Last updated: March 2019
Welcome to Ducky
Ducky has developed smart and easy tools to measure, educate and mobilise people to take action on carbon sustainability.
Contact our Data Protection Officer by phone: 22 42 40 10 or by email: firstname.lastname@example.org.
Inquiries to our Data Protection Officer must relate to Ducky’s processing of personal information, and mainly related to personal information about you. Examples of this may be questions about your rights.
Let’s start from the beginning:
Personal information is any information you voluntarily submit to us and that identifies you personally, including your contact information, such as your name, e-mail address, name of organisation and other similar information about yourself. Information about your sustainable habits, entered by you through the carbon footprint calculator, surveys, challenges or web widgets is stored separately from information that identifies you personally.
Ducky is split into different domains – ducky.eco, challenge.ducky.eco, footprint.ducky.eco and survey.ducky.eco. When you scroll, browse, click or navigate our Ducky pages and their sub-domains, we collect navigational information. Navigational information refers to information about your computer and your visits to these pages, geographical location, browser type, referral source, length of visit and pages viewed.
We use Google Analytics to analyze your visit on our pages because we want you to have the best experience possible when visiting us.
In Google Analytics we have anonymized your IP-address.
How do we get your personal information?
You give us personal information when you visit our landing pages, create an account and use our services (the footprint calculator, the survey, the climate challenge etc.)
An example: as a new user we ask you for personal information such as your name and your email address to create your account.
What is the purpose of collecting your personal information?
There are two reasons for why you’d chose to use Ducky. One is that you found us through social media, a search engine (most likely Google), a link on a website, a recommendation from a friend or a colleague and so on. The other is that you’ve been invited to participate in a campaign from your workplace, school, municipality or an organisation.
Our purposes for collecting your personal information is therefore:
- To manage your personal footprint on a monthly and yearly basis with the carbon footprint calculator.
- To participate in a campaign through an organisation (e.g your company, school, or municipality) to calculate your footprint, motivate behavior change, and to implement sustainability initiatives.
When do we collect personal information about you?
- Account creation. To create an account you provide data such as your name and your email address. Ducky offers multiple login providers and ways of registering an account.
- Facebook or Google+ login. When creating an account with Facebook or Google+ you’ll get a pop-up window where you can tick off the information you want to transfer from these services to Ducky. Cross-check to see if you agree, and make the changes you feel comfortable with!
- Participating in a campaign. Once you have joined an organisation, you can participate in one or more time-limited campaigns. Each campaign may contain one or more of Ducky’s services (e.g. challenges and surveys). The organisation can invite you directly with a link. You can find the campaign in a list when you register an account or find it later on your profile page.
Information registered during a campaign is made available to the organisation that runs the campaign. Your information cannot be linked to your identity by the organisation.
- Taking part in a survey. Survey answers will be stored and can be accessed by the organisation who made it. The organisation cannot link your answers to your identity unless you explicitly request it.
- Participating in a climate challenge. When participating in a climate challenge, we collect information about saved CO2 and logged climate activities.
- Web widgets. Ducky offers widgets for integration on an organisation’s website. These are used for visualising in real-time the results of a survey, comparing teams in a challenge or allowing users to experiment with the climate calculator without having to log into Ducky. Widgets never show personal information, only aggregated data from a campaign.
- Calculating your personal footprint. In the carbon footprint calculator, we collect your answers, but none of this information is made available to the organisation you are a member of.
What do we do with the information you give us?
We use your personal information to produce aggregated insights and statistics that don’t identify you or anyone you know as a person. These insights are used publicly by Ducky and the organisation that runs the campaign. Examples include reports, presentations, success stories, on landing pages, social media, and blogs.
Examples are total CO2e saved in a climate challenge and name of climate challenge, number of activities logged or most popular activities in a climate challenge, and average CO2 saved per person.
In addition we may use your personal information to:
- Improve your browsing experience by personalising our websites and to improve our services.
- Communicate and send you information or content that we think will motivate your journey toward sustainability by email, or other means – in accordance with your communication preferences.
- Respond to customer support requests.
- Ask you to participate in a survey in order to get feedback on your experience and to improve our tools.
Retention of personal information
When you create your Ducky account, we look at our relationship as an ongoing one, and will keep it until you choose to delete it. But if you choose to delete your Ducky account your personal information (name, email etc.) and activities, such as climate actions logged and survey answers provided, becomes anonymized. This way we can add your individual efforts to the bigger picture – without tracing it back to you.
If you have created a Ducky account as part of a campaign within your organisation, we also consider our relationship as an ongoing one, and will keep it until you choose to delete it. The purpose of keeping your account, is to be able to compare your information with the results of future campaigns within your organisation which you may decide to attend. However, you may at any time choose to delete your Ducky account, in which case your personal information will be deleted and your activities will be anonymized.
If you have created a Ducky account as part of a campaign within your organisation, and you are leaving the organisation (for instance when ending your employment), your account will be changed to a private account, and any information stored about you during the campaign will be anonymized.
If you create an account on Ducky, subscribe to one of our mailing lists and/or use one of our services you may receive emails from us.
If you belong to an organisation, you might receive invitations to its campaigns in Ducky.
After joining a campaign you will receive emails related to that campaign (e.g. invitations to a survey or a challenge).
For example when joining a climate challenge you can opt-in to receive emails related to the challenge.
In every email you receive from us there is an option to unsubscribe from the mailing list at the bottom of the email. You can also set or change your communication preferences in your profile settings. Leaving a campaign or organisation will stopp email send-out automatically.
When you use our mobile web application
We send push notifications when you use our services to keep you engaged and motivated. If you no longer wish to receive such communications, you may turn them off at the device level.
What about children under the age of 15?
Our websites are not intended for or targeted at children under 15, and we do not knowingly or intentionally collect their personal information. Children under the age of 15 can use our services, but only with participation, under supervision and with approval from a parent or a legal guardian.
Customer testimonials and comments
We post customer testimonials and comments on our websites, which may contain personal information. We obtain each customer’s consent prior to posting name and testimonial.
Security of your personal information
We secure the personal information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. All personal information is protected using appropriate physical, technical and organisational measures.
Social media features
Links to third-party websites
Our website include links to other websites. These pages have their own privacy policies, and we encourage you to read them carefully as you do ours.
It’s voluntary to provide personal information to our services such as creating an account, calculating your personal footprint, participating in a campaign, and receiving newsletters.
When you first visit our website you are asked to either accept or decline cookies in the notification.
User profile preferences
When you are logged into your Ducky account you can make changes to organisation membership, section and group within the organisation, campaign participation, communication preferences, profile picture, a short personal bio or delete your account.
Your Ducky user profile is by default public on the Ducky platform to your team. This means that your profile picture, profile description, recently logged activities and top-list achievements are visible to other Ducky users on your team.
As a user of Ducky and our services, you have the right to delete your user profile at any time and thereby have all personal information about yourself deleted. Your user is immediately deleted and we cannot retrieve information about you any longer.
Due to back-ups and copies, it takes 30 days for the data to be completely deleted from the Google Cloud Platform. If you choose to create a new Ducky account, you’ll get a new user-ID linked to your account information. It will not retrieve information or be linked to your previous account
Data processors and transfers abroad
We engage sub-processors, to perform services on our behalf and/or to assist us with the provision of services to you.
The EU-U.S Privacy Shield framework came into force on July 12th, 2016, and ensures an adequate level of protection of the transfer of personal information from Europe to the United States of America. As a result of the EEA Agreement, the Privacy Shield is used as a basis for the transfer of personal data from Norwegian companies to the United States. All of Ducky’s sub-processors are subject to the Privacy Shield Framework. Click here to see the list of companies adhering to the framework.
Our HQ is located in Trondheim Norway, with offices in Oslo, Norway and Stoke, UK, but your information may be transferred to, stored, or processed in the United States. If we disclose your personal information to third parties we ensure an adequate level of security and sufficient agreements to prevent third parties to use personal information for other purposes than agreed.
Disclosure of information
We may offer campaigns where winners are awarded. For our customers (your workplace, school or organisation) to be able to announce the winner(s), on team or individual level, we may share your name and/or contact information with them to reach out to you.
Co-worker confidentiality commitments
All Ducky employees and volunteers are required to sign and adhere to a confidentiality agreement. Only employees who need to access your personal information to do their work are granted access and ensures a high level of protection. General employee guidelines:
- All employees and volunteers are required to sign and adhere to the confidentiality agreement.
- Only authorised co-workers have access to personal information.
- All employees practice a culture of privacy protection.
How to exercise your rights
You have the right to request access to your personal information, correct it, update it or delete out-of-date or inaccurate personal information we hold about you. Many changes can be done in your account settings, but you can also contact us to exercise your rights.
To exercise your rights, contact our Data Protection Officer by phone: 22 42 40 10, or email: email@example.com. You’ll be answered within 30 days. Requests that are unreasonable or not required by law may be rejected.
You can contact Ducky at firstname.lastname@example.org or by post:
Email communication is not always secure, please do not include sensitive information (racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, sexual preferences or criminal record).
Questions or comments?
Thank you for taking the time to read our privacy statement! Please contact us if you have questions, comments or just say hey. We appreciate your input.