Young Life Global Privacy Statement

HOW IS INFORMATION COLLECTED?

We obtain personal information about you in the following ways:

1. Personal interactions: Our ministry is defined by relationships. Our staff members and volunteers interact regularly with kids, parents, teachers, school administrators, coaches, donors, and many other individuals. These personal interactions are the primary avenue by which we get information from you.

2. Direct Requests: You may have reached out to us on your own or visited one of our websites. If you have inquired about one of our activities, engaged in one of our activities, donated, registered for an event or camp, or have otherwise chosen to give us Information, we have your personal information. Please read this Privacy Notice carefully to understand your rights and our commitments related to your personal information.

3. Cookies and Other Automated Technologies: If you have visited and/or registered on one of our websites, some of your personal information may have been gathered by cookies or other automated technologies utilized on our network. ​ Read the sections below on our use of cookies for additional information.

4. Publicly Available Sources: We obtain information from the public domain that is lawfully made available including Facebook, LinkedIn and other social media platforms.

HOW AND WHEN WE MIGHT SHARE YOUR INFORMATION

We do not generally disclose personal information with anyone outside the organization. However, we are a global organization that may, for the purposes described above, share your personal information with:

1. Affiliates. Other parties within or associated with us.

2. Other Disclosures without your consent. Public or regulatory organizations for obligatory purposes described above.

3. Service Providers. Third party service providers we have contracted to assist in the types of uses described above, including industry partners such as online marketing platforms and technology companies (as described in our Internet-Based Online Advertising section), web-based contact management service providers, cloud service providers, companies assisting in the processing of your donations or other financial transactions, and email marketing service providers. We have entered into contracts with these third-party service providers without neglecting the protection of your personal information.

4. Regulators, law enforcement, advisors, and other government agencies. We access and share your information described in the How Is Information Collected? section, including sharing with regulators, law enforcement, other government agencies, our advisors such as external lawyers who act for us, and others in accordance with the How Do We Use Your Personal Information? section.

We do not share text messaging originator opt-in data and consent; this information will not be shared externally with any third parties. You may learn more about our SMS Terms and Conditions, here.

INTERNATIONAL TRANSFERS ​

We are a global organization operating in different parts of the world through branch organizations, subsidiaries, and affiliates. ​ Therefore, we may transfer your personal information from one country to another for our internal purposes, to market and improve our services, and for human resources administration for our employees. All individuals in the European Economic Area (“EEA”), Switzerland, and the United Kingdom (“UK”) (collectively “EEA+”) need to be aware that we may transfer your personal information outside of the EEA+ for processing.

Any transfer of personal information from country to country will be done with appropriate safeguards and in compliance with applicable laws. We, along with our European subsidiaries and affiliates, establish appropriate transfer mechanisms to govern the transfer of data from the EEA+ to other countries, such as the United States, that are deemed to have an inadequate level of protection for personal data. To effect such transfers, we rely on the following transfer mechanisms:

• Adequacy Decisions: We may rely on relevant “adequacy decisions” from the European Commission (or, in the case of transfers out of the UK, "adequacy regulations" from the UK government) which recognize that certain countries and territories outside of the EEA+ ensure an adequate level of protection for personal information.

• Standard Contractual Clauses: For transfers out of the EEA+ where there is no adequacy decision for the recipient jurisdiction, we utilize the applicable Standard Contractual Clauses—in the case of the EEA or Switzerland, the Standard Contractual Clauses approved by the European Commission, and for the UK, the standard contractual transfer mechanisms approved by the UK Government (the International Data Transfer Agreement and the International Data Transfer Addendum to the Standard Contractual Clauses approved by the European Commission).

While transfers to countries that don’t have an adequacy decision typically take place on the basis of the standard contractual clauses, in certain circumstances, transfers can also take place on the basis of exemptions provided for under data protection law. For example, we may transfer personal data with your consent or share personal data with law enforcement or in emergency situations where we learn that a person’s life is at risk.

THIRD-PARTY WEBSITES

Our websites may contain links to a third-party website such as Facebook, Instagram, Google, Vimeo, YouTube, Twitter, and LinkedIn. Once you have clicked on a link for an outside website, you will leave our site and be taken to sites that we do not control and our Privacy Notice will not apply on those sites. You must read the privacy policy of the third-party website concerning how personal information will be used. We are not responsible for the privacy practices or the content of third-party sites.

OPTING OUT

We respect your privacy and are committed to providing you with the legally necessary controls over your personal information. The Opt-Out provisions described herein outline your rights, if any, to opt out of certain data collection and usage practices. By utilizing these provisions, you may be able to limit the extent to which your personal information is collected, processed, or shared.

INTERNET-BASED ONLINE ADVERTISING

We, and our third-party partners such as Facebook and Google, may use cookies and similar technologies (hereinafter referred to as cookies) when you use our websites. Cookies are small files sent to your computer as you surf the web. They store information, including information about how you interact with the websites you visit.

In some jurisdictions, our collection and use of certain of your information obtained automatically through our website using cookies may be considered behavioral or targeted advertising. Our cookie banner and consent management system show you a list of the cookies we use, including their provider, purpose, description, and other relevant information.

We may use cookies for a number of reasons, such as:

• to serve you with relevant advertising and measure the effectiveness of such advertising

• to ensure that you are not shown an ad more than you should be (called “frequency capping”)

• to learn more about the way you interact with our content

• help us improve your experience when visiting our websites

• to remember your preferences, such as a language or a region, so there is no need for you to customize the website on each visit

• to identify errors on our website and resolve them

• to analyze how well our websites are performing

We use the following categories of cookies:

• Strictly necessary. These cookies (also sometimes referred to as “essential”) allow the page to load or provide some essential functionality without which the page would not work (i.e., store your data in a shopping cart).

• Performance cookies. These cookies allow sites to remember what you prefer when you come back again.

• Advertising cookies. These cookies can be used to learn about what interests you generally might have, based, for example, on the websites you visit and the products you buy. This can also help us infer things about you and send you ads for products and services that better align to the things you like or need. It also allows us to limit the number of times you see the same advertisement.

• Analytics cookies. These cookies tell us how our websites are working. We use different analytics cookies in different jurisdictions. In many cases, we use Google Analytics cookies to monitor the performance of our website. Our ability to use and share information collected by Google Analytics about your visits to our website is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. For more information about how Google collects, uses, and discloses information, refer to the following page: https://policies.google.com/technologies/partner-sites.

We may also use pixels to deliver cookies to your computer, monitor our website activity, make logging into our website easier, and for online marketing activity. We also include pixels in our promotional email messages or newsletters to determine whether you open and act on them.

Depending on the jurisdiction of your residence, you may be presented with the opportunity to opt-in or opt-out of the setting of cookies when you visit our website. In the default setting, only the essential cookies are enabled for EEA+ residents. Through the consent management system, you can determine whether you will allow the setting of additional cookies or not. You can adjust your preferences at any time through the consent management system. These cookies are on by default for US residents, who may be able to opt out where the right is provided for by law.

Depending on the third-party partner that is setting cookies through our website, you may have additional methods to edit your preferences with the partner directly. For example, to edit your Google Display Network ads’ preferences, you may visit http://www.google.com/ads/preferences/. You can also use the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout/.

You can also modify your cookie settings or turn off all or certain types of cookies by adjusting your browser settings in other ways, including to delete cookies. Please note that deleting cookies may also delete your opt-out, because when you opt out, an opt-out cookie is sent to your browser that indicates that you no longer want to receive interest-based ads. Your opt-out cookie may be deleted if you decide to delete all cookies on your browser. This means that you may need to opt-out again on each browser where you have deleted cookies if you still do not want to receive interest-based ads.

In addition, if you delete or turn off cookies, you may not have access to some of the features that make your experience on our site smoother, you may not be able to store your preferences, and some of our services may not function properly. We honor the Global Privacy Control (GPC) and other universal opt out signals where we are required to do so by applicable law. These are signals you can send from your browser to a website to convey your choice to exercise certain opt-out rights granted by individual states.

YOUR LEGAL RIGHTS

If you are located in the EEA, Switzerland, the UK, Canada, Colorado, or another jurisdiction with similar privacy rights, you may have certain rights related to your personal data. If you wish to exercise any of those rights, or wish to appeal our decision regarding your request, please email Young Life at privacy@younglife.org. We will respond to your request within thirty (30) days or a longer period, where permitted by law. We may need to verify your identity in order to process your request. Please note that some or all of these rights may not be available to you depending upon your state or country of residence. For example, these rights do not apply to Young Life’s job applicants, current employees, or current volunteers who are located in the United States. While the rights explained below may not apply to everyone outside of the EEA, Switzerland, Canada, Colorado, or the UK, as a matter of rights and freedoms, we still do care about your questions and concerns related to your personal data. If you are not located in one of these jurisdictions, you can contact us at privacy@younglife.org with questions.

These rights may include:

1. Request access to personal information that we hold about you;

2. Correct and update your information;

3. Withdraw your consent (where we rely on it);

4. Object to our use of your information (where we rely on our legitimate interests to use your personal information) provided we do not have any continuing lawful reason to continue to use and process the information. When we do rely on our legitimate interests to use your personal information for direct marketing, we will always comply with your right to object;

5. Opt-out of the processing of your information for purposes of targeted advertising and/or certain types of profiling. Where required by law, you can opt out of processing for purposes of targeted advertising as described in “Interest-Based Online Advertising,” above. ​ ​

6. Erase your information (or restrict the use of it), provided we do not have any continuing lawful reason to continue to use and process that information; and

7. Transfer your information in a structured data file (in a commonly used and machine-readable format), where we rely on your consent to use and process your personal information or need to process it in connection with your contract.

Although some jurisdictions also recognize a right to opt-out of the sale of personal information, because we do not sell personal information and only disclose information about online identifiers of visitors to our website for targeted advertising purposes, we do not honor requests to exercise that right. You may also have the right not to be subject to purely automated decisions (including profiling) where this has a significant effect on you. We do not envision that any decisions will be taken about you in this way, however we will update this statement if this changes.

Right to Complain to a Data Protection Authority

We want to provide the best service to you related to these requests and resolve any issue you have with us related to the processing of your personal information. If you are an EEA resident, you have the right to contact your local data protection authority for assistance or to make a complaint. However, we encourage you to contact us first at privacy@younglife.org and we will try to resolve your concerns. If you work or reside in a country that is a member of the European Union or that is in the EEA, you may find the contact details for your appropriate data protection authority on the following website: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. If you are a resident of the United Kingdom you may contact the UK supervisory authority, the Information Commissioner’s Office.

DATA SECURITY

We seek to use reasonable organizational, technical and administrative measures to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure so we cannot guarantee that your personal data will remain secure in all circumstances. ​ If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting Us” section below.

RETENTION OF YOUR PERSONAL INFORMATION

We keep your personal information for the length of time needed to carry out the purposes outlined in this Privacy Notice and to adhere to our policies on keeping records (unless a longer period is needed by law). Our records policies reflect applicable laws. We will retain and use your information to the extent necessary to manage your relationship with us, personalize and improve your overall experience, and to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable reporting laws), resolve disputes, enforce our agreements, and as otherwise described in this Privacy Notice.