UK PRIVACY statement - Ourecho Challenge

This Promotional Privacy Statement ("Statement"):

1. describes how personal data is collected, used, or otherwise processed in the context of the UK offering of the OurEcho Challenge (hereafter the "Promotion" or the “Competition” or the “Service”).

2. applies to personal data of the individuals who will participate in the Promotion (hereafter together or individually referred to as "Data Subjects" or "you").

3. includes a description of your data protection rights, including a right to object to some of the processing activities we carry out.

Please read the ‘OurEcho Challenge Terms and Conditions’ to understand the conditions applicable to participate in the Promotion.

For the purpose of this Statement, the following term "Data Protection Act" shall mean the Data Protection Act 2018 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "Act"), as well as any legislation and/or regulation implementing or created pursuant to the Act and the e-Privacy legislation, or which amends, replaces, re-enacts or consolidates any of them, and all other national applicable laws relating to processing of personal data and privacy that may exist under applicable law. For the purpose of this Statement, "data controller", "processor", "personal data", "processing", shall have the meanings set out in the applicable Data Protection Act.

Who is responsible for the processing of your personal data when you participate in the OurEcho Challenge Promotion?

EarthEcho International (“EarthEcho”) incorporated under the laws of the United States of America, having its office at 2101 L Street NW, Suite 800, Washington, DC 20037 USA is the controller of personal data collected and processed when participating in the Promotion.

 What personal data is processed and why?

In the context of the Service, EarthEcho will collect and process:

-       the children who are participating in the promotion’s full name, name of their school, their school year, their parent’s/guardian’s full name and address

-       the educators full name, work email address, contact number, city and county of the educator’s school or organisation

as collected directly from the educator and parent/guardian of the child through the entry from in order to process your entrance in the Competition (identification and eligibility).

 When you enter your details on the entry form EarthEcho will be collecting and processing your personal data to perform Promotional duties and functions. Further information on how your personal data is processed as part of entering the Promotion can be found here.

In view of the purposes described above, EarthEcho rely on the legal basis that the processing of your personal data is necessary to take steps at your request with a view to entering into and to perform a contract. 

How is your personal data shared with third parties? 

Compelled disclosure

When legally required, strictly necessary for the performance of our services, in legal proceedings, or to protect our rights or the rights of other members of the EarthEcho group or users, we disclose personal data to law enforcement authorities, investigative organisations, or other group members.

For how long do we store your data?

We will retain your information only for the period necessary to fulfill the purposes outlined in this Statement unless a longer retention period is required by law. To determine the appropriate retention period for the information we collect from you, we consider the amount, nature, and sensitivity of the personal data we collect, the potential risk of harm from unauthorised use or disclosure of the data, the purposes for which we process the personal data, and whether we can achieve those purposes through other means, as well as the applicable legal requirements.

We retain the personal data collected from subscribers unless and until an individual asks us to remove their information. 

You may always opt out of receiving some or all communications from us by unsubscribing through the email marketing platform Mailchimp. You can also update your email preferences here.  To remove any personal information from our database, send an e-mail to education@earthecho.org with the word “remove” in the subject line.”

International data transfers

EarthEcho International and their servers are located in the United States. Data for the promotion will be transferred to the United States. EarthEcho International takes reasonable precautions to ensure that all processing activities conducted on their behalf are compliant with the Data Protection Act 2018. Under that Act, users who believe their data has been misused have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office (ICO). Their website is https://ico.org.uk/your-data-matters/raising-concerns/.

In these situations, as may be required, we make contractual arrangements to ensure that your personal data is still protected in line with international standards.

How do we protect your data?

In accordance with the Act, we observe reasonable procedures to prevent unauthorised access to, and the misuse of, information including personal data. We use appropriate business systems and procedures to protect and safeguard information including personal data. We also use security procedures and technical and physical restrictions for accessing and using the personal data on our servers. Only authorised personnel are permitted to access personal data in the course of their work.

What are your rights?

•           Right to access, review, and rectify your data: you have the right to access, review, and rectify your personal data.

•           Right to erasure: you have the right to erasure of all the personal data processed by as described herein in case it is no longer needed for the purposes for which the personal data was initially collected or processed, in accordance with the Data Protection Legislation.  

•           Right to object or restriction of processing: under certain circumstances described in the Data Protection Legislation, you may ask for a restriction of processing or object to the processing of your personal data.

•           Right to data portability: you have the right to receive the personal data processed in a format which is structured, commonly used and machine-readable and to transmit this data to another person or entity.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.

To exercise your rights, you can contact us at education@earthecho.org.

Questions or complaints

If you have questions or concerns about the processing of your personal data by EarthEcho, or you want to exercise any of your rights you have under this Statement, please contact our data protection office via education@earthecho.org. All privacy related questions and complaints reported to EarthEcho will be investigated. EarthEcho will attempt to resolve complaints and questions in line with internal policies.

Changes to this Statement

Just as our business changes constantly, this Statement may also change. If we make material changes or changes that will have an impact on you (e.g., when we start processing your personal data for other purposes than set out above), we will inform you prior to commencing that processing.

Last Modified:  November 2, 2022