GiveCampus
GiveCampus is a US based digital fundraising platform built for schools, colleges and universities. It provides embedded donation forms, giving pages and campaign tools with analytics, UTM tracking and tracking pixels. Because donor data is processed in the United States, transfer safeguards and consent for non essential tracking are key compliance points for European institutions.
What does GiveCampus do?
What GiveCampus is
GiveCampus is a digital fundraising and engagement platform designed for educational institutions such as schools, colleges and universities. It offers embedded donation forms, branded giving pages, peer to peer campaigns and engagement analytics. Institutions add its forms and pages to their websites to collect donations and manage supporter relationships.
Data and cookies it processes
To take a gift the platform processes donor names, contact details, gift amounts and giving history, and it passes payment data to third party processors such as Stripe. It sets first party cookies to run the donation form and session, and it commonly uses analytics, UTM parameters and tracking pixels to measure campaign performance, which involve non essential cookies.
GDPR and ePrivacy implications
When a European institution uses GiveCampus, the GDPR applies and the institution is the controller. Cookies that are strictly necessary to operate the donation form do not need consent under Article 5(3) of the ePrivacy Directive, but tracking pixels, analytics and marketing cookies do. Donor data is sensitive in context, so transparency and security are especially important.
Consent requirements
Processing a donation rests on the performance of a contract or a legitimate interest, so it does not need consent. Prior, informed and freely given consent must be obtained before any tracking pixel, analytics or marketing cookie loads, and donors must be able to withdraw it easily. A consent banner should block these non essential tags until the visitor agrees.
Data transfers to the United States
GiveCampus is hosted in the United States, so donor data from the EEA is transferred to a third country. This requires a valid transfer mechanism, namely reliance on the EU US Data Privacy Framework where the vendor is certified, or Standard Contractual Clauses backed by a transfer impact assessment. Payment processors and other US subprocessors must be covered by the same safeguards.
Practical compliance steps
Sign a data processing agreement, verify the transfer mechanism for GiveCampus and its payment and analytics subprocessors, inventory and classify cookies and pixels, gate non essential tags behind a consent banner and document the processing and transfers in your records. Provide a clear privacy notice to donors and keep consent logs.
GiveCampus and the GDPR
GiveCampus is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Contract or legitimate interest for processing donations (Article 6(1)(b) and 6(1)(f) GDPR); consent for analytics, tracking pixels and marketing cookies (Article 6(1)(a) GDPR and Article 5(3) ePrivacy Directive)
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, PCI DSS
Impact assessment (DPIA)
A DPIA is recommended because the platform processes donor financial and relationship data and transfers it to the United States. Assess the categories of donor data, the transfer mechanism for GiveCampus and its payment processors, the use of tracking pixels for profiling and the security measures protecting fundraising records.
Sample text for your banner
We use essential cookies to process your donation securely. With your consent we also use analytics and tracking cookies to measure our campaigns. Your data is processed in the United States under appropriate safeguards. You can accept, reject or manage these cookies at any time.
What GiveCampus sets and contacts
- Tracking method
- Embedded donation forms and giving pages with first party session cookies, UTM tracking, tracking pixels and analytics; payments via third party processors
- Server location
- United States
- Data transferred outside the EU
- GiveCampus is a US based fundraising platform, so donor and supporter personal data is transferred to and processed in the United States. Transfers from the EEA require a valid mechanism, namely the EU US Data Privacy Framework where the vendor is certified, or Standard Contractual Clauses together with a transfer impact assessment. Payment processing is handled by third parties such as Stripe.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| gc_session | Strictly necessary | Session | Maintains the secure session while a donor completes a gift on the donation form |
| csrf_token | Strictly necessary | Session | Protects the donation and account forms against cross site request forgery |
| _ga | Analytics | Up to 2 years | Measures campaign and giving page performance, set only after consent |
| _fbp | Marketing | Up to 3 months | Tracking pixel used to attribute donations and retarget supporters, set only after consent |
Third-party domains contacted (3)
givecampus.comgo.givecampus.comjs.stripe.com
Frequently asked questions about GiveCampus
Can't find your question? Write to us, we answer fast.
What cookies does GiveCampus set?
It sets first party strictly necessary cookies to run the donation form and session and to protect forms. For campaign measurement it commonly uses analytics cookies and tracking pixels, which are non essential and should load only after consent.
Is consent required to use GiveCampus?
No consent is needed for the strictly necessary cookies that run the donation form. Consent is required before any analytics cookie or tracking pixel loads.
What is the legal basis for the processing?
Processing a donation rests on performance of a contract or legitimate interest, while analytics, tracking pixels and marketing rely on consent under the GDPR and the ePrivacy Directive.
Does it transfer data to the United States?
Yes. GiveCampus is US based, so donor data is transferred to the United States, which requires the EU US Data Privacy Framework or Standard Contractual Clauses with a transfer impact assessment, including for payment processors such as Stripe.
Is a DPIA needed?
A DPIA is recommended because the platform processes donor financial and relationship data and transfers it to the United States, and because tracking pixels may be used for profiling supporters.
How do I implement it compliantly?
Sign a data processing agreement, verify the US transfer mechanism for the platform and its subprocessors, classify cookies and pixels, gate non essential tags behind a consent banner and give donors a clear privacy notice.
What are the alternatives?
Other fundraising and donation platforms include EEA hosted giving tools and self hosted donation forms, which can reduce US transfer exposure for European institutions.
How do I update my cookie policy?
List the GiveCampus cookies and tracking pixels with their purpose and duration, separate necessary from optional, describe the US transfer and any payment processor, and keep the notice aligned with your consent banner.
Feefo
Feefo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Feefo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Feefo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Conjured
Conjured is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Conjured integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Conjured helps organizations maintain robust websites that meet user expectations and technical requirements.
Shopper Approved
ShopperApproved is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ShopperApproved supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ShopperApproved ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Saleor
Saleor is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Saleor supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Saleor ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Webflow Ecommerce
Webflow Ecommerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Webflow Ecommerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.
Eatself
Eatself is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Eatself enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Eatself empowers marketing teams to achieve measurable growth.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.