Privacy Policy – Colorado Residents
The Colorado Privacy Act (“CPA”) requires MoveOn.org to explain some data information using specific definitions set out in the CPA. If you reside in Colorado, this section applies to you and describes MoveOn.org’s data collection practices and your rights. Read MoveOn’s full Privacy Policy.
How We Collect Your Data
MoveOn.org collects personal information about you in a number of ways including: petitions, donations, emails, surveys, and SMS messages. To comply with Colorado data protection rules, MoveOn.org will always ensure we have legal justification for collecting and using your personal information.
The legal basis that we rely on will depend upon the circumstances in which we collect and use your personal information. In almost all cases, our processing of your personal information will fall into one of the following categories:
- Where you have provided your consent to allow us to use your data in a certain way. We will not collect or process Sensitive Data without obtaining your consent.
- Where it is necessary for us to process your data in order to comply with a legal obligation.
- Where it is in our legitimate interests to contact you in order to raise funds and achieve our campaign objectives. Where we rely on a legitimate interest to use your information, we will always ensure that this is done in a way so as not to be intrusive or cause distress, and that respects your rights.
- Where it is necessary for us to process your data in order to carry out the performance of a contract with you.
- Where it is necessary to protect your vital interests or the vital interests of another individual.
- Where it is necessary to conduct internal research or perform internal operations that are needed to develop our products, services, or technology, or ensure functionality and fulfillment of the user's expectations based on our existing relationship.
How Data is Used
MoveOn.org currently uses member data derived from history on its own platforms, including petition signs, donations, interactions with emails (opens, clicks, unsubscribes) to target emails, SMS messages, mailers, and digital advertisements.
Your Rights Under the Colorado Privacy Act
The right to access
You have the right to confirm whether a controller is processing your personal data and to access that data.
The right of correction
You have the right to require controllers to correct inaccuracies in your personal data.
The right of deletion
You have the right to require controllers to delete your personal data.
The right of portability
Up to twice a year, you have the right to obtain your personal data in a portable and readily usable format that allows you to transmit the data to another entity without hindrance.
The right to opt-out
You must be provided with the ability to opt out of the processing of your personal data for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
The right to appeal
You have the right to appeal a controller’s action or inaction in response to your exercise of your rights.
You may exercise these rights by contacting us by the methods indicated in How to Change Your Communications Preferences.
Our Obligations as a Data Controller
As a Controller under the Colorado Privacy Act, MoveOn.org fulfills its obligations to you as a resident of Colorado in the following ways:
- We fulfill our Duty of Transparency to you by providing this comprehensive Privacy Policy and notice of any material changes to this policy.
- We fulfill our "Opt-In" Duty by first obtaining your consent before processing any Sensitive Data, and providing ways to easily withdraw your consent for Targeted Advertising, Profiling, and the like by our Opt-out and Communications Preferences.
- We fulfill our Duty of Care to you by taking reasonable security precautions during storage, only using data in the ways described in this policy, and conducting data protection assessments as required. All third-parties with access to your personal data are contractually required to uphold and abide by the obligations and practices in this policy.
- We fulfill our Duty to Minimize Data by limiting our collection of your data to only what is relevant and necessary in relation to the purposes specified in this policy.
- We fulfill our Duty to Specify the Purposes of your data collection and processing by providing this information in this policy.
- We fulfill our Duty to Avoid Secondary use by only collecting and processing your data according to the purposes specified in this policy or for which your consent was obtained.
- We fulfill our Duty to Avoid Unlawful Discrimination by never processing your data in any way that could violate state or federal laws prohibiting unlawful discrimination against consumers.
- We fulfill our Duty to Provide the Ability to Appeal by establishing internal processes that allow you to appeal our decisions to take or refuse to take action on your requests to exercise your right under the applicable law here: Manage Opt-out Preferences