The Marcy Foundation (the “Foundation“) was established by means of a public deed on the 10th of August 2018.
The GDPR defines “Personal Data” as any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. This includes, but is not limited to, name, email address, postal address location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
The Personal Data that the Foundation may collect from you is listed in section 2 below.
The Foundation is committed to protecting and respecting your privacy, and would welcome any feedback you have to: firstname.lastname@example.org
2. WHAT PERSONAL DATA THE FOUNDATION MIGHT COLLECT ON YOU
The Foundation might collect the following Personal Data from you:
i.Your name, age/date of birth and gender;
ii. Your contact details, including: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address;
iii. Details of purchases and/or orders made by you;
iv. Details of events attended by you;
v. Details of donations made by you;
vi. Your communication and marketing preferences;
vii. Your interests, preferences, feedback and survey responses;
viii. Your correspondence and communications with the Foundation;
ix. Other publicly available Personal Data, including any which you have shared via a public platform (such as a Twitter feed, public Facebook page or a company website).
This list is not exhaustive and, in specific instances, the Foundation may need to collect additional data for the purposes set out in this Policy. The Foundation may also collect Personal Data from third parties who have your consent to pass your details to the Foundation, or from publicly available sources.
3. HOW LONG MIGHT THE FOUNDATION HOLD ON TO YOUR PERSONAL DATA
The Foundation will not retain your Personal Data for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of data, however the longest the Foundation will normally hold any Personal Data is 6 years
4. HOW THE FOUNDATION MIGHT COLLECT YOUR PERSONAL DATA
The Foundation may collect your Personal Data in the following
i. In person (eg. at an event)
ii. Via the Foundation's website;
iii. Via e-mail.
5. THE GROUNDS ON WHICH THE FOUNDATION MAY STORE AND USE YOUR PERSONAL DATA
– for example, if you have opted in to receive marketing communications and/or news from the Foundation, the Foundation might store your data and contact you with a roundup of the Foundation’s recent fundraising events.
b. Fulfilment of a Contractual Obligation
– for example, if you have contacted us to make a donation to the Foundation at an event or by e-mail, the Foundation will store and process your data insofar as it is necessary to fulfil such donation.
c. Legitimate Interest
– for example, if you have previously provided the Foundation with your contact details in the course of sale for a ticket to a Foundation event, the Foundation may send you electronic communications relating to similar upcoming event ticket sales. You will always be given the opportunity to opt-out of this form of communication by sending us an e-mail on email@example.com. If relying on legitimate interest as a lawful ground for processing your Personal Data, the Foundation will always take into account your rights and interests prior to sending any such communications.
6. THE WAY(S) IN WHICH THE FOUNDATION MIGHT USE YOUR PERSONAL DATA
The Foundation (and any trusted partners acting on our behalf) might use your Personal Data:
i. to provide information to you;
ii. to make a tailored website available to you;
iii. to verify your identity;
iv. for crime and fraud prevention, detection and related purposes;
v. to contact you electronically about events and/or products which the Foundation thinks may interest you;
vi. for market research purposes – to better understand your needs;
vii. where the Foundation has a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute)
The Foundation might use your Personal Data for electronic marketing purposes (with your consent) and may send you postal mail to update you on the latest events/fundraising opportunities/work of the Foundation. The Foundation aims to update you about items, which are of interest and relevance to you as an individual. You have the right to opt-out of receiving communications at any time, by contacting the Foundation via email on firstname.lastname@example.org.
c. Sharing data with third parties
i. Our service providers and suppliers
In order to make certain services available to you, the Foundation may need to share your Personal Data with some of our service providers/partners. These could include IT, delivery and marketing service providers. The Foundation only allows its service providers/partners to handle your Personal Data when the Foundation has confirmed that they apply appropriate data protection and security controls. The Foundation also imposes contractual obligations on service providers/partners relating to data protection and security, which mean they can only use your Personal Data to provide services to the Foundation and to you, and for no other purposes.
ii. Other third parties
Aside from our service providers/partners, the Foundation will not disclose your Personal Data to any third party, except as set out below. The Foundation will never sell or rent your Personal Data to other organisations for marketing purposes.
We may share your data with:- credit reference agencies where necessary for payment of donations;– governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where the Foundation is required to do so: –– to comply with our legal obligations;
– to exercise our legal rights (for example in court cases);
– for the prevention, detection, investigation of crime or prosecution of offenders; and
– for the protection of any employees and customers.
7. THE MEASURES THE FOUNDATION HAS IN PLACE TO PROTECT YOUR PERSONAL DATA
The Foundation strives to maintain the highest standards of data privacy and security to protect your personal details and other information about you.
The Foundation shall ensure that Personal Data is stored securely using modern software that is kept-up-to-date.
Access to Personal Data shall be limited to personnel who need access and appropriate security should be in place to avoid unauthorised sharing of information.
When Personal Data is deleted this should be done safely such that the data is irrecoverable.
Appropriate back-up and disaster recovery solutions shall be in place.
The Foundation regularly reviews our processes and procedures to protect your information from unauthorised access and use, accidental loss and/or destruction.
8. YOUR RIGHTS
You have the following rights in respect of the Personal Data that the Foundation holds:
a. the right to ask for a copy of Personal Data that the Foundation holds about you (the right of access);
b. the right (in certain circumstances) to request that the Foundation deletes Personal Data held on you; where the Foundation no longer has any legal reason to retain it (the right of erasure or to be forgotten);
c. the right to ask the Foundation to update and correct any out-of-date or incorrect Personal Data that the Foundation holds about you (the right of rectification);
d. the right to opt out of any marketing communications that the Foundation may send you and to object to the Foundation using / holding your Personal Data if the Foundation has no legitimate reasons to do so (the right to object);
e. the right (in certain circumstances) to ask the Foundation to ‘restrict processing of data’; which means that the Foundation would need to secure and retain the data for your benefit but not otherwise use it (the right to restrict processing); and
f. the right (in certain circumstances) to ask the Foundation to supply you with some of the Personal Data that the Foundation holds about you in a structured machine-readable format and/or to provide a copy of the data in such a format to another organisation (the right to data portability).
The Foundation may update this Policy to reflect changes in how it collects, stores and/or uses your Personal Data. The most recent version of the Policy will always be available via the Foundation’s website. Where appropriate, the Foundation will provide you with notice of any significant changes to how it uses your information.
A cookie is a small text file that is stored in your device – eg. your computer or mobile device – when you visit The Marcy Foundation.
We do not collect your IP address but we collect information about your behavior such as the number of users viewing our website. This data does not identify you individually and will not be shared with any third party.
Most browsers will all you to adjust your cookies settings or switch off cookies. There are different ways to do this, depending on the browser you use.
For more information about our cookie usage please contact us on email@example.com.
11. HOW YOU CAN CONTACT THE FOUNDATION
If you have any questions on the contents of this Policy please contact info@themarcyfoundation