COOKIE POLICY

This Cookie Policy governs the use of cookies, social media plugins and other similar technologies by the Church of Scientology as part of your visit to our website xh.scientology.org.za (hereinafter: “Website”). For more information about what cookies and social media plugins are, see Article 2.

By continuing to use our Website after having been informed of our use of cookies and social media plugins, you acknowledge that you have read all information about that use and that you unambiguously agree to this use as set out in this Cookie Policy below.

If you want more (general) information on how we process your personal data other than through cookies and social media plugins, including in relation to your communication with us via e-mail, phone, fax and social media or in relation to your order or purchase, you are kindly referred to our Privacy Policy.

WHO ARE WE?
1. Your personal data are processed on the basis of applicable data protection legislation by the Church of Scientology International, 6331 Hollywood Boulevard, Los Angeles, CA 90028, United States of America (hereinafter: “CSI”, “we”, “us”, “our”). You can contact us via e-mail at dpo@scientology.net.
2. Where reference is made in this Cookie Policy to laws or regulations, possible amendments to these laws or regulations are implicitly included.
3. We reserve the right to change and adapt this Cookie Policy on our own initiative. In that case, those changes and adaptations will be communicated to you via our Website at least two weeks before those changes and adaptations will become applicable. Any further use of our Website will be subject to the amended Cookie Policy.
WHAT ARE COOKIES AND SOCIAL MEDIA PLUGINS?
1. Cookies are small text files which are stored on your device’s hard drive which contain certain information or personal data.
2. Social media plugins are small pieces of software developed and provided by social media service providers (such as Facebook), which allow us to integrate social media on our Website.
3. Similar technologies are small pieces of software or invisible images (such as the Facebook Pixel) developed and provided by several service providers, which allows us, for example, to track conversions or to better target our promotional campaigns.
WHICH COOKIES, SOCIAL MEDIA PLUGINS AND SIMILAR TECHNOLOGIES DO WE USE?
1. When you visit our Website, a number of cookies are placed on your device and social media plugins are used. These generally allow us to identify you. We use this data to gain insight in how you and others use our Website by gathering statistical and usage data, enabling us to improve our Website, materials and services in order to offer you a better user experience. If you don’t like our use of cookies, see Article 7.
2. We may use the following type of cookies:
  - Strictly necessary cookies which are required for the operation of our Website;
  - Functional cookies which are used to recognize you when you return to our Website;
  - Performance-enhancing cookies which are used to recognize and count the number of visitors to our Website and analyze how visitors move around our Website;
  - Promotion cookies which are used to record your visit to our Website, the pages you have visited and the links you have followed.
3. Our Website uses Google Analytics. This web analytics service, provided by Google Inc., uses analytical cookies. This service helps us to collect and analyze visitor information (such as browser usage, new visitor numbers, response to marketing activity and browsing times) to improve our Website and your experience, and to make our marketing campaigns relevant.
  The information collected through Google Analytics cookies about your use of our Website is sent to and stored by Google, together with your IP address. Google may, for example, use this information for the following purposes:
  - Provide advertising activity reports to advertisers and websites that host the promotional information and ensure that those website publishers are paid for;
  - Detect and combat fraud and other security risks to protect users and partners;
  - Fulfil its legal obligations;
  - Improve its materials;
  - Help Website and app owners using Google Analytics to understand how visitors interact with their sites or apps.
  For all these activities with the exception of the last bullet point, Google acts as the data controller and the processing of the data it collects about your use of the Website takes place under its responsibility. Learn more about Google Analytics Cookie Usage on Websites.
  
  However, you can control what information is sent to Google in the following ways:
  - If you do not want Google Analytics to be used in your browser, you can install the Google Analytics Opt-out Browser Add-on. Learn more about Google Analytics and Privacy.
  - If you are logged in to your Google Account, you can – depending on your account settings – view and edit certain data that Google collects from sites and apps you visit.
  - The incognito mode in Chrome allows you to browse the Internet without having web pages and files recorded in your browser history. Cookies are deleted after you close all incognito windows and tabs. Your bookmarks and settings are saved until you delete them.
  - Advertising settings allow you to manage which Google ads you see on the Internet. You can find out how ads are selected for you, unsubscribe from ads personalization, and block specific advertisers. Learn more about ads.
4. Our Website may use the Facebook Pixel. This is an invisible image that is included on the pages of our Website and that is stored on Facebook's servers. Each time you open a page of our Website where this pixel has been recorded, this pixel is downloaded to your device from that Facebook server. The following data is provided to Facebook: your IP address and the specific characteristics of your device (e.g. type, operating system, specific software and hardware).
  
  While we cannot link this information to you personally, Facebook may do so if you also have a profile on Facebook. To this end, Facebook acts as the data controller. We therefore invite you to consult Facebook's privacy policy in order to learn about the purposes (including advertising purposes) for which the information collected by Facebook is used.
  
  We only receive statistical information from Facebook itself and not your personal data.
  
  If you do not wish to receive certain promotional information, you can adjust your advertising preferences in your personalized Facebook page. Finally, via the settings of your mobile device, you can also indicate that the machine data cannot be communicated to third parties. Learn more about the Facebook Pixel.
5. In the table below, we provide you with an overview of the cookies and social media plugins that we use on our Website.

	NAME	TYPE	EXPLANATION / PURPOSE	STORAGE PERIOD
1.	_ceg.s	Cookie (performance-enhancing)	Cookies placed by Crazy Egg Inc., a platform that produces heatmaps that allow us to analyse how users engage with this Website. Consult the Crazy Egg Privacy Policy	3 months
2.	_ceg.u	Cookie (performance-enhancing)		3 months
3.	heatmaps_g2g_117712	Cookie (performance-enhancing)	Cookie to log data about where a visitor is clicking on our Website to generate an aggregated heatmap report of clicks on that page.	1 hour
4.	_eventqueue	Cookie (functional)	Cookie to store an array of mouse events that can’t be guaranteed to be logged to our servers before the current page is unloaded. These events can then be processed and logged on the subsequent page.	1 hour
5.	_first_pageview	Cookie (functional)	Session cookie set on the first page view of any visit so that certain parts of the code only fire on the first page view, making the page faster and more efficient.	10 minutes
6.	_ga	Cookie (performance-enhancing)	Cookies provided by Google Analytics to help us measure how users interact with our Website’s content (see Article 3.3). Learn more about Google Analytics Cookie Usage on Websites.	2 years
7.	_gat	Cookie (performance-enhancing)		1 minute
8.	_gat_additional	Cookie (performance-enhancing)		1 minute
9.	_gid	Cookie (performance-enhancing)		24 hours
10.	_utma	Cookie (performance-enhancing)		2 years from set/update
11.	_utmc	Cookie (performance-enhancing)		End of browser session
12.	_utmz	Cookie (performance-enhancing)		6 months from set/update
13.	_jsuid	Cookie (performance-enhancing)	Cookie to hold a random number that is generated the first time someone visits our Website. Its sole purpose is to better identify new and unique visitors to our Website.	20 years
14.	_referrer_og	Cookie (performance-enhancing)	Cookie to store the external referrer for you so that on future visits the same referrer will be attached to your session.	90 days
15.	cid	Cookie (performance-enhancing)		2 years
16.	fp	Cookie (performance-enhancing)		2 years
17.	owa_s	Cookie (performance-enhancing)
18.	owa_v	Cookie (performance-enhancing)
19.	_atuvc	Cookie (performance-enhancing)		2 years
20.	_atuvs	Cookie (performance-enhancing)		13 months
21.	_gcui_fp	Cookie (performance-enhancing)
22.	_gcui_mid	Cookie (performance-enhancing)
23.	_pk_id.2.8f83	Cookie (performance-enhancing)
24.	_pk_ref.2.8f83	Cookie (performance-enhancing)
25.	_pk_ses.2.8f83	Cookie (performance-enhancing)
26.	_stsid	Cookie (performance-enhancing)		End of browser session
27.	has_js	Cookie (functional)	Session cookie to check whether or not your browser has JavaScript enabled.	End of browser session
28.	Facebook Pixel	Similar technology	Technology provided by Facebook to measure the effectiveness of our advertising by understanding the actions users take on our Website (see Article 3.4). Learn more about Facebook Pixel.	N/A

TO WHOM DO WE SEND YOUR PERSONAL DATA?
1. We rely on third parties, for example:
  - To provide you our Website (such as a hosting provider); or
  - To target our promotional information (such as a marketing company); or
  - To process your order (such as a transport company to deliver you the materials); or
  - To process your payment (such as a payment service provider or a credit checking agency).
  These third parties are only allowed to process your personal data on our behalf and upon our explicit written instruction. We also warrant that all those third parties are selected with due care and are committed to observing the safety and integrity of your personal data.
2. We may share your personal data with other national, regional or local organizations of the Church of Scientology, such as local Churches, Missions and social betterment and humanitarian programs. For example, we may share your contact details with a Church in your area if you have expressed an interest in joining a Scientology organization so that they can contact you. However, we will ensure that all Scientology organizations will take due care that all processing of your personal data is in line with what is set out in this Cookie Policy.
3. We may share your personal data for the purposes mentioned in Article 3 with the International Association of Scientologists Administrations (IASA) and the World Institute of Scientology Enterprises (WISE). If you require more information about the personal data IASA and WISE process, you are kindly requested to consult their respective privacy policies.
4. We may be legally obliged to share your personal data with competent law enforcement agents or representatives, judicial authorities, governmental agencies or bodies, including competent data protection authorities, to comply with a legal obligation as set out in Article 3 above.
5. We do not send your personal data in an identifiable manner to any other third party than the ones mentioned in Articles 4.1, 4.2, 4.3 and 4.4 without your explicit consent to do so. However, we may send anonymized data to other organizations that may use those data for improving materials and services as well as to tailor the marketing, displaying and selling of those materials and services.
WHERE DO WE PROCESS YOUR PERSONAL DATA?
1. We process your personal data both within and outside the European Economic Area (EEA), including in the USA. In order to process your personal data for the purposes outlined in Article 3 above, we may also transfer your personal data to third parties who process on our behalf outside the EEA. Each entity outside the EEA that processes your personal data will be bound to observe adequate safeguards with regard to the processing of your personal data. For CSI, such safeguards result from the fact that we are directly bound by compliance with EU legislation in the context of personal data protection. For third parties, such safeguards may be the consequence of:
2. We may transfer anonymized and/or aggregated data to organizations outside the EEA. Should such transfer take place, we will ensure that there are safeguards in place to ensure the safety and integrity of your data and all rights with respect to your personal data you might enjoy under applicable mandatory law.
WHAT QUALITY ASSURANCES DO WE COMPLY WITH?
1. We do our utmost best to process only those personal data which are necessary to achieve the purposes listed under Article 3 above.
2. Your personal data are only processed for as long as needed to achieve the purposes listed under Article 3 above or up until such time where you withdraw your consent for processing them. Your withdrawal of consent may imply that you can no longer use the whole or part of our Website. We will de‑identify your personal data when they are no longer necessary for the purposes outlined in Article 3 above, unless there is:
3. You understand that an essential aspect of our marketing efforts pertains to making our marketing materials more relevant to you. We do this by customizing your unique profile based on relevant characteristics and then use this profile to provide you with communications, promotions, offerings, newsletters and other promotional information about materials and services that may interest you.
4. We will take appropriate technical and organizational measures to keep your personal data safe from unauthorized access or theft as well as accidental loss tampering or destruction. Access by our staff members or third parties’ personnel will only be on a need-to-know basis and be subject to strict confidentiality obligations. You understand, however, that safety and security are best efforts obligations which can never be guaranteed.
5. If you are registered to receive promotional information, such as communications, promotions, offerings and newsletters, via e-mail or other person-to-person electronic communication channels, you can change your preferences for receiving such promotional information by clicking the opt-out link provided in such promotional information.
6. If you are registered to receive paper promotional information, such as magazines, communications, promotions, offerings and newsletters, you can object to receiving further promotional information on paper by submitting a request to our Data Protection Officer in accordance with Article 8.8 of this Cookie Policy.
WHAT IF YOU DON’T LIKE COOKIES?
1. In order to prevent cookies from being placed on your device, you have to configure your browser settings. How to adjust these settings, to delete cookies and to withdraw your consent to our use of cookies depends on the browser you are using. However, keep in mind that modifying these settings or deleting cookies may result in certain features of this Website no longer working properly. Click on the browser you are using below to get more information about how to adjust the cookie settings:
WHAT ARE YOUR RIGHTS?
1. You have the right to request access to all personal data processed by us pertaining to you. We reserve the right to charge a reasonable administrative fee for multiple subsequent requests for access that are clearly submitted for causing nuisance or harm to us. Each request must specify for which processing activity you wish to exercise your right to access and must specify to which data categories you wish to gain access to.
2. You have the right to rectification, i.e. to ask that any personal data pertaining to you that are inaccurate, are corrected free of charge. If you submit a request for correction, your request needs to be accompanied of proof of the flawed nature of the data for which correction is asked.
3. You have the right to withdraw your earlier given consent for processing of your personal data.
4. You have the right to erasure, i.e. to request that personal data pertaining to you be deleted if these data are no longer required in the light of the purposes listed under Article 3 above or if you withdraw your consent for processing them. However, you need to keep in mind that a request for deletion will be evaluated by us against:
5. You have the right to restriction instead of deletion, i.e. to request that we limit the processing of your personal data if:
6. You have the right to object to the processing of personal data if:
  - The processing is based on our legitimate interest; and
  - You are able to prove that there are serious and justified reasons connected with your particular situation that warrant such objection; and
  - Our legitimate interests do not override your interests.
  However, if the intended processing qualifies as direct marketing, you have the right to object to such processing free of charge and without justification.
7. You have the right to data portability, i.e. to receive from us in a structured, commonly-used and machine-readable format all personal data you have provided to us if the processing is based on your consent or a contract with you.
8. If you wish to submit a request to exercise one or more of the rights listed above, you can contact our Data Protection Officer by sending an e-mail to dpo@scientology.net. An e-mail requesting to exercise a right will not be construed as consent with the processing of your personal data beyond what is required for handling your request. Such request should meet the following conditions:
  - State clearly which right you wish to exercise; and
  - State clearly the reasons for exercising your right if such is required; and
  - Your request should be dated and signed; and
  - Your request should be accompanied by a digitally scanned copy of your valid identity card proving your identity. If you use the contact form, we may ask you for your signed confirmation and proof of identity.
  We will promptly inform you of having received your request. If the request meets the conditions above and proves valid, we will honor it as soon as reasonably possible and at the latest thirty (30) days after having received your request.
  
  If you have any complaints regarding the processing of your personal data by us, you may always contact our Data Protection Officer by sending an e-mail to dpo@scientology.net. If you remain unsatisfied with our response, you are free to file a complaint with the competent data protection authority.