CelebDonation – Privacy & Cookies Policy

1. Data controller

Donationstarter ApS, CVR no. 46623991, Gammel Køge Landevej 119, 2. th, 2500 Valby, Denmark, e-mail: info@celebdonation.com, is the data controller for the processing of personal data on the CelebDonation platform (the “Platform”) described in this policy.

Public figures and charitable organisations featured in campaigns process personal data on their own channels (for example their social media) as independent data controllers under their own policies. This policy covers Donationstarter's processing on the Platform.

Enquiries: info@celebdonation.com.

2. What we process, why and on what legal basis

• 2.1 Visiting the Platform: technical data such as IP address, device and browser information and pages visited, to deliver the Platform securely and stably (legitimate interest, GDPR art. 6(1)(f)). Non-essential cookies are only set with your consent (art. 6(1)(a) and the Danish Cookie Order) — see section 6.
• 2.2 Participating in a competition (paid or free route): name, contact details, your answer to any competition question, and the participation route used, to administer the competition, verify participations and participation limits, and select and contact the winner (performance of contract, art. 6(1)(b), and legitimate interest in a fair and verifiable competition, art. 6(1)(f)). The free participation route requires the same participant information as the paid route and is processed the same way.
• 2.3 Donations, payments and receipts: transaction and billing details, processed by our payment providers — we do not store full card details — to process the donation, issue a receipt to the e-mail address you provide, and keep statutory accounts (art. 6(1)(b) and legal obligation, art. 6(1)(c), including bookkeeping and fundraising-accounting rules).
• 2.4 Winner handling and identity verification: contact and delivery details, and where relevant identity documentation, to verify eligibility (including age and geographic requirements) and hand over the prize (art. 6(1)(b) and 6(1)(f)). For minors, we may process a parent's or guardian's consent and contact details where the campaign terms allow participation by minors (art. 6(1)(c) and (f)).
• 2.5 Publication of winners: we may publish limited information (for example first name and city) with a lawful basis (legitimate interest, art. 6(1)(f)); you can object at any time. Any further use of images, video or statements only takes place by separate agreement or consent (art. 6(1)(a)).
• 2.6 Prize delivery, shipping and customs: name, delivery address and contact details shared with delivery providers; where a prize is shipped outside the EU/EEA, information required for customs declarations may be processed and shared with the courier and customs authorities (art. 6(1)(b) and (c)).
• 2.7 Taxes on prizes: Prizes may be subject to Danish prize duty (gevinstafgift) or taxation. Where we are legally required to declare, report or pay duties or taxes in connection with a prize, we process and, where required, disclose the necessary winner information to the relevant tax authorities (legal obligation, art. 6(1)(c)).
• 2.8 Marketing: newsletters and campaign alerts are only sent with your prior consent (art. 6(1)(a) and the Danish Marketing Practices Act). Participation or donation is not consent to marketing. You can withdraw consent at any time via the unsubscribe link or by contacting us.
• 2.9 Enquiries and support: the information you submit when contacting us, to answer and document your enquiry (legitimate interest, art. 6(1)(f)).

3. Recipients of personal data

• Data processors (hosting, e-mail, IT and support providers) under data processing agreements;
• Payment providers for processing donations and payments;
• Delivery providers and, where relevant, customs authorities for shipping physical prizes;
• Charitable organisations, in the form of settlement and campaign documentation — as a general rule aggregated, not personal, data;
• Public authorities where required by law, including the Danish Fundraising Board (Indsamlingsnævnet), the Danish Gambling Authority and the tax authorities;
• Professional advisers (legal, accounting, audit) where necessary.

We do not sell personal data.

4. Transfers outside the EU/EEA

We aim to use providers that process personal data within the EU/EEA. Where personal data is transferred outside the EU/EEA — for example when a prize is shipped to a winner outside the EU/EEA, or where a provider processes data in a third country — this only happens with a valid transfer basis, such as an adequacy decision or the EU Commission's Standard Contractual Clauses, or where the transfer is necessary for the performance of the contract with you (art. 49(1)(b)).

5. Retention

• Participation data: deleted no later than [X] months after the campaign is concluded and the prize handed over, unless a dispute or legal obligation requires longer retention;
• Donation, payment and receipt data: retained for 5 years from the end of the relevant financial year, in accordance with the Danish Bookkeeping Act and fundraising-accounting rules;
• Identity documentation for winners: deleted as soon as verification is completed, unless retention is required by law;
• Winner publications: removed no later than [X] months after the campaign, or earlier upon objection, unless retention is required by law;
• Marketing consents: retained while the consent is active and documented for [X] years after withdrawal (documentation of consent);
• Enquiries: deleted when the matter is concluded, typically within [X] months.

6. Cookies

We use essential cookies to operate the Platform's core functions. Non-essential cookies (for example analytics) are only set with your consent, which you can give and withdraw at any time via our cookie banner. An overview of the cookies used, their purpose and their lifetime is available in the cookie settings.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, objection (including to processing based on legitimate interests, such as publication of winner information), data portability, and to withdraw consent at any time without affecting prior processing. To exercise your rights, contact info@celebdonation.com. You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.

8. Age limit

The Platform is not intended for persons under 18 (or the age of majority in your jurisdiction) unless the specific campaign terms state otherwise and any required parental or guardian consent is in place. If we become aware that we have collected personal data from a minor without the required consent, we will delete it.

9. Security

We apply appropriate technical and organisational measures, including encrypted transmission, secure storage and access controls for staff and partners. No online transmission can be guaranteed absolutely secure.

10. Third-party links

The Platform may link to third-party websites, including charities' websites and public figures' social media. We are not responsible for their privacy practices and encourage you to read their policies.

11. Changes to this policy

We may update this policy from time to time. The current version, with the date of the latest update, is always available on this page. Material changes may be communicated by e-mail.

12. Contact

CelebDonation / Donationstarter ApS · CVR no. 46623991 · Gammel Køge Landevej 119, 2. th, 2500 Valby, Denmark · Privacy & general: info@celebdonation.com ·