Last Revised: October 22, 2018
The Foundation for a Smoke-Free World (the “Foundation”, “we”, “us”, “our”) is committed to fulfilling our responsibilities under the European Union’s General Data Protection Regulation (“GDPR”) in relation to the collection, retention, use, and other processing of personal data that is obtained when EU data subjects visit and interact with our website (the “Site”). This Privacy Notice sets forth how we process EU personal data in our role as a data controller (i.e., when we are responsible for determining the purpose and means of the processing).
The Foundation may collect and process the following information about you:
We may use the personal data we obtain to:
We process your personal data pursuant to the following legal bases:
Note that our Site is dynamic. We may introduce new features, which may involve new or different personal data processing activities. If we intend to process your personal data for a purpose not described above, we will notify you and request your consent to the change as appropriate. We will also modify this Privacy Notice.
We may share your personal data:
We maintain appropriate technical and organizational safeguards designed to help protect personal data from unauthorized disclosure or access and accidental or unlawful destruction, loss, or alteration. Although we use reasonable efforts to safeguard personal data, we cannot guarantee the security of your information obtained through the Site.
We will store your personal data for no longer than is necessary for the performance of our obligations or to achieve the purposes for which the information was collected, or as may be permitted under applicable law. To determine the appropriate retention period, we will consider the amount, nature, and sensitivity of the data; the potential risk of harm from unauthorized use or disclosure of the data; the purposes for which we process the data and whether we can achieve those purposes through other means; and the applicable legal requirements. Unless otherwise required by applicable law, at the end of the retention period we will remove personal data from our systems and records.
If we transfer your personal data out of the European Economic Area (“EEA”) to countries not deemed by the European Commission to provide an adequate level of personal data protection, the transfer will be based on one of the following safeguards recognized by the European Commission as providing adequate protection for personal data, where required by EU data protection legislation:
Please contact us if you want further information on the specific mechanism we have used to transfer your personal data.
The GDPR provides EU data subjects with certain rights regarding their personal data. Subject to certain conditions, you may ask us to take the following actions in relation to your personal data that we hold:
You can submit these requests by email to firstname.lastname@example.org or our postal address provided below. We may request specific information from you to help us confirm your identity prior to processing your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal data or our response to your requests regarding your personal data, you may contact us at email@example.com or lodge a complaint with a supervisory authority.
We may update this Privacy Notice to reflect changes to our information practices. Any changes will be effective immediately upon posting of the revised Privacy Notice. We encourage you to periodically review this page for the latest information on our privacy practices.
Foundation for a Smoke-Free World
ATTN: DATA PROTECTION INQUIRY
575 5th Avenue
14th Floor New York, NY 10017
United States of America