Palestine Aid Privacy Notice

Your rights
Under the General Data Protection Regulations (GDPR) individuals have the following specific rights regarding their personal data.
The right to be informed: Individuals have the right to be informed about the collection and use of their personal data.
The right of access: Individuals have the right to access their personal data.
The right to rectification: Individuals have the right to have inaccurate personal data rectified, or completed if it is incomplete.

The right to erasure: Individuals to have personal data erased, but this is not absolute and only applies if not required for legal or similar purposes.

The right to restrict processing: Individuals have the right to request the restriction or suppression of their personal data. This is not an absolute right and only applies in certain circumstances. When the process is restricted, we will place your data in a suppression list to ensure it is no longer used.

The right to object: Individuals have an absolute right to stop their data being processed in certain circumstances, such as for direct marketing.

What personal data we collect
We may collect personal data from those who visit our website, including members of the public. Some areas of the website offer you marketing communications, publications and information about our charity, and enable you to contact us with enquiries and comments. We may collect and process personal data about you such as:
• your name, address, email address and other details such as your residential address
• where you subscribe, your email alert preferences; and
• records of your correspondence with us if you have contacted us.

When you use the website, we use cookies and other similar technologies to collect certain technical information sent by your browser to our website (stored as log files). This includes information, such as your IP address, browser type, operating system, language, time zone setting, access times and any referring website addresses.
When you contact us, the nature of the personal data will vary and may include information such as names and contact details. The personal data collected may also include special category data, such as racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic data, health data or data concerning a natural person’s sexual orientation.
Some of the personal data processed for the purposes set out in this notice may be generated by Palestine Aid and we may work with external advisors, technical experts and regulators or other authorities to help us. In some cases, we may receive information about you from other third party sources or members of the public.

How we use personal data we collect and the legal bases we rely on
In the case of processing relating to the website, depending on the situation, we may use personal data collected from you through the site in the following ways:
• to ensure that the website is presented to you in an effective manner;
• to provide you with information that you have requested from us; and
• where you have registered to do so, to send you electronic marketing, Palestine Aid updates and other materials relating to our services.
Where you chose to sign up to our email or SMS alerts (for example, SMS marketing and e-mail marketing) we process your personal data on the basis that you have consented to receive these updates. You can withdraw your consent at any time by freephone 0800 066 3315 or by writing to our registered address 19 Estoril Park Belfast BT14 7NG. If you unsubscribe from all communications, we may still retain your email address so we know not to contact you.
Sometimes, we process your personal data because it is in our legitimate interests to maintain and promote our services and properly administer our charity. For example, if you contact us or submit a query (including to comment on a LIVE telefon or other services or where we are conducting a review of our operations), we will rely on the lawful basis of legitimate interests for such processing.
We may process your personal data in connection with our legal rights and obligations for the purposes of legal claims and risk management. This may include taking steps to enforce or defend any legal claims made by, against or otherwise involving you. However, it also includes complying with lawful requests by public authorities (including without limitation to meet national security or law enforcement requirements), discovery requests, or where otherwise required or permitted by applicable laws, court orders, regulations, or regulatory authorities (including without limitation data protection, tax and employment), and such requests may not be limited to the UK. This may also include investigations into security or compliance concerns or in connection with the administration and management of our insurance policies, insurance claims and related risk management.
We carry out these processing activities in order to defend against legal claims and comply with legal requirements and obligations that we are subject to. This processing is necessary for the compliance with legal obligations to which Palestine Aid is subject. Palestine Aid considers that it has a legitimate interest in ensuring that it and its subsidiaries companies comply with all legal requirements placed on it. In addition, Palestine Aid considers that it has a legitimate interest in protecting its organisation from breaches of legal obligations owed to it and to defend itself from litigation and/or regulatory enforcement action and/or other proceedings taken against it. This is needed to ensure that the Charity’s legal interests and rights are managed appropriately.
If special category data is processed for any of the reasons set out above, we will ensure that an appropriate condition as required by law for such processing is satisfied such as, depending on the circumstances, in respect of: employment; the establishment or defence of legal claims; or preventing or detecting unlawful acts (in the substantial public interest).

Sharing your personal data
We may share your personal data internally, this would usually include Compliance, Legal, Cybersecurity, Group Security and management teams on a need to know basis.
We may share your personal data with third parties, including:
• government and regulatory authorities, courts, tribunals and other public authorities for example to respond to a legal request or comply with a legal obligation;
• suppliers of IT services (such as those needed to operate this website) and third parties engaged by Palestine Aid for the purpose of providing marketing communications or services requested by you;
• our insurance companies and brokers;
• our external professional advisors, legal teams and auditors; and
• in the event that we sell, buy or merge any charitable assets, including to the prospective seller or buyer of such charitable assets and their respective professional advisers.

Storage and transfers
Your personal data is kept for as long as it is necessary for the purposes for which it was collected. Therefore, after this period data is destroyed, erased or anonymised. In order to provide our services and the website, any personal data that we obtain may be transferred to and stored by a third party at a locality inside or outside the UK or the European Economic Area (EEA), including in a country where the law provides less protection for personal data. If we transfer personal data to a third party outside of the UK or EEA, we will, as required by applicable law, ensure that your privacy rights are protected by appropriate safeguards to ensure that your data is treated securely and in accordance with this privacy policy. In particular, appropriate data protection may be provided by an agreement entered into by us containing the model clauses which permit such transfer. You can find a link to the model clauses at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

Please contact us if you would like more information about the safeguards we use to protect your personal data when we transfer it outside of the UK or EEA.
Your rights
Applicable data privacy laws may give rights to you in respect of personal data that organisations hold about you, for example to:
• request a copy of the personal data that we hold about you;
• object to the processing of your personal data;
• request that we rectify, delete, or limit the processing of your personal data; and
• not be subject to a decision based solely on automated means, where these decisions have a legal or similarly significant impact on you.

To make any requests regarding your personal data, or if you have any questions or concerns regarding your personal data, please submit your written request to us at 19 Estoril Park Belfast BT14 7NG. You may also have the right to object to your personal data being used for certain purposes, including to send you marketing. We will comply with any requests to exercise your rights in accordance with applicable law. Please be aware, however, that there are a number of limitations to these rights, and there may be circumstances where we are not able to comply with your request. You are also entitled to raise your concerns with your local supervisory authority for data protection.

Contact us
If you have a concern or complaint about how Palestine Aid has used your personal data, as a first step, you should raise this with Palestine, by freephone 0800 066 3315 or by writing to the Data Protection Officer at our registered address: Palestine Aid, 19 Estoril Park, Belfast, BT14 7NG.

Changes to this Notice
We reserve the right to modify or amend this Notice at any time and will always post the revised Notice on our website.