We are committed to protecting and appropriately handling private and personal information and take your privacy very seriously. We are publishing this Privacy Statement to let you know how we collect, process, use and share your personal information.
Operation Agape is committed to the highest level of service to partners. This includes protecting your privacy. Any information that you provide to us remains private and is only used for the purposes outlined below. We don’t rent, sell or exchange our contact lists.
We may, from time-to-time, update this Privacy Statement, so we encourage you to review it periodically. We will notify you (by email or prominent notice on this site) about changes in the way we treat your personal information and how those changes are likely to impact you.
Your Personal Information
The definition of “personal information” will differ depending upon applicable law. In Europe it will include all information that directly or indirectly relates to you, and includes “personal data” as defined by the General Data Protection Regulation (GDPR). Where GDPR or other EU privacy laws apply to you, this Privacy Statement details how you can exercise your rights.
The information collected enables Operation Agape to provide and improve its services to you such as processing donations, providing receipts, sending information about Operation Agape and providing new opportunities for you to assist the ministry of Operation Agape.
The personal information we typically ask you for is:
- Contact details (name, address, e-mail, phone numbers)
We also maintain details of the Operation Agape services and facilities that you might typically use such as the projects you donate to and communications we send to you such as newsletters and appeals.
How information is collected
Operation Agape collects personal information in a number of ways, including:
- Directly from you, when you provide information by phone, SMS or in application forms.
- From our own records of how you use our services and facilities.
- From your use of our Internet site.
How we use the information
We may use your personal information when it is needed to provide you with services, or to process donations or to comply with our legal obligations.
We set out below a table where we describe each of the ways in which we use your Personal Information, the types of Personal Information that we use and the legal basis that applies to that use. Where the legal basis is “legitimate interest” we also set out some further details.
The legal basis and details of the legitimate interests detailed in the table below only apply where we are subject to the GDPR or other EU privacy laws.
|How we use your Personal Information||The types of Personal Information involved||Legal Basis||Legitimate Interest|
|For electronic marketing communication||Identity data; contact details (email, sms etc); marketing/communication data||Consent or Legitimate Interest where it follows something you have bought, given or attended||When you engage with us (for example, financially), the law permits our Organization to send you relevant email marketing|
|For physical communication and non-marketing electronic communication||Identity data; contact details; marketing/communication data||Legitimate Interests||To keep you informed of our ministry; To send you ministry information and resources which we believe you will be interested in|
|For contact management||Identity data; contact details; marketing/communication data; requests and preferences; demographics||Legitimate Interests||To manage participation in our ministry and contact management across the ministry|
|To process donations||Identity data; Financial data; financial transaction data; contact details; and tax status||Contract and Legitimate interests||To securely receive your donation toward our charitable aims|
|For statutory reporting||Identity data; contact details; tax status||Legal Obligations and Legitimate Interests||We may have obligations to report to the authorities in other countries|
How/when we use the information
Generally, we will not disclose or share your personal information (including your email address) with anyone outside our organization without your permission. However we may need to use or share your information with our partners and agents who provide goods and services to you on our behalf. Your information may be disclosed:
to other parts of our Organization;
to public or regulatory authorities;
to third party service providers, including:
- cloud service providers for the hosting of apps and sites;
- direct and email marketing service providers (e.g. Constant Contact, Mailchimp); and
- companies that assist us in processing your donations.
We take steps to safeguard your information and we have contractual provisions requiring all third party service providers to respect the security of your personal data and to treat it in accordance with our data protection policies and all applicable laws. We will not allow third party service providers to use your personal information for their own purposes and they will only be allowed to process your personal information in accordance with our instructions.
The following rights under the GDPR are available to you if you are located in the EEA. If you wish to exercise any of these rights, please email firstname.lastname@example.org. We will respond to your request within 30 days of accepting it. Before accepting your request we may need to ask for some identity documentation from you, to make sure we don’t inadvertently provide your personal information to someone else.
If you are not in the EU, you can still apply for one of these rights, and we will comply where the request is reasonable in our discretion.
a. Editing and updating personal information.
If you find that your personal information needs to be edited or updated, you can email email@example.com. Please make sure to provide us with all the information we need to be able to address your request, including both the old and new information.
b. Accessing personal information.
You can request details of your personal information we hold. We will confirm whether we are processing your personal information and provide additional details including what kind of information we have about you, where we collected it, how we use it (including the legal basis for our processing), how long we expect to keep it, details of any automated decision making or profiling and the safeguards regarding data transfers to non-EEA countries, subject to the limitations set out in applicable laws and regulations.
If you ask us, we will provide you with a copy of your personal information free of charge. We may charge you a fee to cover our administrative costs if you request multiple copies of the same information or if the requests are manifestly unfounded or excessive.
c. Deletion of personal information.
At your request, we will delete your personal information if:
- it’s no longer necessary to retain your personal information;
- you withdraw the consent which formed the basis of your personal information processing;
- you have successfully objected to the processing of your personal information (see below);
- your personal information was processed unlawfully; or
- we are required to delete your personal information to comply with our legal obligations.
We will review requests on a case by case basis and we might not be able to comply with your request if we need to process your personal information:
- for exercising the right of freedom of expression and information;
- to comply with our legal obligations;
- to establish, exercise or defend a legal claim; or
- to perform a task in the public interest.
If this is the case, we will notify you of the reasons why your request was rejected.
d. Restriction of processing of personal information.
You have the right to request us to limit the processing of your personal information if:
- you dispute the accuracy of your personal information;
- your personal information was processed unlawfully and you request a limitation on processing, rather than a deletion of your personal information;
- we no longer need to process your personal information, but you need your personal information in connection with a legal claim; or
- you object to the processing of your personal information based on our legitimate interests pending verification as to whether we have an overriding legitimate ground for such processing.
To the extent needed, we may still keep some of your data to ensure we comply with your request to limit processing, or for other legal purposes.
e. Objecting to certain types of processing including automated decision making.
Where we process your personal information based upon our legitimate interests, you have the right to object to this processing on grounds relating to your particular situation if you feel it impacts on your fundamental rights and freedoms.
Where we process your personal information based upon our legitimate interests and where decisions are made by automated processing which has a legal or other significant effect on you, you may also object to such automated decision making.
f. Portability of personal information.
You can request us to send you your personal information in a structured, commonly used, machine-readable format so that it can easily be transferred and used by a third party if:
- you provided us with the personal information;
- the processing of your personal information is based on your consent or required for the performance of a contract; or
- the processing is carried out by automated means.
g. Withdrawing consent.
We primarily rely on legitimate business interests to process your data, but to the extent we use consent to process your data, you have the right to withdraw any consent you may have given us at any time. We will comply with your request promptly.
If you withdraw your consent, we might not be able to provide some of our products and services to you. At any point, you have the right to object to processing of your personal information for direct marketing purposes and we will promptly comply with your request.
h. Filing a complaint with a data protection authority.
We will try to resolve any problems that you have but you are always able to contact your local data protection authority for assistance or to make a complaint.
How long we keep your personal information
We keep your information as long as it is needed to achieve our purposes listed above, as well as for the amount of time necessary to meet any legal, tax, or reporting requirements.
We do not keep your personal information for longer than necessary and up to 10 years after your last interaction with us (e.g. making a donation). We may keep your data for longer than 10 years for legal or technical reasons. We may also keep it for statistical purposes. However, if we do, we will ensure that your privacy continues to be protected and only use it for these purposes.
Accuracy of information
Operation Agape takes all reasonable steps to ensure that the personal information we hold is accurate, complete and up-to-date. However the accuracy of that information depends to a large extent on the information you provide. That is why we recommend that you:
- Let us know if there are any errors in your personal information; and
- Keep us up to date with changes to personal information such as your name or address.
If you have any questions about this policy or the way we use your personal information, you may contact:
If at any time you do not wish to receive any communications or marketing materials, please let us know so that your preferences can be registered.