1. Who we are:
Liluye is a 501(c)(3) charitable organization. Our office address is: 4764 East Sunrise Drive, Unit #417, Tucson, AZ 85718
The Liluye website address is: www.liluye.org.
New legislation under the General Data Protection Regulations, (“GDPR”), sets out requirements on us in relation to your personal data, as well as providing you with rights in relation to your personal data.
This Policy also informs you about your rights are in relation to the personal data you give to us.
2. What personal data we collect and why we collect it:
Liluye uses personal data (which includes but is not limited to, name, address, telephone contact number, email address) for the purposes of managing Liluye, its suppliers, its finances, running and marketing events at Liluye, staff employment and its fundraising activities.
The lawful reason for processing data in this way is “contract” for the purposes of managing the hall, its suppliers, its finances, running and marketing events at the hall and staff employment.
The lawful reason for processing data for fundraising activities is “legitimate interest”.
We won’t use your information for any other purposes unless we are required to do so by law.
We do not obtain, use, store or share personal data, that would be Sensitive Personal Data as defined by GDPR.
Our website does not support user comments, (e.g. a blog), that can be made directly by the general public.
No cookies are set for website users, and if any are implemented they will only be used for tracking usage of the website and no personal information will be used. Cookies are only used to track administrators, when they are logged in, and any specific settings they use.
If you provide images for use on the website, you should avoid providing images with embedded meta data (e.g. EXIF GPS, or IPTC caption or keywords) which might provide personal information. Visitors to the website can download and extract any such data from images on the website.
6. Embedded content from other websites:
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
7. Who we share your data with:
We may share your personal information, where this required for Liluye to perform its activities with:
i. our IT service and infrastructure providers that we use as part of our IT storage solutions
ii. any other third-party entities who perform functions on our behalf and who also provide services to us
iii. any other third parties as required by law, such as HMRC or for the purposes of crime (including fraud), to prevent or investigate breaches of, or to enforce, our Terms, to respond to or investigate security vulnerabilities, or to respond to emergencies, and to protect the rights of third parties.
8. How long we retain your data:
Data collected for the purposes of managing Liluye, its suppliers, its finances, staff employment and its fundraising activities, may be retained for up to 7 years for accounts purposes and for longer where required by Liluye’s insurers. If you would like to find out more about how we use your personal data or want to see a copy of information about you that we hold, please contact firstname.lastname@example.org.
9. What rights you have over your data:
The right to be informed:
The right of access:
The right to rectification:
You’re entitled to have your information corrected if it’s inaccurate or incomplete.
The right to erasure:
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
The right to restrict processing:
You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
The right to data portability:
You have rights to obtain and reuse your personal data for your own purposes across different services, e.g., if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
The right to object:
You have the right to object to certain types of processing, including processing for direct marketing.
You should make any requests in respect of your personal data in writing to the Secretary. We are required to respond to such requests within one month of receipt, although this can be extended in some circumstances, and will usually provide the information free of charge. We may, however, charge a reasonable fee to cover our administrative costs where providing information for:
i. baseless or excessive/repeated requests
ii. further copies of the same information.
In some circumstances, we may be entitled to refuse to act on the request.
10. Making a complaint:
If you are unhappy with how we’ve handled your information, or you would like to exercise your rights, contact us at email@example.com.
These Terms and Conditions are effective on and after 03/17/2020.
Approved by the Trustees of the Liluye on 03/17/2020.