Privacy Policy for mandela-tribute.com
1. Introduction
At mandela-tribute.com (“the Website”, “we”, “our”, or “us”), we are committed to respecting your privacy and protecting your personal data. We understand the importance of safeguarding the information you entrust to us, and we uphold the rights granted to you under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, store, and share your personal data, and the rights and choices available to you.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected through mandela-tribute.com and related services we provide. For the purposes of GDPR and CCPA, mandela-tribute.com is the data controller—the entity responsible for determining the purposes and means of the processing of your personal data. If you have any inquiries regarding the handling of your data, please contact us at [email protected].
3. Categories of Data Processed
We may collect and process the following categories of personal data:
a) Usage Data
Includes information about your interaction with the Website, such as IP addresses, browser types, referring/exit pages, session duration, clickstream data, and other diagnostic data.
b) Account Data
Includes personal identifiers such as your name, postal address, email address, and telephone number, as provided when registering an account or completing a form on the Website.
c) Profile Data
Includes details relating to your interests, preferences, transaction history, and behavioral patterns on mandela-tribute.com.
d) Communication Data
Includes communications with us, such as service inquiries, support tickets, and interaction history.
e) Technical Data
Includes device data (e.g., mobile IDs, device type), configuration settings, browser plug-in types, time zone settings, and network information.
f) Transaction Data
Includes information related to purchases, donations, billing addresses, payment method details (processed securely with third-party processors), and delivery information.
g) Preference Data
Includes records of your marketing and communication preferences, and your expressed interest in features, content, or products on mandela-tribute.com.
4. Legal Bases for Processing
We process your personal data only where and to the extent permitted by law. Our lawful bases for processing include:
– Consent: Where you have provided clear, explicit consent (e.g., for receiving marketing emails).
– Contractual Necessity: Where processing is necessary for the performance of a contract with you.
– Legitimate Interest: Where we have a legitimate business interest that does not override your data protection rights (e.g., fraud prevention, improving our services).
– Legal Obligation: Where processing is required to comply with applicable legal obligations.
For data collected from California residents, we also limit sharing of personal information as required under CCPA and honor Do Not Sell or Share My Personal Information requests.
5. Your Rights
Under GDPR, CCPA, and other applicable data privacy laws, you have the following rights:
– The right to access your personal data.
– The right to request rectification of inaccurate or incomplete data.
– The right to request erasure of your data (“right to be forgotten”), subject to exceptions.
– The right to restrict our processing of your data.
– The right to data portability, to receive your data in a structured, commonly used format.
– The right to object to processing based on our legitimate interests or for direct marketing.
– The right to withdraw consent at any time when processing is based on consent.
– The right to lodge a complaint with a supervisory authority.
– Under CCPA, California residents also have the rights to know, delete, and opt-out of the sale or sharing of their personal information.
To exercise any of these rights, please contact [email protected].
6. Security Measures
mandela-tribute.com implements appropriate technical and organizational measures to secure your personal data:
– Data in transit and at rest is safeguarded using industry-standard encryption protocols.
– Access to your personal data is strictly controlled, limited to authorized personnel, and protected by authentication measures.
– Regular audits, vulnerability scans, and penetration testing are used to identify and remediate risks.
– Data is routinely backed up, with recovery procedures to ensure continuity and resilience.
– Staff receive ongoing privacy and security training to promote responsible data handling practices.
7. International Transfers
As part of our operations, your personal data may be transferred to and processed in countries outside of your jurisdiction, including those with data protection laws that may differ from those in your country. Where such transfers occur, we use recognized safeguards in accordance with applicable law—including the European Commission’s Standard Contractual Clauses and equivalent mechanisms under other frameworks—to ensure your data receives an adequate level of protection.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law, as outlined below:
– Usage Data: 12 months from collection.
– Account Data: Retained during the period your account remains active, and for up to 6 years thereafter.
– Profile Data: 2 years after your last activity, unless consent is renewed.
– Communication Data: 3 years from last interaction or longer if necessary for dispute resolution.
– Technical Data: Up to 12 months for diagnostic and performance purposes.
– Transaction Data: 7 years, in accordance with financial record-keeping requirements.
– Preference Data: Retained until consent is revoked or for 2 years, whichever comes first.
9. Cookie Policy
We use cookies and similar tracking technologies on mandela-tribute.com to provide a secure, efficient, and personalized experience. These include:
– Essential Cookies: Necessary for core website functionalities such as navigation, login, and access to secure areas.
– Functional Cookies: Remember choices you make to offer enhanced features (e.g., language preferences).
– Analytics Cookies: Collect aggregated information about site usage and user behavior to inform improvements.
– Performance Cookies: Measure page load times, error messages, and similar performance metrics to optimize the Website.
Cookies do not typically identify you as an individual, but they may be linked to other information we collect.
10. Cookie Management and Compliance with GDPR & CCPA
Upon visiting mandela-tribute.com, you will be presented with a cookie banner requesting your consent for non-essential cookies. You have full control over your cookie preferences, which can be modified at any time via your browser settings or by revisiting the banner.
In compliance with GDPR, we only deploy optional cookies upon your explicit opt-in consent. For California residents, we honor global privacy control signals to opt out of the sale or sharing of data, and we provide mechanisms to do so directly from the Website.
11. Special Protections for Children Under 13
mandela-tribute.com is not directed to children under the age of 13, and we do not knowingly collect personal data from individuals in this age group. Should we become aware that such data has been inadvertently collected, it will be promptly deleted. Parents or legal guardians who believe we may have collected information from a child under 13 are encouraged to contact us at [email protected].
12. Policy Updates and User Notifications
We may revise this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Substantive changes will be communicated through appropriate channels, including notices posted on mandela-tribute.com or via email, where required. You are encouraged to review this policy periodically to stay informed of how we protect your data.
13. Contact
If you have any questions, concerns, or requests relating to this Privacy Policy or our privacy practices, please contact us at:
Email: [email protected]
We are committed to complying with all applicable data protection laws and providing individuals with control over their personal information. If you believe your rights under GDPR, CCPA, or similar laws have been violated, we encourage you to reach out using the contact details above.