interests in the following cases:
    • Detecting, preventing, or otherwise addressing fraud, abuse, security, or technical issues with our services
• 数据保留期限
  • 5年

当您撰写或编辑评论时

This does not mean the comment field when you sign a petition.

• 您自己提供的个人数据
  • 姓名
  • 电子邮件地址
  • Content of the comment
您的浏览器自动向我们提供的个人数据
• IP地址
• 显示分辨率
• 浏览器的名称及其版本号
• 操作系统及其版本号
• 目的
  • To display and manage your comment on the platform
• 合法依据
  • Consent of the data subject
• How is my personal data shared?
  • -
• 数据保留期限
  • Retained for as long as the petition has not been removed.

• • 请愿作者以及有权编辑评论所在文本（请愿书正文或公告）的共同管理者。 签名者和其他访客无法看到这些评论。
• • 评论会一直保留，直至撰写者将其删除。 删除评论串中的第一条评论时，其下的回复也会一并删除。
  • 已解决的评论串会在被标记为已解决 12 个月后删除。
  • 请愿书被删除时，其所有评论也会在一天内一并删除。 删除公告时，其评论中引用的文本也会一并删除。

• • 仅限我们作为数据控制者所持有的数据：技术和连接数据（例如您的 IP 地址和日志），以及对于注册用户，其账户详细信息（姓名、电子邮件地址和电话号码）。
  • 我们不是请愿书内容或联署人所提供信息（包括联署人评论）的数据控制者。 对于这部分内容，请愿发起人才是数据控制者。
• • 我们及第三方的合法利益（《通用数据保护条例》(GDPR) 第 6(1)(f) 条）：提起、行使或抗辩法律主张的权利。

当您请求管理您的签名时

• 您自己提供的个人数据
  • 电子邮件地址
您的浏览器自动向我们提供的个人数据
• IP地址
• 显示分辨率
• 浏览器的名称及其版本号
• 操作系统及其版本号
• 目的
  • To identify and provide you with the capability to manage your signatures
• 合法依据
  • Consent of the data subject
• 数据保留期限
  • 365天

签名可以由签名者、请愿作者或我们的支持团队移除。 签名的个人数据随后被删除，但我们保留移除操作的简要记录。

• 请愿的移除记录：签名号、请愿、谁移除了它、从固定列表中选择的原因和时间。 它不包含签名者的姓名或电子邮件地址。
• 电子邮件地址记录：从电子邮件地址计算的代码（不是地址本身）、移除的日期和谁移除了它。 它不显示签署了哪个请愿。 如果您稍后向我们查询有关您数据的信息，我们可以告诉您使用您地址的签名在这些日期被移除了。
  • 数据保留：14天。 之后该记录将被删除，从我们的备份中最多再保留30天。
• 如果您告诉我们有人用您的电子邮件地址签署请愿，并且要求我们保留报警证据，我们可以保留该签名的IP地址、设备详情、时间以及从签署者名称生成的代码。 我们仅根据警察或其他权力机构的正式请求披露它们。
  • 数据保留：为该案例选择的期间，从30天到2年。

当请愿作者或我们移除公告时，其标题、文本和封面图像将从公告中删除。我们保留其标题和之前编辑的记录90天，以便处理纠纷和滥用，然后删除它们。如果公告因隐私原因被移除，我们立即删除它们。

当您查看我们网站上的任何页面时

您的浏览器自动向我们提供的个人数据
• IP地址
• 显示分辨率
• 浏览器的名称及其版本号
• 操作系统及其版本号
• 目的
  • To measure the number of page views
  • To measure the number of visits
  • To improve the website
  • To analyze user behaviour
  • Detecting, preventing, or otherwise addressing fraud, abuse, security, or technical issues with our services
• 合法依据
  • Controller's legitimate interests
• 数据保留期限
  • 365天

您的浏览器自动向我们提供的个人数据
• IP地址
• 显示分辨率
• 浏览器的名称及其版本号
• 操作系统及其版本号
• 目的
  • Measure the effectiveness of ad campaigns
  • To target petition ads better
• 合法依据
  • Controller's legitimate interests
• 数据保留期限
  • 365天

当您点击 Facebook 分享按钮时

• 当您点击 Facebook 分享按钮时 on our website, you have the option to share content from our site on your Facebook profile.
• Clicking this button may result in Facebook collecting data about you, such as your interaction with the button and the date and time of the action. However, Facebook only receives this information when you actively click the share button.

Your Privacy with Facebook

• These features are governed by Facebook's privacy policy, and we do not have control over how Facebook processes the data once it is shared.
• We recommend reviewing Facebook’s privacy policy and your privacy settings on Facebook to understand how your data is handled.

Remember, using this Facebook feature is entirely optional. If you have any concerns about privacy related to this feature, you may choose to avoid using this feature.

当您点击 Facebook 登录按钮时

• We offer the option to sign in to our website using Facebook Login for your convenience.
• When you use Facebook Login, Facebook will provide us with access to certain information in your Facebook account, as per your privacy settings on Facebook. This can include your name, email, and profile picture.
• Please note that Facebook only shares this information with us if you choose to use Facebook Login and give consent for data sharing.

Your Privacy with Facebook

• These features are governed by Facebook's privacy policy, and we do not have control over how Facebook processes the data once it is shared.
• We recommend reviewing Facebook’s privacy policy and your privacy settings on Facebook to understand how your data is handled.

Remember, using this Facebook feature is entirely optional. If you have any concerns about privacy related to this feature, you may choose to avoid using this feature.

当您点击 WhatsApp 分享按钮时

We have integrated a WhatsApp share button on our website. This feature allows you to share content from our site with others through WhatsApp. Here's how it affects your data:

• 当您点击 WhatsApp 分享按钮时, it enables you to share links or content from our website directly through your WhatsApp account.
• Using this button may involve WhatsApp accessing information about your action, such as the fact that you shared a specific link. However, WhatsApp only receives this information when you actively use the share button.
• We do not collect any personal data through the use of the WhatsApp share button. However, WhatsApp's data processing practices are governed by its own privacy policy.

We recommend reviewing WhatsApp’s privacy policy to understand how your data is handled when using this feature. Remember, using the WhatsApp share button is completely optional.

Personal data we receive if you pay us using payment processor Paytrail

• 您的姓名
• Name of your bank

Personal data we receive if you pay us using payment processor Paypal

• 您的姓名
• 电子邮件地址
• 电话号码
• Residence country

当您收到我们的电子邮件或向我们发送电子邮件时

Google

Google Services for Email Handling: We utilize Google's email services for both sending emails to our users and storing emails we receive. This integration with Google allows us to maintain efficient, reliable communication and ensure that our email records are securely managed.

Data Processing: The use of Google's email services involves processing personal data, including but not limited to, email addresses and the content of the emails. This processing is essential for the delivery and storage of emails, enabling us to keep in touch with our users and effectively manage our services.

Data Protection: We take the privacy and security of your personal data seriously. Google provides robust security measures to protect the data processed through its email services against unauthorized access, loss, or compromise. In line with our commitment to data protection, we have implemented appropriate safeguards to ensure that your personal data is handled securely and in accordance with applicable data protection laws.

Legal Basis: Our use of Google's email services to send and store emails is based on our legitimate interest in utilizing secure and efficient tools for business communication. This practice helps us in fulfilling our contractual obligations, providing support, and delivering important information to our users.

AWS SES

We utilize Amazon Web Services Simple Email Service (AWS SES) as our email sending service.

Data Processing and Security: When sending emails via AWS SES, certain personal data, including email addresses and potentially names (if included in the email content), are processed through AWS's servers.

Legal Basis for Using AWS SES: The use of AWS SES for email communication is based on our legitimate interests in utilizing efficient and secure methods for sending emails to our users.

Data Protection: We have implemented appropriate safeguards to ensure the confidentiality and security of your data when processed by AWS SES. This includes data encryption in transit and adherence to strict data processing agreements that comply with applicable data protection laws.

有关 AWS 如何处理数据及其对数据保护的承诺的更多信息，请参阅 AWS 隐私声明。

内容传输和安全服务（Cloudflare）

We use Cloudflare, Inc. as a content delivery network (CDN), DDoS protection and web security provider on our websites.

Data Processing: When you visit our website, Cloudflare processes technical data necessary to deliver and protect the service, including your IP address, request headers and security-related log data. Cloudflare processes this data on our behalf as a data processor.

Bot and abuse protection (Cloudflare Turnstile): On some of our forms, including the petition signing form, we use Cloudflare Turnstile to tell human visitors apart from automated bots. To do this it processes your IP address and technical signals from your browser and device. It is not used to track you across websites or for advertising.

Purpose: To deliver our website reliably and quickly, and to detect, prevent and mitigate malicious traffic, abuse and security threats.

Legal Basis: Our legitimate interest in ensuring the security, availability and performance of our services.

International Transfers: Cloudflare is headquartered in the United States and operates a global network. Transfers of personal data outside the EU are safeguarded by the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses included in Cloudflare's data processing addendum.

For more information, please refer to the Cloudflare Privacy Policy.