In the course of your use of the Services, we obtain the following information about you as described below. We collect this data for the purposes described below under “How We Use Your Information”.
We store this data we collect in a variety of places within our infrastructure, including system log files, back end databases and analytics systems.
HOW WE USE YOUR INFORMATION
We have a legitimate interest in running our organisational activities efficiently and in providing you with Services and useful content, and we use the information we collect, for the following purposes:
We also use the information we receive in aggregated and anonymized formats to produce reports on trends and statistics, such as email open rates, or the number of users that have been exposed to, or clicked on our websites or evaluated or purchased our products and services.
Payment information that you provide to us, including credit card data, will only be used to facilitate payment for our products and services.
We may also use recorded telephone conversations for quality control purposes, to train our employees and for our own protection.
OUTSIDE NEW WINE INTERNATIONAL
We do not share your personal information with anyone outside the New Wine International Family except for the following reasons:
To the extent we are legally permitted to do so, it is our policy to notify you in the event that we are required to provide your personal information to third parties in connection with a court order.
WITHIN NEW WINE INTERNATIONAL
Within New Wine, your information is shared only with those that require it as a necessity to provide a service to you or for the necessary performance of their official duties.
The transmission of information via the internet, email or text message is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted through the Services or over email; any transmission is at your own risk. Once we have received your information, we will take appropriate technical and organizational measures to safeguard your personal information against loss, theft and unauthorized use, access or modification.
When we collect financial account information, such as credit card numbers, we protect its transmission through the use of encryption such as the Transport Layer Security (TLS) protocol.
TRACKING TECHNOLOGIES AND ONLINE ADVERTISING
MARKETING COMMUNICATIONS FROM US
You always have the opportunity to opt out of our marketing communications with you or change your preferences by following a link in the footer of all non-transactional email messages from us or by emailing us at firstname.lastname@example.org. Some communications from us are considered transactional or service communications (for example, important church notifications and financial communications), and some of our services are provided to you upon the condition that you are able to receive these communications from us. You would be required to formally notify us to cancel all transactional or service communications by writing to email@example.com.
INFORMATION FROM THIRD PARTIES
RETENTION OF PERSONAL INFORMATION
We retain your personal information to provide services to you and as otherwise necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We will retain your personal information for no more than six years following the date on which you terminate your use of our Services unless there is a prevailing legitimate interest or we are otherwise required by law or regulation to retain your personal information for longer.
Where the European Union’s General Data Protection Regulation 2016/679, or GDPR, applies, in certain circumstances and subject to data processing agreements, you have rights in relation to the personal information we hold about you. We set out below an outline of those rights and how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights by providing details only known to the account holder. To exercise any of your rights, please make your request in writing to firstname.lastname@example.org. Please note that for each of the rights below we may have valid legal reasons to refuse your request, in such instances we will let you know if that is the case.
You have the right to know whether we process personal information about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with.
You have the right to receive a subset of the personal information you provide us if we process it on the legal bases of our contract with you or with your consent in a structured, commonly used and machine-readable format and a right to request that we transfer such personal information to another party. If you wish for us to transfer the personal information to another party, please ensure you detail that party and note that we can only do so where it is technically feasible. We are not responsible for the security of the personal information or its processing once received by the third party.
You have the right to require us to correct any personal information held about you that is inaccurate and have incomplete data completed. Where you request correction, please explain in detail why you believe the personal information we hold about you to be inaccurate or incomplete so that we can assess whether a correction is required. Please note that while we assess whether the personal information we hold about you is inaccurate or incomplete, you may exercise your right to restrict our processing of the applicable data as described below.
You may request that we erase the personal information we hold about you in the following circumstances:
Please provide as much detail as possible on your reasons for the request to assist us in determining whether you have a valid basis for erasure.
RESTRICTION OF PROCESSING TO STORAGE ONLY
You have a right to require us to stop processing the personal information we hold about you other than for storage purposes in the following circumstances:
You have the right to object to our processing of data about you and we will consider your request. Please provide us with detail as to your reasoning so that we can assess whether there is a compelling overriding interest in us continuing to process such data or we need to process it in relation to legal claims.
You also have the right, at any time, to object to our processing of data about you in order to send you marketing, including where we build profiles for such purposes and we will stop processing the data for that purpose.
WITHDRAWAL OF CONSENT
Where you have provided your consent to us processing your personal data, you can withdraw your consent at any time by writing to us at email@example.com.
THIRD PARTY LINKS AND INFORMATION COLLECTION AND USE BY OUR USERS
Some of our Services provide links to other websites. Because we do not control the information policies or practices of these third party sites, you should review their privacy policies to learn about how they collect and use personal information.
You may also log in to some of our Services using sign-in services such as Facebook Connect or an Open ID provider. These services will authenticate your identity and provide you with the option to share certain personal information with us, such as your name and email address to pre-populate our sign up form. For example, if you take advantage of certain of our social media features, such as the Facebook Like button, and widgets, such as the “Share This” button or interactive mini-programs that run on our site, the applicable social networking sites may collect your IP address, which page you are visiting on our websites, and may set a cookie to enable it to function properly.
We do not knowingly collect personal information from children under 18 without parental consent. If a parent or guardian becomes aware that his or her child has provided us with personal information without such parent or guardian’s consent, he or she should contact us by writing to firstname.lastname@example.org. If we become aware that a child under 18 has provided us with personal information without parental consent, we will delete such information from our files.
In order for us to provide our Services to you, your personal information will be transferred to, and stored at/processed in the United Kingdom.
If your data is transferred outside the European Union, we will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this policy and in conformity with the provisions of the General Data Protection Regulations.
In the event that you wish to make a complaint about how we process your personal information, please contact our Data Protection Officer at email@example.com.
In the unlikely event that you are not satisfied with our response or believe we are not processing your personal data in accordance with the law you can contact the Information Commissioner’s Office (ICO) at:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF