Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
GiveCampus is a US based digital fundraising platform built for schools, colleges and universities. It provides embedded donation forms, giving pages and campaign tools with analytics, UTM tracking and tracking pixels. Because donor data is processed in the United States, transfer safeguards and consent for non essential tracking are key compliance points for European institutions.
GiveCampus is a digital fundraising and engagement platform designed for educational institutions such as schools, colleges and universities. It offers embedded donation forms, branded giving pages, peer to peer campaigns and engagement analytics. Institutions add its forms and pages to their websites to collect donations and manage supporter relationships.
To take a gift the platform processes donor names, contact details, gift amounts and giving history, and it passes payment data to third party processors such as Stripe. It sets first party cookies to run the donation form and session, and it commonly uses analytics, UTM parameters and tracking pixels to measure campaign performance, which involve non essential cookies.
When a European institution uses GiveCampus, the GDPR applies and the institution is the controller. Cookies that are strictly necessary to operate the donation form do not need consent under Article 5(3) of the ePrivacy Directive, but tracking pixels, analytics and marketing cookies do. Donor data is sensitive in context, so transparency and security are especially important.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Processing a donation rests on the performance of a contract or a legitimate interest, so it does not need consent. Prior, informed and freely given consent must be obtained before any tracking pixel, analytics or marketing cookie loads, and donors must be able to withdraw it easily. A consent banner should block these non essential tags until the visitor agrees.
GiveCampus is hosted in the United States, so donor data from the EEA is transferred to a third country. This requires a valid transfer mechanism, namely reliance on the EU US Data Privacy Framework where the vendor is certified, or Standard Contractual Clauses backed by a transfer impact assessment. Payment processors and other US subprocessors must be covered by the same safeguards.
Sign a data processing agreement, verify the transfer mechanism for GiveCampus and its payment and analytics subprocessors, inventory and classify cookies and pixels, gate non essential tags behind a consent banner and document the processing and transfers in your records. Provide a clear privacy notice to donors and keep consent logs.
Websites using GiveCampus must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended because the platform processes donor financial and relationship data and transfers it to the United States. Assess the categories of donor data, the transfer mechanism for GiveCampus and its payment processors, the use of tracking pixels for profiling and the security measures protecting fundraising records.
Sample consent text
We use essential cookies to process your donation securely. With your consent we also use analytics and tracking cookies to measure our campaigns. Your data is processed in the United States under appropriate safeguards. You can accept, reject or manage these cookies at any time.
Third-party domains contacted
givecampus.comgo.givecampus.comjs.stripe.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| gc_session | Strictly necessary | Session | Maintains the secure session while a donor completes a gift on the donation form |
| csrf_token | Strictly necessary | Session | Protects the donation and account forms against cross site request forgery |
| _ga | Analytics | Up to 2 years | Measures campaign and giving page performance, set only after consent |
| _fbp | Marketing | Up to 3 months | Tracking pixel used to attribute donations and retarget supporters, set only after consent |
GiveCampus uses cookies for user preferences — inform visitors with a consent banner.
It sets first party strictly necessary cookies to run the donation form and session and to protect forms. For campaign measurement it commonly uses analytics cookies and tracking pixels, which are non essential and should load only after consent.
No consent is needed for the strictly necessary cookies that run the donation form. Consent is required before any analytics cookie or tracking pixel loads.
Processing a donation rests on performance of a contract or legitimate interest, while analytics, tracking pixels and marketing rely on consent under the GDPR and the ePrivacy Directive.
Yes. GiveCampus is US based, so donor data is transferred to the United States, which requires the EU US Data Privacy Framework or Standard Contractual Clauses with a transfer impact assessment, including for payment processors such as Stripe.
A DPIA is recommended because the platform processes donor financial and relationship data and transfers it to the United States, and because tracking pixels may be used for profiling supporters.
Sign a data processing agreement, verify the US transfer mechanism for the platform and its subprocessors, classify cookies and pixels, gate non essential tags behind a consent banner and give donors a clear privacy notice.
Other fundraising and donation platforms include EEA hosted giving tools and self hosted donation forms, which can reduce US transfer exposure for European institutions.
List the GiveCampus cookies and tracking pixels with their purpose and duration, separate necessary from optional, describe the US transfer and any payment processor, and keep the notice aligned with your consent banner.