DACdb Privacy Policy

Scope

The District and Club Database websites and system (“DACdb”) are available as a paid service to Rotary Clubs, Districts, and Zones worldwide. Your personal privacy is especially important to us. This Privacy Policy describes the information that may be gathered while you are using DACdb.

Please review this Privacy Policy before entering any personal information into DACdb. By using DACdb, you accept and consent to the practices described in this Privacy Policy. By your continued use, you expressly consent to our collection, storage, use, and limited disclosure of your personal information as described here. If you do not agree with these practices, you are free to discontinue your use of DACdb at any time.

If you have questions about our Privacy Policy, please email us at [email protected].

This Privacy Policy applies to all DACdb websites and services, including, but not limited to: DACdb.com, DACdb.org, MyEvent.DACdb.com, m.DACdb.com, MemberMinderPro.com, the Ignite Mobile app, and Member Minder Pro, LLC, and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to Member Minder Pro, LLC include DACdb.com and DACdb. The DACdb website(s) comprise a cloud-based Rotary Membership Management site by which DACdb provides software-as-a-service.

By using the DACdb system, you consent to the data practices described in this policy and the DACdb Terms of Use Policy.

Please read the DACdb Terms of Use for more information.

Collection of your Personal Information

We do not collect personally identifiable information from our users, other than what is entered under MyData and as required by Rotary International, your Club, District, and/or Zone. We may gather personal or non-personal information in the future. We collect data from you, your Club, District, Zone, Rotary International (RI), and other RI events and services (e.g., PETS, RLI) that may use DACdb for data processing/storage.

Information about your computer hardware and software may automatically be collected by DACdb. This information can include: your IP address, browser type, domain names, access times, and referring website addresses. This information is used to operate the service, to maintain the quality of the service, and to provide general statistics regarding the use of the DACdb website. DACdb tracks clicks on PMail links as well as public sponsor listings entered by Clubs, Districts, and Zones into the DACdb Sponsors module.

Please keep in mind that if you, your Club, District, and/or Zone directly discloses personally identifiable information or personally sensitive data through DACdb’s public files such as Club, District, or Zone newsletters, directories, public website files, etc., this information may be collected and used by others.

DACdb encourages you to review the privacy statements of websites you choose to link to from DACdb so that you can understand how those websites collect, use, and share your information. DACdb is not responsible for the privacy statements or other content on websites outside of DACdb.

We may collect the following categories of data about you: your name, contact information, username, password, gender, Club, District and Zone information, commercial information, Internet/electronic activity, geolocation, image, professional or employment-related information, education information, birth year, marital status, spouse and/or parents’ names, wealth data, donation history, and inferences from the foregoing.

Disclosure of Personal Data

DACdb is an approved licensed vendor of Rotary International.
Your data will be shared with Rotary International (your name, contact information, birth year, Club and District information, commercial information, gender, professional or employment-related information).
When we believe in good faith that the law requires disclosure or that disclosure is necessary to protect or enforce the rights, property, safety, or security of ourselves or others.
The member data contained in DACdb is owned by the member and Rotary International. DACdb allows the use of the member data for internal membership only. It is not to be used for any commercial purposes by any member. Member data will never be sold by DACdb as we do not own member data.
DACdb will periodically use the member data of club leaders and administrators to notify them of product and system updates that will be of interest or applicable to their area of responsibility.

Access, Review, and Change of Personal Data

You can access, review, and change most of your personal information by logging on to your account at DACdb: DACdb.com.

Club officers, Club administrators, District officers, District administrators, Zone officers, Zone administrators, and DACdb staff may have access to view and edit your personal data.

Use of Cookies

DACdb uses “cookies” to help you personalize your online experience and maintain the state of the session between requests. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

The primary purpose of cookies is to tell us who you are each time you navigate to a page once you have logged in. Two cookies are used to maintain a session state during your interaction with DACdb. They are required.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you will not be able to login to DACdb.

Security of your Personal Information

DACdb uses a security system firewall to protect information stored on its computer systems. Access through the firewall is limited to certain “ports” and/or a restricted list of IPs.

DACdb also secures your personal information from unauthorized access via a secured login. DACdb does not store any credit card information on its servers. When paying by credit card, you are taken by DACdb directly to the third-party merchant gateway (e.g., Team Merchant, IPpay, PayPal, Authorize.net), which may or may not store your credit card information on their system.

Children Under Thirteen

DACdb does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of thirteen, you do not have permission to use this website.

Connecting your DACdb Account from Third-Party Websites

You can link your DACdb profile to third-party social media accounts (e.g., Facebook). BY CONNECTING YOUR DACDB ACCOUNT TO YOUR THIRD-PARTY ACCOUNT, YOU ACKNOWLEDGE AND AGREE THAT YOU ARE CONSENTING TO THE CONTINUOUS RELEASE OF INFORMATION ABOUT YOU TO OTHERS (IN ACCORDANCE WITH YOUR PRIVACY SETTINGS ON THOSE THIRD-PARTY SITES). IF YOU DO NOT WANT INFORMATION ABOUT YOU, INCLUDING PERSONALLY IDENTIFYING INFORMATION, TO BE SHARED IN THIS MANNER, DO NOT USE THIS FEATURE. You may disconnect your link from or to a third-party site at any time. Users may manage their links to other websites by editing their social media contact information under MyData.

Opt-Out & Unsubscribe

We respect your privacy and give you an opportunity to opt out of receiving announcements of certain information. Users may opt-out of receiving any or all communications from DACdb by setting the opt-out setting under the contact information tab when editing your profile under MyData or by clicking on the unsubscribe link on communications sent to them.

Changes to this Privacy Policy

DACdb will frequently update this Privacy Policy to reflect company and customer feedback, and the changing laws around privacy standards. DACdb encourages you to periodically review this Privacy Policy to be informed of how DACdb is protecting your information. Despite DACdb’s efforts, we cannot guarantee the absolute security of any member, personal or other data residing on our system. WE DO NOT WARRANT OR REPRESENT THAT YOUR PERSONAL INFORMATION WILL BE PROTECTED AGAINST LOSS, MISUSE OR ALTERATION BY THIRD PARTIES.

Incorporation

This Privacy Policy incorporates the DACdb Terms of Use found here [LINK].

California Residents – The CCPA – Your Rights

The California Consumer Privacy Act of 2018 (CCPA) provides California residents with certain rights to protect their personal information from businesses who collect their information. For more information about the rights of California residents provided under CCPA, please visit https://oag.ca.gov/privacy/ccpa.

The right to request access to your personal information.
The right to opt out of the sale of your personal information. DACdb does not sell your information to any third-parties.
The right to request deletion of your personal information.
The right to the portability of your personal information.
The right not to be discriminated against for exercising any of your other CCPA rights.
In accordance with the CCPA and when applicable, other state consumer privacy laws, including Connecticut, Colorado, Virginia, and Utah, DACdb includes the following additional provisions to this Privacy Policy: our website collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or device – personal information. Specifically, our website has collected one or more of the data elements listed in the following categories of personal information: Identifiers, Personal Information Categories, Protected Classification Characteristics, Commercial Information, Internet or other similar activity, Equipment Information.

We do not sell your information to any third parties. You may request deletion of your data by writing to: [email protected] or calling 720.504.7300 x1. Please discuss this with your club prior to contacting us as your club could re-load your data from RI. Per the CCPA, California residents may make a personal information request twice in a 12-month period. We will need to collect information from you so that we can verify your identity. We will respond within 45 days of receiving a personal information request. The CCPA became effective January 1, 2020.

Florida Residents – Your Rights

Florida’s laws require DACdb to confirm to Florida residents that DACdb is collecting data about you. You have the right to access that data, correct inaccuracies, and delete it.

You can opt out of your data being processed for the purpose of selling, targeted advertising, or profiling, which includes voice or facial recognition data and sensitive information like geolocation data.

DACdb is required under Florida law to take action in response to your requests, which may be made at twice a year cost-free, but we may also charge you a “reasonable fee” to do so.

Texas Residents – Your Rights

DACdb is considered by the laws of Texas to be a “small business,” and is therefore not subject to Texas’ data protection and privacy laws.

Oregon Residents – Your Rights

DACdb believes that this Privacy Policy is fully compliant with Oregon’s data privacy and protection laws.

Montana Residents – Your Rights

DACdb is exempted by the laws of Montana from compliance with Montana’s data privacy and protection laws because DACdb does not provide its services to more than 50,000 Montana residents.

Colorado Residents – Your Rights

The right to opt-out from the sale of their personal data, or use of personal data for targeted advertising and certain types of profiling;
The right to know whether DACdb is collecting personal data;
The right to access personal data that DACdb has collected about them;
The right to correct personal data on DACdb;
The right to delete personal data from DACdb; and
The right to download and remove personal data from DACdb in a format that allows the transfer to another platform.

EU Privacy Notice

EU 1 Introduction

Where you are an EU or EEA resident and DACdb knowingly collects your personal information (also called ‘personal data’), we will do so in accordance with applicable laws that regulate data protection and privacy. This includes, without limitation, the EU General Data Protection Regulation (2016/679) (‘GDPR’) and EU member state national laws that implement or regulate the collection, processing and privacy of your personal data (together, ‘EU Data Protection Law’).
This EU privacy notice (‘EU Privacy Notice’) which should be read in conjunction with Rotary’s Privacy Policy provides further information as required under EU Data Protection Law on how we handle or process the personal data we collect and who we may share it with.
This Privacy Notice also provides information on your legal rights under EU Data Protection Law and how you can exercise them.

EU 2 How personal data is collected

Because of the global nature of the Rotary organization and its club network, DACdb may hold and process personal data that is collected from clubs, districts and partner organizations around the world, including within the EU/EEA.
This also means that if you are a member or individual contact of this network resident in the EU/EEA, your personal data may be transferred from the EU/EEA to DACdb systems in the United States.
US data privacy laws are currently not considered to meet the same legal standards of protection for personal data as set out under EU Data Protection Law. However, in order to safeguard personal data received from the EU/EEA, we only allow such a transfer of personal data to the US or other third countries under an approved contract or another appropriate mechanism which is legally authorized under EU Data Protection Law.
This is to make sure that the personal data that DACdb receives and processes (so far as it relates to residents of the EU/EEA) is properly safeguarded in accordance with similar legal standards of privacy you would enjoy under EU Data Protection Law.

EU 3 Direct Marketing

If DACdb provides direct marketing communications to individuals in the EU/EEA regarding services and/or events which may be of interest, this will be done in accordance with EU Data Protection Law, and in particular where we contact individuals for direct marketing purposes by SMS, email, fax, social media and/or any other electronic communication channels, this will only be with the individual’s consent or in relation to similar services to services that the individual has purchased (or made direct enquiries about purchasing) from DACdb before.
Individuals are also free to object or withdraw consent to receive direct marketing from us at any time, by contacting us at [email protected].

EU 4 The lawful grounds on which we collect and process personal data

We process your personal data for the above purposes, relying on one or more of the following lawful grounds under EU Data Protection Law:
1. where you have freely provided your specific, informed and unambiguous consent for DACdb to process your personal data for particular purposes;
2. where we agree to provide services to you, in order to set up and perform our contractual obligations to you and/or enforce our rights;
3. where we need to process and use your personal data in connection with our legitimate interests as a global network and being able to effectively manage and operate our organization in a consistent manner across all territories. We will always seek to pursue these legitimate interests in a way that does not unduly infringe on your legal rights and freedoms and, in particular, your right to privacy; and/or
4. where we need to comply with a legal obligation or for the purpose of us being able to establish, exercise or defend legal claims.
Please also note that some of the personal data we receive and that we process may include what is known as ‘sensitive’ or ‘special category’ personal data about you, for example, information regarding your ethnic origin or political, philosophical and religious beliefs. This is not the type of data that DACdb, Rotary or its clubs would routinely collect, but if we process such sensitive or special category data we will only do this in specific situations where:
1. you have provided this with your explicit consent for us to use it; or,
2. there is a legal obligation on us to process such data in accordance with EU Data Protection Law;
3. it is needed to protect your vital interests (or those of someone else) such as in a medical emergency; or,
4. where you have clearly chosen to publicize such information; or,
5. where needed in connection with a legal claim that we have or may be subject to.

EU 5 Disclosing your personal data to third parties

We may disclose your personal data to certain third party organizations who are processing data solely in accordance with our instructions (called ‘data processors’) such as companies and/or organizations that support our business and operations (for example providers of web or database hosting, IT support, payment providers, event organizers, agencies we use to conduct fraud checks or mail management service providers and Rotary International itself) as well as professionals we use such as lawyers, insurers, auditors or accountants. We only use those data processors who can guarantee to us that adequate safeguards are put in place by them to protect the personal data they process on our behalf.
We may also disclose your personal data to third parties who make their own determination as to how they process your personal data and for what purpose(s) (called “data controllers”). The external third party data controllers identified above may handle your personal data in accordance with their own chosen procedures and you should check the relevant privacy policies of these companies or organizations to understand how they may use your personal data.
Other than as described above, we will treat your personal data as private and will not routinely disclose it to third parties without you knowing about it. The exceptions are in relation to legal proceedings or where we are legally required to do so and cannot tell you (such as a criminal investigation). We always aim to ensure that your personal data is only used by third parties we deal with for lawful purposes and who observe the principles of EU Data Protection Law.

EU 6 How long we retain your personal data for

DACdb retains personal data identifying you for as long as necessary in the circumstances – for instance, as long you are a member of a club or have a relationship with our network: for a reasonable period to send you marketing where we have regular contact with you, or as may be needed to enforce or defend contract claims or as is required by applicable law.

EU 7 Your personal data rights

In accordance with your legal rights under EU Data Protection Law, you have a ‘subject access request’ right under which can request information about the personal data that we hold about you, what we use that personal data for and who it may be disclosed to, as well as certain other information.
Usually we will have one month to respond to a subject access request. However, we reserve the right to verify your identity and we may, in case of complex requests, require a further two months to respond. We may also charge for administrative time in dealing with any manifestly unreasonable or excessive requests. We may also require further information to locate the specific information you seek and certain legal exemptions under EU Data Protection Law may apply when responding to your subject access request.
Under EU Data Protection Law, EU/EEA residents also have the following rights, which are exercisable by making a request to us in writing:
1. that we correct personal data that we hold about you which is inaccurate or incomplete;
2. that we erase your personal data without undue delay if we no longer need to hold or process it;
3. to object to any automated processing (if applicable) that we carry out in relation to your personal data, for example if we conduct any automated credit scoring;
4. to object to our use of your personal data for direct marketing;
5. to object and/or to restrict the use of your personal data for purposes other than those set out above unless we have a compelling legitimate reason; or
6. that we transfer personal data to another party where the personal data has been collected with your consent or is being used to perform a contract with you and is being processed by automated means.
So we can fully comply, please note that these requests may also be forwarded on to third party data processors who are involved in the processing of your personal data on our behalf.
If you would like to exercise any of the rights set out above, please contact us at [email protected].
If you make a request and are not satisfied with our response, or believe that we are illegally processing your personal data, you have the right to complain to the Office of the Information Commissioner in the United Kingdom.