This privacy notice explains how and why the Joint Air Power Competence Centre (also referred to as “JAPCC”, “we”, “our” and “us”) uses personal data about those individuals who receive services from us, provide services to us, visit our websites (collectively the “Website”), or otherwise communicate or engage with us (referred to as “you”).
You should read this notice, so that you know what we are doing with your personal data. Please also read any other privacy notices that we give you, that might apply to our use of your personal data in specific circumstances in the future.
“Personal data” is any information that relates to an identifiable natural person. Your name, address and contact details are all examples of your personal data, if they identify you.
The term “process” means any activity relating to personal data, including, by way of example, collection, storage, use, consultation and transmission.
The JAPCC is a so-called “controller” of your personal data. This means that we make decisions about how and why we process your personal data and, because of this, we are responsible for making sure it is used in accordance with data protection laws.
We collect different types of personal data about you when you visit our Website, request or receive something from us or otherwise communicate or engage with us. We collect your personal information from various sources. The different types of personal information that we collect and the sources we collect it from, can be reviewed in more detail in the Annex.
If any of the personal information you have given to us changes, such as your contact details, please inform us without delay.
We process your personal data for particular purposes in connection with your use of our Website, the provision of services from us to you, your communication or other engagement with us and the management and administration of our mission.
We are required by law to always have a so-called “lawful basis” (i.e. a reason or justification) for processing your personal data. This is usually the case if you give us your consent to process your data. We assume your consent, if you provide us your contact information on a business card, by using our contact form or communicating with us via email.
Please note that where our processing of your personal data is either necessary for us to take steps, at your request, to potentially provide our service to you, and you choose not to provide the relevant personal data to us, we may not be able to enter into or continue our engagement with you.
We may also convert your personal data into statistical or aggregated form to better protect your privacy, or so that you are not identified or identifiable from it. Anonymised data cannot be linked back to you. We may use it to conduct research and analysis, including to produce statistical research and reports. For example, to help us understand and improve the use of our Website.
Except in relation to certain payment gateways , we do not process ‘special categories of personal data’ and/or sensitive personal data (together, “Sensitive Information” – as set out in the Annex). This refers to sensitive or special categories of personal data which we are required to process with more care, according to applicable laws.
Sometimes we need to disclose your personal data to other people.
Inside the North Atlantic Treaty Organization (NATO)
We are part of NATO, which includes, globally, numerous international headquarters and affiliated defence organisations. Therefore, we may share your personal data with other NATO entities to provide our services in accordance with our mission . If we do so, we typically use NATO’s internal and secured computer network which ensures that appropriate security standards are in place and your personal data is protected.
Access to your personal data is strictly limited and granted only on a need to know basis, depending on job functions and roles within our organisation.
Outside the North Atlantic Treaty Organization (NATO)
With the few exceptions listed in the Annex , we do not share your personal data with third parties outside the NATO organisation. If we do so, these third parties will process your personal data on our behalf. We will disclose your personal data to these parties so that they can perform their functions as requested by us. Before we disclose your personal data to these third parties, we will seek to ensure that they have appropriate security standards in place to protect your personal data.
In certain circumstances, we will also disclose your personal data to third parties who will receive it as controllers of your personal data in their own right for the purposes set out above, where the relevant disclosure is in relation to:
As part of NATO, JAPCC may transfer your personal data to recipients that are established in jurisdictions other than your own. Please be aware that the data protection laws in some jurisdictions may not provide the same level of protection to your personal data as is provided to it under the laws in your jurisdiction.
If any disclosures of personal data referred to above require your personal data to be transferred from within to outside the European Union, we will only make that transfer if:
We will take specific steps (as required by applicable data protection laws) to ensure we take appropriate security measures to protect your personal data from unlawful or unauthorised processing and accidental loss, destruction or damage.
We will only retain your personal data for a limited period of time and for no longer than is necessary for the purposes for which we are processing it for. This will depend on a number of factors, including:
We will use your personal data to communicate with you:
With your opt-in consent (if required), we will provide you with information about our products, events and services which may be of interest to you. Such communications will be sent either by email, text, post or telephone.
If you do not wish to receive such communications, you can refuse to give your consent (where your consent is required) or opt-out at any time by either following the instructions within the communication or by contacting us using the details below.
This website uses so called ‘First Party Cookies’. First party cookies are cookies that are set by our website itself and can only be read by our site. They are used for the functionality of our website, e.g. to store your login information if you are a member of our community.
We do not use any so called ‘Third Pary Cookies’. Third party cookies are set by third parties which can be tracking or marketing companies (e.g. advertising networks). These cookies get re-read during a visit on other sites if they do business with these companies as well. If you want to check what cookies are used on our webpage you can use e.g. this online tool.
Our social media buttons on the left side of the webpage are providing only the links to the respective social media platforms and do not share any information with these platforms unless you actively use them. If you click on one of the social media icons, the respective webpage will be opened and the URL of your current JAPCC page will be transmitted to be further processed (shared) by your selected social media platform.
Where our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. If you do decide to withdraw your consent we will stop processing your personal data for that purpose, unless there is another lawful basis we can rely on – in which case, we will let you know.
Where our processing of your personal data is based on legitimate interest, you can object to this processing at any time. If you do this, we will need to show either a compelling reason why our processing should continue, which overrides your interests, rights and freedoms or that the processing is necessary for us to establish, exercise or defend a legal claim.
Where we are processing your personal data for direct marketing purposes, you have the right to object to that processing.
You have the right to (subject to applicable laws and certain limitations):
You also have the right to lodge a complaint with the relevant Supervisory Authority.
We may update this notice from time to time to reflect changes to the type of personal data that we process and/or the way in which it is processed. In the event of a material change which affects the processing of your personal data, we will notify you. We also encourage you to check this notice on a regular basis.
If you want more information about any of the subjects covered in this privacy notice or if you would like to discuss any issues or concerns with us, you can contact us: email@example.com.