Privacy Notice
Papier Avion by Airigami (hereafter “PAA”) takes your privacy seriously and manages your data in accordance with the European Union’s General Data Protection Regulation (GDPR).
On this page we use ‘data’ to refer to any personal information we collect about you, such as your name and email address.
Our commitment to you
- We promise to respect any personal data you share with us and will always store this information securely.
- We will only use your personal data to provide the services you have requested and communicate with you in the ways you have agreed to.
- We will never sell or share your personal data to other organisations to use for their own purposes, unless required to do so by law.
- You can change or withdraw your consent for us to hold your personal data at any time. To do so, please use the contact details at the bottom of this page.
What information we collect
Donors
When you donate to us, you are asked to provide your name, postal address, email address, phone number and payment details.
If donating via our website, this data is collected by a third-party company called Paypal, whose systems we use to take donations. If you give them permission to do so, they will share this data (excluding your payment details) with us. Any data you provide is stored on secure servers by Paypal. PAA will only store any donation data shared with us in paper form for the purposes of routine financial record keeping and auditing – the only electronic information retained is in the aggregate from each provider and does not dis-aggregate individuals. For the purposes of GDPR, Paypal are the ‘Data Processors’ and the ‘Data Controllers’.
We will store your data for seven years after the end of the tax year in which your last donation was made, for tax purposes only.
Social media users
When you interact with our content on social media (e.g. liking, sharing, etc.), the social media platforms automatically collect data about these interactions and share them with us. We use this data to understand what information users are interested in and where we can make improvements in what we offer.
If you send us a private or direct message via social media, we will only store the message on that social media platform. We will not share it with any other organisation. For the purposes of GDPR, we are the ‘Data Controller’ and the social media platforms are the ‘Data Processor’.
Subscribers
When you sign-up to receive email updates from us, you provide your name and email address. This data is collected by a third-party company called Google, whose system we use to send emails to our subscribers. We also use this system to track and analyse how people use and interact with our emails. The data you provide is stored on secure servers by Google. For the purposes of GDPR, we are the ‘Data Controller’ and iContact the ‘Data Processor’.
We will store your data for seven years (unless you request otherwise), at which point we will ask you to reconfirm your subscription.
Website users
When you use our website, we may automatically collect anonymous data about you using ‘cookies’. We do this to understand what information users are interested in and where we can make improvements in what we offer. To find out more about our use of cookies, read our cookies notice.
We use a third-party service called Google Analytics to track and analyse how people use and interact with our website. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. For the purposes of GDPR, we are the ‘Data Controller’ and Google Analytics the ‘Data Processor’.
How we protect your data
We’ve implemented physical, technical and organisational measures to protect your data, both on- and off-line, from improper access, use, alteration, destruction and loss.
The data we collect will only be accessible by staff and contractors who have been granted explicit permission to access the information. Online data is password-protected and stored on secure servers, and offline data is stored in secure, locked cabinets in our offices – or, where relevant, in those of our partner organisations or companies.
We keep your information only for as long as is reasonable and necessary for the purposes you have shared it with us – which may be to fulfil statutory obligations. Where we are the Data Controller, above we have detailed how long we store your data for.
Where we use third-party companies to collect, store or process data, we ensure these companies are subject to GDPR (if within the EU) or the EU-US Privacy Shield Framework (if within the U.S.) – which means they are certified to process data received from the EU.
Other than the purposes detailed above, we will only disclose your information if required to do so by law – for example, to comply with applicable laws, regulations and codes of practice, or in response to a valid request from a ‘competent authority’ under GDPR.
Your communications with our teams (including by email, mail or social media) will be stored on our secure servers.
Who we are
PAA is a sole-proprietor non-profit hobbyist organization in the United States.
How to contact us
If you would like to know what information we hold about you, would like to update or remove any information we hold about you, or have any questions or concerns regarding our privacy notice or our processing of your personal information, please contact:
Email: airigamipapieravion (at) gmail (dot) com
We keep our privacy notice under regular review and will place any updates on this webpage. This privacy notice was last updated on 1st July 2019.