Privacy Disclosures to Residents of the European Economic Area
The Disclosures apply only to our processing of personal data within the scope of the General Data Protection Regulation (“GDPR”) from one or more of the European Union Member States plus Iceland, Lichtenstein and Norway (together known as the “European Economic Area” or “EEA”).
EU RESIDENT RIGHTS UNDER THE GDPR
The GDPR went into effect on May 25, 2018. As a resident of the EU or EEA, you have certain rights with respect to the processing of your personal data, including: Access. You have the right to know if we are processing personal data about you and, if so, to access and obtain a copy of personal data about you, as well as information relating to the processing of that data.
- Correction. You have the right to have us promptly correct or update any personal data about you that is inaccurate or incomplete.
- Erasure. You have the right to request deletion or erasure of your personal data in a number of circumstances as required by law, including when we no longer need the personal data for the purposes for which it was collected, you have withdrawn consent or, when we are relying on legitimate interests as a legal basis, and your rights override our legitimate interests.
- Portability. You have the right to obtain a copy of the personal data we hold about you in a structured machine-readable format and to have it transmitted to another controller. This right only occurs where we are relying on your consent or performance of a contract as our legal basis and the processing is carried out automatically.
- Restriction of Processing. You have the right to restrict or limit the ways in which we process your personal data when you contest the accuracy of the personal data, when your data has been obtained by us unlawfully, when you have objected to our processing of the data and we are considering whether to cease processing, or when we no longer need to process the personal data.
- Withdrawal of Consent. When we rely on consent as the basis for processing personal data, you have the right to withdraw your consent.
- Objection. You have the right to object to our processing of your personal data when we are relying on legitimate interests as our legal basis and your rights override our legitimate interests in processing your personal data. You also have the right to object to our processing of your personal data for direct marketing purposes.
- Complaint. You have the right to make a complaint about our personal data handling practices to your local Supervisory Authority.
For inactive sponsors and donors, we retain your personal data for up to an additional year from your last contact so we can continue to inform you about the results of your contributions and additional opportunities with us, but you can opt out of those materials by following the instructions found in those communications.
CROSS BORDER TRANSFER
Any information that you provide to us may be stored or processed in the United States or transferred to and from the United States as set forth in our Privacy Notice.
We do not transfer your personal data that we store in the United States to other countries, except in direct communications with you, such as emails.
We use reasonable organizational, technical and administrative measures to protect personal data within our firm. Unfortunately, no data system can be guaranteed to be secure at all times. If you have reason to believe that your interaction with us is no longer secure, please immediately contact us.
To assert one of your legal rights described in these Disclosures, or if you have questions about these Disclosures or our data handling practices, please email us at [email protected], call Sponsor Services at 800.875.6564 or write to us at Unbound, 1 Elmwood Ave., Kansas City, KS 66103.