Who we are
GO Ocean is a campaign run by the Voice of the Ocean Foundation (VOTO) together with the Global Ocean Observing System (GOOS).
The Voice of the Ocean Foundation is the data controller for personal data collected through this website.
Voice of the Ocean Foundation
Organisation number: 802481-2730
Rydbo Mossväg 16, 184 94 Åkersberga, Sweden
hello@voiceoftheocean.org
For any question about this policy or about how we handle your data, contact Robert Kautsky at robert.kautsky@voiceoftheocean.org.
What this policy covers
This policy explains what personal data we collect when you visit https://go-ocean.org/, why we collect it, how long we keep it, and what rights you have. It applies to this website only. Where we link to other sites, their own policies apply.
When you contact us or request materials
Our forms ask for your name, email address and, optionally, your organisation. We use this to reply to you and to send the resources you asked for.
The legal basis is your consent, given when you submit the form. Where you have asked us to send you something specific, we also rely on the need to take steps at your request.
Our forms include an optional checkbox for campaign updates. It is unticked by default. If you tick it, we use your email address for that purpose until you unsubscribe, and every message we send will include an unsubscribe link.
We keep form submissions for 24 months from your last contact with us, then delete them. Newsletter subscriptions are kept until you unsubscribe.
When you browse the site
Our hosting provider records standard server logs: your IP address, browser type, the pages you request and the time of the request. These are used to keep the site running and secure, and to investigate technical problems. The legal basis is our legitimate interest in operating a functioning, secure website. Logs are retained for a short period by our host and then overwritten.
Analytics
With your consent, we use Google Analytics 4 to understand how the site is used — which pages people read, how they arrived, and which materials they download. This helps us make the campaign more effective.
Google Analytics sets cookies and processes your IP address. IP addresses are truncated before storage. We do not use analytics data to identify individuals, and we do not combine it with form submissions.
Analytics only runs if you accept it. You can withdraw consent at any time through the cookie settings on this site.
We also use Google Search Console, which reports on how the site appears in search results. It works from aggregated search data and does not collect personal data about visitors.
Embedded video
Pages on this site embed video hosted by Vimeo. When a page containing an embedded video loads, Vimeo may set cookies and receive your IP address and information about your device, as if you had visited Vimeo directly. This is governed by Vimeo’s own privacy policy, available at https://vimeo.com/privacy.
Fonts
Typefaces used on this site are served from our own servers. No data is sent to third-party font providers when you visit.
Cookies
Cookies are small files stored on your device. We use them in two ways.
Necessary cookies keep the site working and remember your cookie choices. These are always active and require no consent.
Analytics cookies are set by Google Analytics and only after you accept them.
Our cookie consent is managed by CookiePal. You can change or withdraw your consent at any time through the cookie settings link on this site, and you can block or delete cookies in your browser. Blocking necessary cookies may stop parts of the site working.
Who we share data with
We do not sell your personal data and we do not share it for advertising.
We use the following service providers, who process data on our behalf under written agreements: WP Engine for website hosting and server logs, based in the United States; Google for website analytics, based in the United States; Zoho for delivery of emails sent from the site, hosted in the European Union; CookiePal for cookie consent management, based in the United Kingdom; and Vimeo for video hosting, based in the United States.
We may also disclose data where we are legally required to do so.
Transfers outside the EU/EEA
Some of our providers are based outside the EU/EEA. Where personal data is transferred to the United States, we rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses together with appropriate additional safeguards. Transfers to the United Kingdom are covered by the European Commission’s adequacy decision for the UK.
Email sent from this site is processed within the European Union and is not transferred outside the EU/EEA.
You can request more detail about these safeguards using the contact details above.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to have inaccurate or incomplete data corrected, and to have your data erased where there is no ongoing reason for us to keep it.
You can also restrict how we process your data in certain circumstances, object to processing based on legitimate interest, receive your data in a machine-readable format, and withdraw consent at any time without affecting processing that already took place.
To exercise any of these, contact us using the details above. We will respond within one month.
If you believe we have handled your data improperly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy@imy.se. If you live in another EU/EEA country, you may complain to your local supervisory authority instead.
Security
We use HTTPS across the site, keep the platform and its components updated, and limit access to personal data to those who need it. No system is completely secure, but we take reasonable measures to protect your data against loss, misuse and unauthorised access.
Children
This site is not directed at children, and we do not knowingly collect personal data from anyone under 13. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as the campaign develops or as our tools change. The date at the top shows when it was last revised. Material changes will be noted on this page.