Privacy Policy

Our Handling of Your Personal Data

Personal data refers to any information that can directly or indirectly be linked to a living physical person. This includes various types of information such as names, contact details, IP addresses, choices, and behaviors.

Processing of personal data includes all actions that Pediatric Health Initiative undertakes with the data, such as collection, registration, storage, processing, use, and disclosure.

We register your data in connection with various activities, such as donations, membership or service applications, contact with our donor service, participation in events, and visits to our digital platforms.

We only register necessary data for our purposes and never store them longer than necessary.

If You are a Donor

When you make a donation, we may register your personal information in our donor database and retain it for up to 36 months after your last donation.

Examples of data we may collect include your name, personal identification number, contact details (address, telephone number, email address), and bank account number if you donate via direct debit. We may also collect transaction history, such as the type and amount of donation. For large donations, corporate gifts, gifts from foundations, memorial gifts, bequests, or personal fundraising efforts for Pediatric Health Initiative, we may also make notes about the donor's preferences and interests.

How We Use Your Data

The personal data we collect is processed for the purposes described below. They may also be processed for additional purposes, which will be specified at the time of registration.

  • Fulfilling your donation or other orders

  • Processing your payment and detecting/preventing fraud

  • Thanking you for your donation and explaining how the funds are used

  • Informing you about our work and activities

  • Offering good donor service by administering your donor profile, handling your inquiries, correcting incorrect information, or sending information, such as in bequest matters or gift certificates according to your preferences

  • Communicating with you by post, email, SMS, or through our digital channels (e.g., email, SMS, forums, and social media platforms such as Facebook, Twitter, Instagram, LinkedIn, and YouTube)

  • Increasing donations by asking for new/additional donations, starting direct debits, or increasing direct debit amounts through various channels

  • Generating statistics about our fundraising campaigns to analyze behaviors and patterns (the statistics are compiled without identifying individual donors) and to tailor our marketing campaigns to donors

  • Generating statistics about our donor service matters to analyze behaviors and patterns (the statistics are compiled on an aggregated level without identifying individual donors) and to adjust our capacity to the donors' needs

  • Analyzing donor behaviors for troubleshooting, maintenance, development, testing, and improvement of these and the technical platforms they are provided on with the aim of improving our communication and user experience

  • Administering marketing activities such as contests, prizes, etc., in our digital channels

  • Administering the donor register (system administration) to ensure good register maintenance

  • Contacting you with important information, such as updates to our terms and policies

Legal Basis

Pediatric Health Initiative refers to various legal bases for the different types of purposes for which we collect and process your personal data. This means that data that we no longer may retain and use for one purpose, e.g., marketing, may still be retained and used to meet the requirements of another purpose, e.g., accounting. Below are examples of how we work with different legal bases for different purposes with your personal data. We never store personal data longer than necessary for the purpose.

  • Fulfilling a contract: We use the legal basis of fulfilling a contract to, for example, fulfill your donation to Pediatric Health Initiative. Your donation or purchase constitutes a form of agreement with us for this purpose. The agreement requires certain administration, but as soon as the administration is completed, we no longer use the contract as a legal basis for processing your personal data. If you are a monthly donor, for example, via direct debit, the agreement continues until you terminate it, and your personal data is stored for the duration of the agreement.

  • Legal obligation: We use the legal basis of legal obligation when there are legal requirements for Pediatric Health Initiative to retain your personal data. This applies, for example, to the reporting of your donation in our accounting, where the Accounting Act requires us to retain accounting documents for 7 years. This means that even if we do not retain your personal data for the fulfillment of a contract longer than it takes to administer your donation, we store it for at least 7 years based on legal obligation.

  • Legitimate interest: Legitimate interest is a legal basis based on a balance of interests between Pediatric Health Initiative's interest in processing your personal data and your interest in protecting your personal data. The purposes for which Pediatric Health Initiative uses legitimate interest as a legal basis are included in this policy. When we process your personal data based on legitimate interest, we store it for different lengths of time depending on the purpose. If you have made a donation to us, for example, we may store your personal data for up to 36 months in our donor register, among other purposes, to inform you about the possibility of making new donations. The 36-month period is based on the GIVA industry organization's analysis that many donors make a new donation within that time frame. If you visit our website, we never store your data for more than 3 months, often shorter. The 3-month period is based on standards for troubleshooting, statistics, etc., in web contexts.

How Long We Retain Your Personal Data

Your personal data is stored for as long as it is necessary for the purposes for which it was collected. For example, we consider you as an active donor for up to 36 months after your last donation to Pediatric Health Initiative. We typically store information about you as a job applicant for up to 24 months. When your data is no longer needed for a purpose, we block them for use for that purpose in our systems. When your data is no longer needed for any purpose, we anonymize or delete the data from our systems.


In order to maintain good register management, we systematically delete data from our systems. For example, the donor register is continuously updated with information from public registers, including the state address register (SPAR).

Information That May Be Disclosed to Others

Pediatric Health Initiative does not disclose your personal data to any other external processing. In cases where we use third-party products (suppliers, subcontractors, and partners) to improve our services to you or to manage the administration of our internal systems, we regulate this in data processing agreements with the supplier to ensure that your data is handled securely and not passed on for processing by an independent party. When we terminate third-party services, we ensure that your data is deleted from the third party.

In exceptional cases, a service provider to Pediatric Health Initiative may be located outside the European Economic Area (EEA). This means that personal data may be transferred to countries outside the EEA. In such cases, we take measures to ensure that the personal data continue to be protected and comply with the measures required to legally transfer personal data to countries outside the EEA.

Finally, we may disclose personal data if we are required to do so by applicable law, court order, or if such disclosure is otherwise necessary to assist in a legal investigation.


Last updated: 2024-04-25