Under the General Data Protection Regulation (GDPR), individuals have a right to be informed about how an organisation uses any personal data held about them. This privacy notice explains how we collect, store and use personal data about individuals.
We, [henceforth, Foundation To Fly] are the data controllers for the purposes of data protection law.
The personal data held
Personal data that Foundation To Fly may collect, use, store and share (when appropriate) about you includes, but is not restricted to a name, an ID number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, political, cultural or social identity.
Foundation To Fly may hold data about you that has been received from other organisations.
Why your data is used
Your data may be used for several reasons, including to:
- Process payments
- Contact you
- Provide processors with necessary information to complete tasks
- Assess the quality of services
- Comply with any legal and statutory obligations
Use of your personal data for marketing purposes
Where you have given consent to do so, Foundation To Fly may send you marketing information by email to inform you of possible services that may help in the future. You can withdraw consent at any time, because all email correspondence will include an unsubscribe link. Your details will not be passed to any other organisations for marketing.
Legal basis for using this data
Foundation To Fly only collects and uses your personal data when the law allows. All processing will occur under one or more of the six lawful reasons for processing as defined in Article 6(1) of the GDPR.
If you have provided consent to use your data, you may withdraw this consent at any time. This will made clear when your consent is requested; a full explanation on how you go about withdrawing consent will be included at this time.
Collecting this information
Whenever Foundation To Fly seeks to collect information from you, it will be made clear whether you must provide this information (and if so, what the possible consequences are of not complying), or whether you have a choice.
How we store this data
Personal information about you will be kept when you have made an inquiry about becoming a customer, for a period of 60 days from last communication, unless you become a customer. If you become a customer, information will be kept for 60 days after work completion, unless it is necessary by law to retain data. Where you have opted to receive marketing information, you details will be kept on file until you unsubscribe. No more information than is necessary to complete tasks will be retained.
How to make a request about your data
You have rights to access the data Foundation To Fly holds about you. In addition to requesting a copy of what personal data held about you, you also have the right to know:
- the purposes of your processing;
- the categories of personal data concerned;
- the recipients or categories of recipient you disclose the personal data to;
- your retention period for storing the personal data or, where this is not possible, your criteria for determining how long you will store it;
- the existence of their right to request rectification, erasure or restriction or to object to such processing;
- the right to lodge a complaint with the ICO or another supervisory authority;
- information about the source of the data, where it was not obtained directly from the individual;
- the existence of automated decision-making (including profiling); and
- the safeguards you provide if you transfer personal data to a third country or international organisation.
If you wish to exercise any of these rights, please email email@example.com with details of your request, which will be dealt with as quickly as is possible.
Foundation To Fly do not share information about you with any third party without consent unless legally required, or it is a processor that underpins services (for example, cloud services or domain hosts). Only those processors who have as strong a pledge to GDPR as Foundation To Fly unnecessarily. Details of data processors can be supplied by emailing firstname.lastname@example.org if required.
Transferring data internationally
Where it is necessary to transfer personal data to a country or territory outside the European Economic Area (for example, where cloud services are based in the US), only processors from countries with strong data protection laws will be used, as per the GDPR.
If you have any issues regarding personal data or data protection, please contact:
Data Protection Officers: Janelle Johnson Draper