SHIFT PRIVACY NOTICE

Last Updated: 02/04/2026

Welcome to SHIFT, an initiative brought to you by Project Drawdown that particularly helps to bring science-based climate solutions to users in the form of a personalized guide. This Privacy Notice explains how Project Drawdown Corporation, 428 Minnesota Street, Suite 500, St. Paul, MN 55101 (“Project Drawdown,” “we” and “us”) collects, uses, discloses, and otherwise processes personal data in connection with the website Jointheshift.earth (the “SHIFT Website“).

This Privacy Notice does not address any other privacy practices and processing activities of Project Drawdown or our processing of personal data in connection with drawdown.org, which are covered by the privacy notice available online under drawdown.org here. This SHIFT Privacy Notice is not a contract and does not create any legal rights or obligations not otherwise provided by law.

We may also choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you.

Table of Content

1. Our Role in Processing Personal Data
2. Our Collection and Use of Personal Data and the Related Purposes
3. Our Disclosure of Personal Data
4. Your Privacy Choices
5. Children’s Personal Data
6. Security of Personal Data
7. Retention of Personal Data
8. Third-Party Websites and Services
9. Region-Specific Disclosures
10. Updates to This Privacy Notice
11. Contact Us

Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures SHIFT Cokie Notice

1. Our Role in Processing Personal Data

Data protection laws sometimes differentiate between “controllers” and “processors” of personal data. A “controller” determines the purposes and means (the why and how) of processing personal data. A “processor,” which is sometimes referred to as a “service provider,” processes personal data on behalf of a controller subject to the controller’s instructions.

This Privacy Notice describes Project Drawdown’s privacy practices in connection with the SHIFT Website where we are acting as the controller of personal data.

If you access the SHIFT Website or otherwise interact with us from the European Economic Area, United Kingdom, or Switzerland, please see the Controller Details section of our Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures for more information about the legal entity operating as the controller of your personal data.

2. Our Collection and Use of Personal Data and the Related Purposes

The categories of personal data we collect depend on how you interact with us and the SHIFT Website. For example, you may provide us with your personal data directly when you complete the SHIFT survey and provide us with your e-mail address or otherwise contact us. We may also collect personal data automatically when you interact with the SHIFT Website. We may use the collected personal data for the purposes described below.

a. Personal Data Provided by Individuals to Us

We collect and process the following categories of personal data which individuals provide to us:

• • Contact Information, including first and last name, email address, and communication preferences. We use this information primarily to fulfil your request to receive a SHIFT Guide and/or to otherwise communicate with you directly.
  • SHIFT Guide Survey Information, when you complete the survey for the SHIFT Guide (“SHIFT Guide Survey“), as available on the main page of the SHIFT Website, we will collect all the responses you provide / choices you make regarding the questions, such as (i) the country in which you live, whether you (ii) have a post-high school degree, (iii) make over US$38,000, (iv) always vote in elections, (v) are an active member of a political party or climate group, (vi) have contacted your political representative, etc., and the e-mail address you provide at the end of the SHIFT Guide Survey. Together, this information is used to create a downloadable SHIFT Guide that is customized for you based on your survey responses / choices.
  • Subscription to Receiving Message From Us: If you consent to receive messages about major new developments related to the SHIFT Guide, such as opportunities to participate in SHIFT action groups and future scientific research studies on climate action based on the SHIFT Guide from us at the end of the SHIFT Guide Survey, we will also collect and use the e-mail address you provide to send you these messages. As it relates to us sending you these messages, we will collect and process the data set out under “Communication Information” below as well as communicate and follow up with you in relation thereto, including by providing you with more information, in case of you expressing interest in the content of these messages.
  • Communication Information, when you contact us through any method of communications in relation to SHIFT and the SHIFT Website, we may collect your name, email address, mailing address, phone number, company/company URL, account ID, type of inquiry, content of your messages, metadata regarding the communication including communications records automatically stored or collected, such as the date and time, and/or any other personal data you choose to provide to us.
  • SHIFT Feedback Survey Information, when you complete the SHIFT Feedback Survey available on the SHIFT Website, we will collect your responses to the SHIFT Feedback Survey available on the SHIFT Website and any other feedback included in custom feedback messages sent as well as related metadata, such as the time and date of the survey’s completion.

b. Personal Data Provided by Individuals to Us

When you engage with us, we and our external service providers may automatically collect information about how you access and use the SHIFT Website. We typically collect this information through a variety of our own and our external service providers’ automatic data collection technologies, including (i) cookies or small data files that are stored on an individual’s computer, and (ii) other related technologies such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies, and logging technologies. Information we automatically collect about you may be combined with other personal data we collect directly from you or receive from other sources.

We may automatically collect the following data from you when you use the SHIFT Website or otherwise engage with us:

• Information About Your Device and Network, including the device type, manufacturer, and model, operating system, IP address, browser type, internet service provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier or advertising ID).
• Information About the Way Individuals Use the SHIFT Website and Interact With It, including the site from which you came, how frequently you access the SHIFT Website, whether you access the SHIFT Website from multiple devices, and other browsing behavior and actions you take on the SHIFT Website (such as the pages you visit, the content you view, , and the content, links you interact with). We employ third-party technologies designed to allow us to collect specific information about browsing behavior and actions that you take on the SHIFT Website. These third-party technologies may also record information you enter when you interact with the SHIFT Website.
• Information About Your Location, including general geographic location that we or our external service providers may derive from your IP address.
• Information About Your Consent, including, the content of your consent declaration as well as related metadata, such as the time and date of your consent declaration.

For information about our use of automatic data collection technologies, our processing purposes and the choices you may have in relation to, please refer to the SHIFT Cookie Notice below.

c. Personal Data from Other Sources and Third Parties

We may receive the same categories of personal data as described above from the following sources and other parties:

• Service Providers: External vendors that perform services on our behalf, such as external analytics providers, collect personal data and may share information with us.
• Other Sources: We may also collect personal data about you from other sources, including publicly available sources, external data providers, or through transactions such as mergers and acquisitions.

d. Additional Uses of Personal Data

In addition to the primary purposes for using personal data described above, we may also use the personal data we collect to:

• Manage our Organization: We may process any personal data to manage our organization and its day-to-day operations.
• Administer the SHIFT Website: We may process personal data to administer, develop, improve, and protect the features and functionalities and security of the SHIFT Website, include to diagnose or fix technology problems.
• Compliance with a Legal Obligation: We may process any personal data if this may become necessary for our compliance with a legal obligation.
• Establishment, Exercise, or Defense of Legal Claims: We may process any personal data if this may become necessary to establish, exercise, or defend against a legal claim.
• Investigations: We may process personal data for the purpose of detecting, and protecting against, fraud, other illegal or criminal activity, or other violations of our policies and rules.
• Other Purposes: Fulfill any other purpose for which you provide your personal data, or for which you have otherwise consented.

3. Our Disclosure of Personal Data

We may disclose or otherwise make available personal data to external recipients, as described below.

• Service Providers: We share personal data with external contractors and service providers, who provide us with IT services (including cloud services), business support, legal and accounting support, marketing, and online advertising services. Any such external contractors and service providers will be subject to confidentiality provisions, and be bound to only process the data on our behalf and under our instructions, unless such external contractors or service providers act as their own controllers (e.g., in the case we seek advice from lawyers). As it relates to our use of cookies on the SHIFT Website, you can find more information on our service providers under the SHIFT Cookie Notice.
• Corporate Transaction: We may disclose any personal data to a purchaser or another external entity in connection with a transaction, such as a merger, sale of assets or shares, transfer of services, reorganization, financing, change of control or acquisition of all or a part of our business. 
• Legal Obligations and Rights: We may disclose personal data to third parties, such as external auditing firms, legal advisors, other professional consultants, and law enforcement agencies, regulators, other authorities, and courts, for legal reasons if we reasonably believe that such action is necessary:

• • in connection with the establishment, exercise, or defense of legal claims;
  • to comply with laws or to respond to lawful requests and legal process;
  • to protect our rights and property and the rights, personal safety and property of others, including to enforce our agreements and policies;
  • to detect, suppress, or prevent fraud; or
  • as otherwise required by applicable law.

• With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on our websites.

Please note that our Privacy Notice is applicable solely to the data collection and processing activities conducted by Project Drawdown in connection with the SHIFT Website and does not extend to the data collection and processing activities of third parties, who are themselves responsible for and control the processing of the personal data. Please be advised that when interacting with such third-parties, including their websites / applications, your personal data will be processed by them in accordance with their privacy notices and practices. We strongly recommend that you review the privacy notices of these third parties to ascertain how they handle your personal data.

4. Your Privacy Choices

The following privacy choices are made available to all individuals with whom we interact subject to certain conditions and restrictions. You may also have additional choices regarding your personal data depending on your location or residency. Please refer to our Region-Specific Disclosures below for information about additional privacy choices that may be available to you if you reside in a specific region.

a. Right to rectification
You have the right to obtain rectification of any inaccurate or incomplete personal data we hold about you without undue delay.

b. Withdrawing Your Consent
Where we have your consent for the processing of your personal data (e.g., when you opt in to receive certain types of marketing communications from us), you may withdraw your consent with effect for the future by following the instructions provided when your consent was requested or by contacting us as set forth under Section 11 below. Please note that withdrawing your consent will not affect any processing that occurred before your withdrawal.

c. Email Communication Preferences
You can stop receiving email communications from us by clicking on the “unsubscribe” link provided in any of our email communications. Please note you cannot opt-out of service-related email communications (such as transaction confirmation or service update emails).

d. Exercising Your Rights
If you wish to exercise one of these rights, we kindly ask you to contact us via e-mail to info@drawdown.org or via postal mail at Project Drawdown Corporation, 428 Minnesota Street, Suite 500, St. Paul, MN 55101, USA

e. Your Choices About Cookies
Please see Section 4 of the SHIFT Cookie Notice regarding your choices about cookies.

5. Children’s Personal Data

Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children. If you are under the legal age requirement for adults in your jurisdiction, you should not use our services or otherwise provide us with any personal data either directly or by other means. If you reside in the U.S., you are considered to be under the legal age requirement for adults in this context until you turn 18 years old.

If a child under the legal age requirement for adults in your jurisdiction has provided personal data to us, we encourage the child’s parent or guardian to contact us as set out in Section 11 below to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child, we will promptly delete that personal data.

6. Security of Personal Data

We have implemented reasonable physical, technical, and organizational safeguards that are designed to protect your personal data. In addition, we take steps designed to ensure any third party with whom we share personal data provides a similar level of protection. However, despite these controls, we cannot completely ensure or warrant the security of your personal data.

7. Retention of Personal Data

In general, we will only retain your personal data (i) for as long as necessary to fulfil the purposes for which we collected or otherwise processed it, (ii) until you withdraw your consent on which the processing is based, where there is no other legal ground for the processing, or (iii) if you are located in the EEA, UK, or Switzerland, until you successfully exercise your right to object as stipulated under Section 6 of the Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures, in each case to the extent that the exceptions set out in next paragraph do not apply.

We may particularly refrain from deleting your personal data if its continued processing is necessary for compliance with a legal obligation (including statutory retention obligations, such as under tax law) or for the establishment, exercise or defence of legal claims.

8. Retention of Personal Data

Our services may include links to third-party websites, plug-ins, applications and other services. Except where we post, link to, or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to any personal data practices of third parties. To learn about the personal data practices of third parties, please visit their respective privacy notices.

9. Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions or states. If you are located in the European Economic Area (that is, member states of the European Union together with Iceland, Norway, and Liechtenstein), the United Kingdom, or Switzerland, please click here for additional European-specific privacy disclosures, including a description of the personal data rights made available to individuals located in those jurisdictions under applicable law.

10. Updates to This Privacy Notice

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

11. Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please contact us at:

Postal Address:
Project Drawdown Corporation
428 Minnesota Street, Suite 500
St. Paul, MN 55101
USA

E-Mail: info@drawdown.org
Phone: 001-651-243-3116

Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures

Table of Content

1. Controller Details
2. Purposes and Legal Bases of the Processing
3. On Whether You May Be Obligated to Provide Your Personal Data
4. Automated Decision-Making and Profiling
5. International Transfers of Personal Data
6. Your (Additional) EEA, UK, and Swiss Privacy Rights

These disclosures supplement the information contained in our Privacy Notice by providing additional information about our processing practices relating to personal data of individuals who access our services or otherwise interact with us from the European Economic Area (“EEA”), United Kingdom (“UK“), or Switzerland. For descriptions of how we collect, use, disclose, and otherwise process personal data, please read our Privacy Notice. If there are any conflicts between these additional disclosures and any other provision of this Privacy Notice, these additional disclosures shall prevail.

1. Controller Details

SHIFT is operated by Project Drawdown Corporation, 428 Minnesota Street, Suite 500, St. Paul, MN 55101 (“Project Drawdown,” “we” and “us”), the “controller” responsible for the processing of personal data of individuals residing in the EEA, UK, or Switzerland. This means Project Drawdown determines and is responsible for how your personal data is used. You may contact Project Drawdown as set out under Section 11 of the Privacy Notice.

2. Purposes and Legal Bases of the Processing

When we process your personal data, we will do so in reliance on the following lawful bases:

• Legitimate Interest: Where the processing is necessary for the purposes of a legitimate interest that are not overridden by your interests or fundamental rights and freedoms (e.g., to provide, maintain, and improve our services; or communicate with you regarding our services).
• Consent: Where we obtain your consent for the processing (e.g., when you opt in to receive marketing communications from us). When consent is the legal basis for our processing of your personal data, you may withdraw your consent at any time with effect for the future.
• Legal Obligation: Where the processing is necessary to comply with our legal obligations subject to EU or Member State law, UK law, or Swiss law (e.g., to maintain a record of your personal data to comply with laws and regulations related to bookkeeping, accounting, or taxation). 
• Contract: Where the processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract with you. This applies to any processing where you sign a contract with us or engage with us pursuant to certain contractual terms.
• Vital Interest: Where the processing is necessary to protect the vital interests of you or another person (e.g., to protect your physical safety).
• Public Interest: Where the processing is necessary to perform tasks carried out in the public interest or in the exercise of official authority vested in us (e.g., to cooperate with an ongoing law enforcement investigation).

When we process special categories of personal data, including personal data revealing political opinions, we do so only where (i) you have given us explicit consent, (ii) the processing is necessary for the establishment, exercise, or defense of legal claims, (iii) the processing is necessary for reasons of substantial public interest, or (iv) the processing relates to personal data which are manifestly made public by you.

We perform the following specific processing activities as described in our Privacy Notice pursuant to the following respective legal bases:

a. Legal Basis Regarding the Processing Activities Described under Section 2 a of our Privacy Notice

• SHIFT Guide Survey Information: The legal basis for our processing the responses you provide / choices regarding the SHIFT Guide Survey and the e-mail address you provide at the end of the survey in order to create a downloadable SHIFT Guide which is customized for you based on your survey responses / choices is your consent.
• Subscription to Receiving Message From Us: The legal basis for us sending you message about major new developments related to the SHIFT Guide, such as opportunities to participate in SHIFT action groups and future scientific research studies on climate action based on the SHIFT Guide as well as, in case of you expressing interest in the content of these messages, our communication and following up with you in relation thereto, including by providing you with more information is your consent.
• Contact Information and Communication Information: When you contact us through any method of communications in relation to SHIFT and the SHIFT Website, outside of the other processing activities mentioned below and above, the legal basis for the processing is our legitimate interest to fulfil and respond to your inquiry and communicate with you.
• SHIFT Feedback Survey Information: The legal basis for our processing of your responses regarding the SHIFT Feedback Survey available on the SHIFT Website and any other feedback included in custom feedback messages sent as well as related metadata, is our legitimate interest, namely to allow you to provide and for us to obtain your feedback and for us to improve the SHIFT Website and the SHIFT Guide Survey.

b. Legal Basis Regarding the Processing Activities Described under Section 2 b of our Privacy Notice

The respective legal basis for the processing of personal data in connection with our use of cookies can be found under Section 3 of the SHIFT Cookie Notice. Apart from the use of cookies and the related processing activities, the automatic processing activities described under Section 2 b of our Privacy Notice generally occurs based on our legitimate interests, in particular, ensure the proper and secure functioning of the SHIFT Website and its features and analyse the use of our website and features and improve them on that basis.

c. Legal Basis Regarding the Processing Activities Described under Section 2 d of our Privacy Notice

• Manage our Organization: We may process any personal data to manage our organization and its day-to-day operations based on our legitimate interest to effectively manage our organization and its day-to-day operations.
• Administer the SHIFT Website: The legal basis for our processing of personal data to administer, develop, improve, and protect the features and functionalities and security of the SHIFT Website, include to diagnose or fix technology problems, will generally be our legitimate interest of effectively administering, developing, improving, and protecting the features and functionalities and security of the SHIFT Website.
• Compliance with a Legal Obligation: The legal basis for our processing is the compliance with a legal obligation if we process your data to comply with a legal obligation based on EEA or UK law. Otherwise, the legal basis is our legitimate interest to comply with a legal obligation or to disclose the data for one of the other aforementioned purposes.
• Establishment, Exercise, or Defense of Legal Claims: The legal basis for our processing is our legitimate interest to establish, exercise, or defend against a legal claim.
• Investigations: The legal basis for our processing of the personal data is our legitimate interest of detecting, and protecting against, fraud, other criminal activity, or other violations of our policies and rules.

c. Legal Basis Regarding the Processing Activities Described under Section 3 of our Privacy Notice

• Corporate Transaction: The legal basis for the disclosure to a purchaser or another external entity in connection with a transaction and our related processing will generally be our legitimate interest of preparing, taking part, and/or completing such transaction.
• Legal Obligations and Rights: The legal basis for our disclosure to third parties, such as external auditing firms, legal advisors, other professional consultants, and law enforcement agencies, regulators, other authorities, and courts, for legal reasons, and our related processing is the compliance with a legal obligation if we process your personal information to comply with a legal obligation based on EEA, UK, or Swiss law. Otherwise, the legal basis is our legitimate interest to comply with a legal obligation or to disclose the data for one of the other aforementioned purposes.
• With Your Consent or Direction: The legal basis for our disclosure of your personal data to certain other third parties or publicly with your consent is your consent.

3. On Whether You May Be Obligated to Provide Your Personal Data

You are not legally or contractually obligated to provide your personal data to us, but you may not be able to use all features the SHIFT Website without providing some of the data. For example, we need your personal data to deliver your personalized guide for climate action. If you choose not to provide us with your personal data, we may not be able to provide you with the services you request. We will inform you at the point that we collect personal data from you if the provision of certain personal data is mandatory or optional for receipt of our services.

4. Automated Decision-Making and Profiling

We do not conduct automated processing of personal data, including profiling, for the purposes of making decisions which produce legal effects concerning you or similarly significantly affect you.

5. International Transfers of Personal Data

The personal data we process from you may be transferred to and stored in countries outside the EEA, UK, and Switzerland where we and our external recipients, including our service providers, have operations, including in the United States of America or the United Kingdom. The country to which your personal data is transferred may not provide the same level of protection for personal data as the country from which it was transferred.

We may transfer personal data about you outside of the EEA, UK, or Switzerland, and when we do so we ensure that the personal data is transferred (a) to a country, territory, or sector ensuring an adequate level of protection in relation to the processing of personal data as determined by the European Commission, which can be reviewed here, or, where applicable, a competent UK or Swiss authority; (b) to an entity that is a member of a compliance scheme recognized as offering adequate protection for the rights and freedoms of data subjects as determined by the European Commission, such as to U.S. entities certified under the EUU.S. Data Privacy Framework or, where applicable, under the UK Extension to the EU U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework; or (c) pursuant to appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission’s Implementing Decision (EU) 2021/914 of 4 June 2021, whose clauses can be reviewed under the Annex of the aforementioned Implementing Decision, or equivalent contractual clauses pursuant to UK or Swiss privacy law.

Google’s U.S. parent company, Google LLC, 1 1600 Amphitheatre Pkwy, Mountain View, CA 94043, U.S. is certified under the EU U.S. Data Privacy Framework, its UK Extension, and the Swiss-U.S. Data Privacy Framework.

If you wish to enquire further about international transfers and the safeguards we rely on, including the specific contracts entered into, please contact us using the details set out under Section 11 of our Privacy Notice.

6. Your (Additional) EEA, UK, and Swiss Privacy Rights

Subject to certain limitations pursuant to applicable law, you may be able to exercise the following rights:

• Right of access. You have the right to obtain certain information about our processing of your personal data which includes:
  • confirmation of whether we are processing your personal data;
  • information about the categories of personal data that we are processing, the purposes for which we process your personal data, and information as to the envisaged storage period or the criteria used to determine it;
  • where the personal data are not collected from you, information as to their source;
  • information about the recipients or categories of recipients with whom we may share your personal data and, in case of transfers to countries outside of the EEA, information about the appropriate safeguards;
  • the existence of automated decision-making, including profiling, and relevant information in relation thereto; and
  • a copy of the personal data we hold about you.

• Right of portability. You have the right, under certain conditions, to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format that supports its re-use in relation to another controller, or, where technically feasible, to request the transfer of your personal data to another controller.

• Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to erasure. You have the right, under certain conditions, to require us to erase your personal data without undue delay, if the continued processing of that personal data is not justified. This may particularly be the case if the processing of your personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed. However, we may particularly refrain from erasing your personal data to the extent that its continued processing is necessary for compliance with a legal obligation (including statutory retention obligations, such as under tax law) or for the establishment, exercise or defence of legal claims.
• Right to restriction. You have the right to require us to restrict the processing of your personal data if our continued processing of the personal data in this way is not justified, under certain conditions, such as where (i) the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of that personal data, or (ii) the processing is unlawful and you oppose the erasure of your personal data and request the restriction of its use instead.
• Right to withdraw consent. There are certain circumstances where we require your consent to process your personal data. In these instances, and if you have provided consent, you have the right to withdraw your consent at any time with future effect. If you withdraw your consent, this will not affect the lawfulness of our use of your personal data before your withdrawal.
• RIGHT TO OBJECT. YOU HAVE A RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA
  • BASED ON THE LEGITIMATE INTERESTS BY US OR A THIRD PARTY ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION WHILE WE WILL NO LONGER PROCESS THE PERSONAL DATA UNLESS (I) WE ARE ABLE TO DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR (II) FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS; OR
  • FOR DIRECT MARKETING PURPOSES.

If you wish to exercise one of these rights, we kindly ask you to contact us via e-mail to info@drawdown.org or via postal mail at Project Drawdown Corporation, 428 Minnesota Street, Suite 500, St. Paul, MN 55101, USA.

Due to the confidential nature of data processing, we may ask you to provide proof of identity when exercising the above rights.

To exercise your rights to object and withdraw your consent as it relates to the use of cookies as described in the SHIFT Cookie Notice, please click the “Cookie Settings” link in the footer of the SHIFT Website and adjust your preferences accordingly.

You also have the right to lodge a complaint with a data protection authority, in particular, in the country of your habitual residence, your place of work or the place of the alleged infringement.

• If you are based in the EEA, information about how to contact your local data protection authority is available under the following link: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
• If you are based in the UK, your local data protection authority is the UK Information Commissioner’s Office and you can contact the authority under the following link: https://ico.org.uk/global/contact-us/.
• If you are based in Switzerland, your local data protection authority is the Federal Data Protection and Information Commissioner (FDPIC) and you can contact the authority under the following link: https://www.edoeb.admin.ch/en/contact-2

SHIFT Cookie Notice

Table of Content

1. Scope of Notice
2. What Are Cookies and Related Technologies
3. What Type of Cookies We Use, For Which Purposes, and Based on Which Legal Basis
4. Your Choices About Cookies
5. Updates to This Cookie Notice
6. Contact us

Unless otherwise expressly stated, terms in this Cookie Notice have the same meaning as defined in the Privacy Notice.

1. Scope of Notice

This Cookie Notice supplements the information contained in the Privacy Notice and explains how we and our external service providers use cookies and related technologies in the course of managing and providing our SHIFT Website and its features to you. It explains what these technologies are and why we use them, as well as your rights to control our use of them.

In some cases, we may use cookies and related technologies described in this Cookie Notice to collect personal data, or to collect information that becomes personal data if we combine it with other information. For more information about how we process your personal data, please review the Privacy Notice.

2. What Are Cookies and Related Technologies

As is common practice among websites, the SHIFT Website uses cookies, which are tiny files downloaded to your device that allow us and our external service providers to collect certain information about your interactions with the SHIFT Website, and that improve your experience. We and our external service providers may also use other, related technologies to collect this information, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”). First-party cookies are set by us and our SHIFT Website. Third-party cookies are set by an external domain which is different from our SHIFT Website.

3. What Type of Cookies We Use, For Which Purposes, and Based on Which Legal Basis

We and our external service providers may use the following types of cookies for the described purposes:

1. Strictly Necessary Cookies. These cookies are strictly necessary for the SHIFT Website and its features to function properly and securely as well as for the determination and documentation of your consent and are always active. The cookies and related processing are used in particular for the following purposes: We use such cookies to

   • determine, store, and document your consent, including your related preferences, in relation to the use of cookies on the SHIFT Website which are not strictly necessary;
   • enable you to complete the SHIFT guide questions and obtain a customized SHIFT guide based on an individual user’s responses;
   • fill out forms and transfer the relevant data to us and/or our service providers; and
   • ensure the proper and secure functioning of the SHIFT Website and its features.

   You can block these cookies via your browser settings. However, some areas of the website may then no longer function properly. Cookies may be set and processed by us or by our service providers.

   If you are from the EEA, the UK, or Switzerland, the legal basis for the storing of information, or the gaining of access to information on a necessary cookies is the relevant provision under your national law which implements Art. 5 (3) s 2 of the Directive 2002/58/EC or the equivalent UK or Swiss law. The legal basis for our related processing of your personal data is our legitimate interests, namely being able to securely provide and maintain our Services, or compliance with a legal obligation, where our processing is necessary for our compliance with a legal obligation under EEA, UK, or Swiss law.

2. Analytics Cookies / Google Analytics. These cookies enable us to collect information about website visits, including the website or service through which a user arrives at our website and where a user is located, so that we can analyze the use of our website and features and improve them on that basis. These cookies enable us, in particular, to obtain information about your device (such as, browser type and information, language, screen size, supported technologies) and understand which pages are most popular, which are least used, and how visitors move around and use the website, including how they respond to and complete the respective SHIFT guide questions. The cookies may be set by our external analytics provider, Google.

   In addition, our external analytics provider, Google, may process the data for its own advertising purposes and to improve its services, including by possibly evaluating it jointly with your usage activities on third-party websites and services as well as information from other sources collected by the provider. Information on how Google collects and processes data, as well as how you can control information sent to Google can be found under www.google.com/policies/privacy/partners/.

   This processing is carried out by us, Project Drawdown, and by our external analytics provider, Google, and may also take place in countries outside the EU, including the U.S., which may have a lower level of data protection than the EU and where government authorities may access data without adequate legal protection.

   If you are located outside of the U.S., our legal basis for the storing of information, or the gaining of access to information on these cookies as well as the related processing of your personal data is thus your consent. You are free to deny your consent. You can also withdraw your consent at any time with effect for the future by using our Cookie Settings feature which can be found at the bottom of the SHIFT Website.

   You can further learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Add-On here: https://tools.google.com/dlpage/gaoptout/.

4. Your Choices About Cookies

If you would prefer not to accept cookies, most browsers will allow you to change the setting of cookies by adjusting the settings on your browser to: (i) notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Be aware that disabling cookies may negatively affect the functionality of this and many other websites that you visit. Disabling cookies may usually result in also disabling certain functionalities and features of a website.

Depending on your device and operating system, you may not be able to delete or block all cookies. In addition, if you want to reject cookies across all your browsers and devices, you will need to do so on each browser on each device you actively use.

If you are located outside of the USA, you may also use our Cookie Settings feature, which can be found at the bottom of the SHIFT Website, to set and change your cookie preferences at any time, including to withdraw your previously given consent.

5. Updates to This Cookie Notice

We will update this Cookie Notice from time to time. When we make changes to this Cookie Notice, we will change the “Effective Date” at the beginning of this notice. If we make material changes to this notice, we will notify you by prominently posting on our Services or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.

6. Contact us

If you have any questions or requests in connection with this Cookie Notice or other privacy-related matters, please contact us at:

Postal Address:
Project Drawdown Corporation
428 Minnesota Street, Suite 500
St. Paul, MN 55101
USA

E-Mail: info@drawdown.org

Phone: 001-651-243-3116