Make Amazon Pay is a coalition that includes millions of workers and activists across multiple sectors, collectively represented by: 350.org, Amazon Workers International, Amazon Employees for Climate Justice, Athena Coalition, Building and Wood Worker’s International, Berlin vs. Amazon, Data 4 Black Lives, Education International, Focus on the Global South, Hawkers Joint Action Committee, IndustriAll, European Arts and Entertainment Alliance, International Federation of Journalists, International Trade Union Confederation, International Transport Workers' Federation, Oxfam, Progressive International, Public Services International, Tax Justice Network, UNI Global Union, War on Want, Model Alliance, IT for Change, Global Labor Justice - International Labor Rights Forum, Centre for International Corporate Tax Accountability and Research, Friends of the Earth France, International Union of Food, Agricultural, Hotel, Restaurant, Catering, Tobacco and Allied Workers' Associations, Joint Action Committee against Foreign Retail and E-commerce (India), and others that may join the coalition from time to time.
The Progressive International is acting as data controller on behalf of the Make Amazon Pay Coalition.
Therefore, this policy applies to:
Progressive International – an unincorporated association with members (the "Progressive International")
Progressive International (Services) Ltd ("PI Services")
Unless otherwise specified, in this document the terms “Progressive International”, "we" and "us" refer to both of the above entities.
The Progressive International is building a global network of progressive organizations and individuals. To support our work, we collect data to help advance our agenda and to give you the opportunity to get involved in building a better world. We take seriously our duty to keep your data secure. This policy sets out how we collect and store your data — and how we ensure that it remains secure.
1. How your data is collected
1.1 Who collects your data
PI Services is the controller of your data and is responsible for the collection and processing of your data. It is registered as a Data Controller with the Information Commissioners Office. Progressive International (the unincorporated association) will sometimes act as a representative of PI Services when collecting your data, and process your data on behalf of PI Services.
Progressive International can be contacted at the following email address: email@example.com.
1.2 What data is collected
In most circumstances we will only ask you for your name, contact details, language, country, and payment details if you are joining Progressive International (the unincorporated association) as an individual member. If you are an organisation joining the Progressive International (the unincorporated association), we will also ask you to briefly describe your organisation and its main activities.
We will sometimes ask for additional information about you, your views, your interests and activities you take part in, to help shape the overall strategy of Progressive International and to support us in providing services that are useful to you.
Additional information we may ask you to provide may, among other things, include your willingness to volunteer and the activities you would like to take part in and whether or not you are a member of a political party, trade union or other organisation.
If you join Progressive International (the unincorporated association) as a member or donate, then your financial details will only ever be stored by third parties, such as Stripe, and your and our banking service providers. We may also securely store details of when you made a payment, how much you paid and when and how much you intend to pay in the future on our Stripe account.
We will also collect information such as your Internet Protocol (IP) address for monitoring and improving the effectiveness of our website services as well as its security.
Our server is based in New York City in the United States.
1.3 Where we obtain your data from
In most cases, we will obtain your data directly from you, using an electronic or physical form, or verbally.
We may sometimes supplement your data with other publicly available information where we have your consent to do so, where it is necessary to do so in order to comply with a contract we have with you, one of our legal obligations or legitimate interests, or where you have given other organisations permission to share your data with us.
2. How your data is kept secure
2.1 What Progressive International does to keep your data secure
We have physical, electronic, and managerial procedures to help safeguard, prevent unauthorised access to your data, maintain data security, and correctly use your information. These include protecting your information using firewalls, password protection and, where appropriate, encryption.
We use Stripe in order to process financial transactions. This service may process your financial details. Stripe is registered with the Financial Conduct Authority and uses advanced encryption technology to protect transactions and your data.
Progressive International has agreements with all third-party service providers we use in order to process your data to ensure that they take appropriate measures to ensure the security of your information.
We train our staff and volunteers to understand data protection and to keep your data secure. We ensure that all individuals who have access to your data sign data protection agreements and non-disclosure agreements, which detail their duties to keep your data secure and not to disclose it to anyone else without our authorisation.
3. Who has access to your data
We will never sell your data but sometimes it is necessary to share your information, either within the Progressive International organisation, with other organisations or individuals who share our values and aims, with our service providers or with data processors. Data is only ever shared where we have a lawful basis to do so.
We share data with:
– The Progressive International organisation
– Professional advisers
– Service providers (including Stripe)
– Financial organisations – such as credit card payment providers
– Regulatory bodies
Where we share data with the Progressive International organisation, we ensure that the recipient of the data signs an agreement that they will use the data only for the purposes for which it was provided and will take necessary measures to ensure its security.
In the Progressive International, only those authorised to process your data can access it. We make sure that staff and volunteers see only the data that is necessary to perform their tasks.
3.2 International Transfers
In order to process your data for the purposes outlined below, we may need to transfer your data to countries or jurisdictions outside the EEA. In each case, we ensure that our suppliers provide adequate protection for the rights of data individuals in connection the transfer of their personal data.
Currently, we expect all suppliers to use a standard contractual clause approved by the European Union or be subject to the Privacy Shield scheme in the United States.
4. How your data is processed
We have and collect data to help shape our activities and strategy — and to link our members with each other. It will be used to help us provide you with information to match your interests. We may also use it to alert you of activities you may be interested in and events happening in your area now and in the future.
We will process your data and contact you for the following reasons:
- To inform you about our campaigns and actions — and those of our members
- To let you know how you can help support and/or fund our campaigns and campaigns we support
- To let you know how you can campaign with us and with campaigns we support
- To let you know how you can volunteer with us or if we have job vacancies
Other purposes for which we may process your data include:
- Complying with our legal obligations
- Processing your donations and joining fees
- Answering your enquiries
- Responding to complaints
5. The bases on which we process your data
We process your data on the following bases:
- Legal obligation
- Legitimate interest
We process most of the data that we hold on the basis of consent. At times, we process your name and contact details, payment details and additional information about you and your views, interests and activities you take part in on the basis of consent. Where we process your data on the basis of your consent, that processing of your data will be restricted to those types of processing for which we have received your consent and we shall indicate which categories of data we are going to process on the basis of your consent.
Progressive International may have a contract with you. For example, if you join the Progressive International (the unincorporated association), then your agreement to its values amounts to a contract. If you are a member of the Progressive International, then we will process your name and contact details, payment details and geographic information (such as your postcode), for the purposes of administering your membership, in order to check your membership status and eligibility for continued membership, in order to determine which benefits of membership you are eligible for and in order to inform you of these benefits.
If it is necessary for us to process your data in order to comply with any other contracts we may have with you, then when we enter into the contract with you we will inform you of this, as well as informing you of the types of processing that it will be necessary for us to carry out, the categories of data that we will process and the purposes of our doing so.
When we share your data with other organisations or individuals who share our values and aims, we will rely on legitimate interest in circumstances where we haven’t sought your consent.
6. How Progressive International will communicate with you
For any direct “marketing” communications about our campaigning we will only contact you via email or text if we have your permission to do so. We may occasionally send you campaigning materials through the post or telephone you without your consent if in the circumstances we have a legitimate interest to do so.
You may also see campaigning online and on some social media sites if you have interacted with us before.
To respond to your queries, we will contact you either via the medium you used to contact us or by a medium you have indicated you would like us to respond with. If it is necessary to contact you for any administrative purposes then we will usually try to email, text or call you, usually in that order, depending on what contact details we have available for you.
8. How you can affect the way the Progressive International communicates with you
When you interact with us, we will ask you to tell us how you prefer to be contacted. You can unsubscribe from contact at any time. And you can make a number of requests in relation to your data — including that we erase data that we hold on you — by writing to us at firstname.lastname@example.org.
9. How to find out more or make a complaint
If you would like to make a complaint to us about how your data is processed, please contact our Compliance Officer at email@example.com with the subject: “GDPR enquiry”.
You also have a right to make a complaint to the Information Commissioner’s Office. Information on how you can do so is available here.