GDPR FAQs

What is GDPR

  • The EU General Data Protection Regulation (GDPR) is a new comprehensive data protection law that updates existing EU laws to strengthen the protection of “personal data” (any information relating to an identified or identifiable natural person, so called “data subjects”) in light of rapid technological developments, the increasingly global nature of business and more complex international flows of personal data.  The GDPR replaces the current patchwork of national data protection laws with a single set of rules, directly enforceable in each EU member state. The GDPR takes effect on May 25, 2018.

How do I request my rights under GDPR from National Geographic?

  • To request your GDPR rights from National Geographic Partners, please click here to submit an online form.
  • To request your GDPR rights from the National Geographic Society, please email dataprivacy@ngs.org

Why do I need to make separate GDPR requests from National Geographic Society and National Geographic Partners, LLC?

  • Services and products, including, but not limited to, donor accounts and educational products offered through the National Geographic Society (“NGS”) are run independently from National Geographic Partners, LLC.  Therefore, all data subject requests involving NGS Products and Services can be made to the National Geographic Society at dataprivacy@ngs.org.

What rights must companies enable under GDPR?

  • The GDPR provides EU residents with control over their personal data through a set of "data subject rights." This includes the right to:
    • Access information about how personal data is used
    • Access personal data held by an organization
    • Have incorrect personal data deleted or corrected
    • Have personal data rectified and erased in certain circumstances (sometimes referred to as the "right to be forgotten")
    • Restrict or object to automated processing of personal data
    • Receive a copy of personal data

What is National Geographic Partners doing to meet GDPR requirements?

  • We've been preparing for the GDPR and modifying many of our internal practices and policies over the last year. We've updated our Privacy PolicyTerms of Use and added a new Cookie and Technology Tracking Policy.  We are also updating our third-party vendor contracts to meet the GDPR's requirements. Finally, we are also in the process of building and releasing tools that will make it easier for our users to handle their customer’s data appropriately.  

How can I request to opt-out of communications from NGP and/or other third parties?

  • To remove yourself from mailing lists and update your communications access the Support Center herefill in your name and email, and select your country and the action you are requesting from the scroll bar.  Within thirty days of receipt of your request, our account specialist will update your account with the changes you’ve requested.
    You can also unsubscribe from email communications from us by clicking on the "unsubscribe link for EU Users" provided in any National Geographic newsletter sent to you. Please note, you may not opt out of Service-related communications (e.g., account verification, product purchase and billing confirmations and reminders, changes/updates to features of the products, technical and security notices).

How do I request export or access to my data?

  • To request access/export of your personal data visit the Support Center here Fill in your name and email, choose your country and then select “Access My Data” for Inquiry Type.  Within 30 days of receipt of your request, our account specialist will email you a link to the personal data we can provide to you. The export process will not delete data. A separate request will need to be issued for data deletion. More information on this process is provided in another article.

How do I request deletion of my data or account?

  • To request deletion of your personal data or member account access the Support Center here. Fill in your name and email, then select your country and select “Delete My Data” for Inquiry Type.  Within 30 days of receipt of your request, you will receive a notice from us indicating your personal information has been deleted.  The deletion process cannot be undone. Following termination or deactivation of your account, National Geographic, its Affiliates, or its Service Providers may retain information (including your profile information) and User Generated Content for a commercially reasonable time for backup, archival, and/or audit purposes.

    For Your Shot Community:
    If participating in the Your Shot community, you have deletion control over photos and Discussions comments you have contributed from your account:
    • To delete a photo, use the button on the bottom left of the modal for the delete option to appear.
    • To delete comments left on Discussions, hover over the comment you contributed, then click on the gear icon, where you'll see the option to delete. 

How can I request a change in my account information?

  • Changing information related to your membership account is easy.  Simply visit our Support Center here. Fill in your name and email, select your country and then select “Update my Information” and provide the updates you are requesting in the 'Description' text box.  Within 30 days of receipt of your request, our account specialist will update your account with the changes you’ve requested.

Which countries does the GDPR cover?

  • GDPR covers all countries in the EU, including the EEA countries: which are the EU countries plus Norway, Iceland and Liechtenstein

How can I find out more about GDPR?

  • You can read more about the GDPR on the EU GDPR website: www.eugdpr.org,or if you would like to find out more about National Geographic Partners and the GDPR please go to our Privacy Policy and click on the link to the GDPR FAQs.

Where can I find the Privacy Policy?

I live outside of the EU, can I request the GDPR rights?

  • The GDPR is intended to unify privacy regulation across the EU and does not apply outside of the EU.

I used to live in the EU but now I live outside of the EU. Can I still request my rights?

  • The GDPR applies to EU residents and does not extend outside of the EU.

I want a download of my Geno data. How can I get this?

  • You can get a copy of all your account data if you log into your Geno account and use the self- service link in your account profile. 

How do I make data subject access requests to National Geographic Society?

  • Data subject requests can be made to the National Geographic Society at dataprivacy@ngs.org.