how and why we process their personal data and what rights they have in relation to their personal data.
- What is this notice and why should you read it?
- CC SBAMD’s data protection responsibilities
- What types of personal data do we collect and where do we get it from?
- What do we do with your personal data and why?
- Sensitive Information
- With whom do we share your personal data with, and why?
- Where in the world is your personal data transferred to?
- How do we keep your personal data secure?
- How long do we keep your personal data for?
- How do we communicate with you?
- What are your rights in relation to your personal data and how can you exercise them?
- Updates to this notice
- Where can you find out more?
1. What is this notice and why should you read it?
This privacy notice explains how and why the Competence Centre Surface Based Air and Missile Defence (also referred to as “CC SBAMD”, “we”, “our” and “us”) uses personal data about those individuals who receive services from us, provide services to us, visit our website (collectively the “Website”), or otherwise communicate or engage with us (referred to as “you”).
You should read this notice, so that you know what we are doing with your personal data. Please also read any other privacy notices that we give you, that might apply to our use of your personal data in specific circumstances in the future.
2. CC SBAMD‘s data protection responsibilities
“Personal data” is any information that relates to an identifiable natural person. Your name, address and contact details are all examples of your personal data, if they identify you. The term “process” means any activity relating to personal data, including, by way of example, collection, storage, use, consultation and transmission.
The CC SBAMD is a so-called “controller” of your personal data. This means that we make decisions about how and why we process your personal data and, because of this, we are responsible for making sure it is used in accordance with data protection laws.
3. What types of personal data do we collect and where do we get it from?
We collect different types of personal data about you when you visit our website, request or receive something from us or otherwise communicate or engage with us. We collect your personal information from various sources. If any of the personal information you have given to us changes, such as your contact details, please inform us without delay.
4. What do we do with your personal data and why?
We process your personal data for particular purposes in connection with your use of our website, the provision of services from us to you, your communication or other engagement with us and the management and administration of our mission.
We are required by law to always have a so-called “lawful basis” (i.e. a reason or justification) for processing your personal data. This is usually the case if you give us your consent to process your data. We assume your consent, if you provide us your contact information on a business card, by using our contact form or communicating with us via email. Please note that where our processing of your personal data is either necessary for us to take steps, at your request, to potentially provide our service to you, and you choose not to provide the relevant personal data to us, we may not be able to enter into or continue our engagement with you. We may also convert your personal data into statistical or aggregated form to better protect your privacy, or so that you are not identified or identifiable from it. Anonymised data cannot be linked back to you.
5. Sensitive Information
Except in relation to certain payment gateways, we do not process ‘special categories of personal data’ and/or sensitive personal data. This refers to sensitive or special categories of personal data which we are required to process with more care, according to applicable laws.
6. With whom do we share your personal data with, and why?
Sometimes we need to disclose your personal data to other people.
Inside the North Atlantic Treaty Organization (NATO)
Our Sponsoring Nations and we are supporter of NATO, which includes, globally, numerous international headquarters and affiliated defence organisations. Therefore, we may share your personal data with NATO entities to provide our services in accordance with our mission. If we do so, we typically use NATO’s internal and secured computer network which ensures that appropriate security standards are in place and your personal data is protected.
Access to your personal data is strictly limited and granted only on a need to know basis, depending on job functions and roles within our bi-national cooperation.
Outside the North Atlantic Treaty Organization (NATO)
We do not regularly share your personal data with third parties outside the NATO community. If we do so, these third parties will process your personal data on our behalf. We will disclose your personal data to these parties so that they can perform their functions as requested by us. Before we disclose your personal data to these third parties, we will seek to ensure that they have appropriate security standards in place to protect your personal data.
In certain circumstances, we will also disclose your personal data to third parties who will receive it as controllers of your personal data in their own right for the purposes set out above, where the relevant disclosure is in relation to:
- services provided to you or us by a third party acting independently to CC SBAMD but which has a relationship with us, for example certain payment services;
- the disclosure of your personal data in order to comply with a legal obligation.
7. Where in the world is your personal data transferred to?
As supporter of NATO, CC SBAMD may transfer your personal data to recipients that are established in jurisdictions other than your own. Please be aware that the data protection laws in some jurisdictions may not provide the same level of protection to your personal data as is provided to it under the laws in your jurisdiction.
If any disclosures of personal data referred to above require your personal data to be transferred from within to outside the European Union, we will only make that transfer if:
- the transfer is necessary for the conduct of our mission, and
- the organization to which the personal data is to be transferred is part of NATO and its secured computer network and therefore ensures an adequate level of protection for personal data, or
- you explicitly consent to the transfer.
8. How do we keep your personal data secure?
As required by applicable data protection laws we will take appropriate security measures to protect your personal data from unlawful or unauthorized processing and accidental loss, destruction or damage.
9. How long do we keep your personal data for?
We will only retain your personal data for a limited period of time and for no longer than is necessary for the purposes for which we are processing it for. This will depend on a number of factors, including:
- any laws or regulations that we are required to follow;
- whether we are in a legal or other type of dispute with each other or any third party;
- the type of information that we hold about you; and
- whether we are asked by you or a regulatory authority to keep your personal data for a valid reason.
10. How do we communicate with you?
We will use your personal data to communicate with you:
- to administer our relationship with you;
- to respond to any questions that you may have;
- to inform you about our publications; and
- to invite you to take part in our conferences, meetings and working groups.
With your opt-in consent (if required), we will provide you with information about our services and events which may be of interest to you. Such communications will be sent either by email, post or telephone.
If you do not wish to receive such communications, you can refuse to give your consent (where your consent is required) or opt-out at any time by either following the instructions within the communication or by contacting us using the details below.
12. What are your rights in relation to your personal data and how can you exercise them?
Where our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. If you do decide to withdraw your consent we will stop processing your personal data for that purpose, unless there is another lawful basis we can rely on – in which case, we will let you know.
Where our processing of your personal data is based on legitimate interest, you can object to this processing at any time. If you do this, we will need to show either a compelling reason why our processing should continue, which overrides your interests, rights and freedoms or that the processing is necessary for us to establish, exercise or defend a legal claim.
Where we are processing your personal data for direct marketing purposes, you have the right to object to that processing.
You have the right to (subject to applicable laws and certain limitations):
- access your personal data and to be provided with certain information in relation to it, such as the purpose for which it is processed, the persons to whom it is disclosed and the period for which it will be stored;
- require us to correct any inaccuracies in your personal data without undue delay;
- require us to erase your personal data;
- require us to restrict processing of your personal data;
- receive the personal data which you have provided to us, in a machine readable format, where we are processing it on the basis of your consent or because it is necessary for your relationship with us and where the processing is automated; and
- object to a decision that we make which is based solely on automated processing of your personal data (however, we do not currently conduct any such decision making).
If you choose to refuse your consent, please inform us in writing via firstname.lastname@example.org. You also have the right to lodge a complaint with the relevant Supervisory Authority.
13. Updates to this notice
We may update this notice from time to time to reflect changes to the type of personal data that we process and/or the way in which it is processed. In the event of a material change which affects the processing of your personal data, we will notify you. We also encourage you to check this notice on a regular basis.
14. Where can you find out more?
If you want more information about any of the subjects covered in this privacy notice or if you would like to discuss any issues or concerns with us, you can contact us: email@example.com.