Privacy

Privacy policy

This policy explains how Karla Still handles the personal data of donation advising clients.

Data controller

This service is currently provided by Karla Still as a private individual. It may in the future be merged into the activities of Effective Altruism Finland ry (a Finnish association). In that case, only your payment-related data (e.g. your name and payment details) would move under the association's bookkeeping — other data I keep about you, such as call notes or your giving intentions, would remain accessible only to me. I'll update this policy if the controller changes.

What data is collected

I process the following data:

• Your name and email address, when you book a call or otherwise contact me.
• Any additional details you provide when booking (e.g. answers to the intake form).
• Notes related to our conversation: for example, which causes you're interested in supporting, donation amounts or intentions, and notes on whether we agreed to follow up later or whether you offered to help develop the service.

I keep these notes in a database that only I have access to.

How and why data is used

Your data is used to:

• Arrange and prepare for our call.
• Possible follow-up later, for example after a year.
• Evaluating and measuring the service's impact. I use the data in full for this myself, but if I share results publicly (e.g. in an annual report), I always do so fully anonymized.
• Arranging payment: after the call, I'll send you an invoice or payment details by email.

Your data is not used for marketing without your separate consent, and it is not sold to third parties.

Tools used to run the service

I use external digital tools to run the service, for example for scheduling and record-keeping. These tools may change over time, so I don't list exact product names here. I always choose providers that offer GDPR-compliant data processing agreements.

Confidentiality

All our conversations are confidential. If I ever share information about the service, for example in an annual report, it's always anonymized, and only if there are enough clients that individuals can't be identified.

Data retention

I'm aware that the data I process is sensitive in nature — it may include information about your values, income, or donations, linked to your name and contact details. I delete your personal data no later than two years after our last contact, unless you ask me to delete it sooner (see Your rights below). Your data remains accessible only to me for the entire retention period, and I don't share it onward.

If the service moves under Effective Altruism Finland ry, payment-related data may be kept longer within the association's bookkeeping, which is subject to Finnish accounting law retention periods (generally six years).

Transfers outside the EU/EEA

Some of the tools I use may store data on servers located outside the EU/EEA. Where this is the case, providers are required to have appropriate safeguards in place (such as the EU Standard Contractual Clauses) to protect your data.

Your rights

Under the GDPR, you have the right to:

• access the data stored about you
• request correction of inaccurate data
• request deletion of your data
• object to or request restriction of the processing of your data
• request that your data be transferred to another system, to the extent technically feasible
• lodge a complaint with the Office of the Data Protection Ombudsman, if you feel your data has been processed incorrectly

To exercise these rights, contact karla.still.ks@gmail.com.

Changes to this policy

I may update this policy as the service develops. I'll clearly note any significant changes — for example, if I start using cookies or the controller changes — on this page.