Privacy Policy

People, Food and Land Foundation is committed to protecting the privacy and rights of our website visitors. This privacy policy is intended to make clear the ways that PFL website, peoplefoodandland.org (“website” or “site”), may collect, store, protect, and make use of your information. We will not collect any personal information from you that you do not volunteer. We do not and will not sell, share, or rent this information in any way that is not outlines in this statement. By visiting the Site, you accept the practices described in this Privacy Policy. If you do not wish to accept these practices, immediately cease all use of the Site. Your continued use of the Site shall constitute your acceptance of these practices and the full Privacy Policy, To the extent that personal information is collected offline, this privacy policy shall also govern the collection and use of information we collect offline.

This Privacy Policy also applies when you use social media that overlaps PFL’s own social media or where your use of social media overlaps this Site.

Our Privacy Policy will be updated periodically, so please be sure to reread it from time to time. By submitting your personal information to us, you are agreeing that PFL may use the information in accordance with this Policy.

The personal information PFL collects, stores, and uses about you might include:

• Your name and contact details (including postal address, email address and telephone number);
• Your response to optional polls, petitions, or other forms that we may invite you to complete;
• Details of any donations you make, including the amount, currency, and method of payment. We do not store your credit car information or banking details— that’s done through third payment processors, including GivingBlock and/or PayPal Giving;
• Your social media account IDs and information shared with us via your social media accounts;
• Data relating to whether you open emails, click our emails, sign or share petitions, and if the people you shared with sign our petitions;
• Images, photographs, or videos you upload to the site;
• Other information you voluntarily submit in a form on the site or that you share when you contact us.

We also collect from all visitors:

• Non-identifying and/or technical information about your use of the website, browser type and version, and operating system;
• Your IP Address;
• Cookies (see below). Data protection laws recognize certain categories of personal information as sensitive and therefore requiring greater protection. We do not usually collect sensitive data about you unless there is a clear and valid reason for doing so and applicable data protection laws allow us to.

If You are a User Outside of the European Economic Union (EEU) or the UK, the Information We Collect Both Online and Offline:

The only personal information we collect from the Site and offline is that which is voluntarily provided to us and otherwise described in this Policy. This information may be requested if a visitor volunteers or, in full or in-part, fills out a form, registers for an event, completes a survey, requests information, supplies, posts information, participates in a public forum, registers with our Site or makes a donation. In addition to other identifiers, we may collect the following information: name, address, telephone number, and email address.

If you are a California or Colorado Resident, Following is our Notice at Collection of Categories of Personal Information Collected-

Although the California Consumer Privacy Act (CCPA) may not expressly apply to PFL, per its terms, we provide this notice voluntarily as a convenience for you and in advance of any instance where the CCPA may have application to our collection and use of personal information. Additional uses of the following information may also be contained in other portions of the PFL Privacy Policy.

Categories of Information, Including Personal Information, We have Collected Over the Prior 12 Months and Shall Continue to Collect in the Future, Which Includes Information We Collect Online, Listed Above

In terms of how we use the information we collect please also see the separate section of the Privacy Policy titled “How We Use Information.”

1. Identifiers for our Donors and Those Who Provide Personal Information

Sources of Information:
We collect this information from our users, donors, and any business partners.  Identifiers include Cookies and other similar e-identifiers.  We also generate identifiers internally.

How We Use It: 
To enable use of our sites, services, and products, to communicate with you, to understand how our users interact with our sites and to improve our offerings and collect your monetary and in-kind support.

Types of Individuals Affected: 
People who donate to us; use our sites or mobile applications; create a user account; volunteer with us; or obtain a service from us.

How We Share It:
We share this data with our service providers and with business partners including those to whom you instruct us to send this information.

2.  Personal Information (Generally and as Defined Under California Civil Code Section 1798.80)

Sources of Information: 
We collect this information from our users, donors, and business partners.

How We Use It:
To enable use of our site and services, to communicate with you, to understand how our users interact with our site and to improve our offerings and collect your monetary and in-kind support.

Types of Individuals Affected: 
People who donate to us; use our site or mobile applications; create a user account; volunteer with us; or obtain a service from us.

How We Share It:
We share this data with our service providers and with business partners including those to whom you instruct us to send this information in accordance with our Privacy Policy. To the extent permissible in a given jurisdiction, where your donation to us was made in support of one of our fiscally sponsored projects, we may also share this data with the entity responsible for implementing that project.

3.  Commercial Information

Sources of Information:
We collect this information from our donors; and generate it internally during transactions with our donors.

How We Use It: 
To transact with you if you use our service or make a donation, and to enable transactions you have requested.

Types of Individuals Affected:
People who make a donation to us or use our services.

How We Share It:
We do not share this information except with third party processors for purposes of completing their services to us.  All such data is sent protected and encrypted.

4.  Electronic Network Activity Information

Sources of Information:
We collect this information from our website visitors and social media visitors.

How We Use It:
To enable use of our sites, services, and products, to communicate with you, to understand how our users interact with our sites and to improve our offerings and collect your monetary and in-kind support.

Types of Individuals Affected:
People who use our sites or mobile applications.

How We Share It: 
We share this data with our service providers and with business partners, including those to whom you instruct us to send this information.

5.  Audio, Electronic, Visual, or Similar Information

Sources of Information:
We collect this information from our users and donors if they supply it to us in accordance with the Privacy Policy (User Submissions).

How We Use It: 
To identify you, to allow you to describe yourself and your programs, to enable use of our site and services, and to further our programs.

Types of Individuals Affected: 
People who provide user submissions.

How We Share It: 
We share this information with our service providers and the general public through our website, print material, and social media.

People, Food and Land will never sell your personal information.

Colorado residents have specific rights regarding their personal information. This section describes your rights and explains how to exercise those rights.

Your data privacy rights

• Right to opt-out of sharing personal data: you are able to elect to direct us not to use your personal data.
• Right to access: you are able to request and receive all personal data in a form that is concise, transparent and easily intelligible and in an appropriate, commonly used electronic format, depending on the nature of the data. The right to access personal information may be limited by local law.
• Right to correction: you have the right to correct inaccuracies in your personal data
• Right to deletion: you have the right to request that we delete any of your personal information we collected from you and retained, subject to certain exceptions. Once we receive and confirm your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. Please note that in cases of deletion, limited personal information will remain to document the request. The right to access personal information may be limited by local law.
• Right to portability:you have the right to request that your data be transferred to another entity in a format that we can transmit securely
• Right of appeal: If you exercise one of your privacy rights and we are unable to process your request, we will endeavor to provide you with an explanation as to why the request was denied. The explanation will include information on how to appeal, including the relevant regulatory authorities, based on your state or country of residence.

To exercise your privacy rights or to change the way we communicate with you:

• email us at admin@pflfoundation.org
• or write to us at: PO Box 314, Prather, CA 93651
• You can opt out of marking emails at any time by clicking the unsubscribe link in any marketing email from PFL.

For your protection, we will use commercially reasonable efforts to verify your identity when you are exercising your right to have personal data corrected or deleted or to receive a copy of your personal data before implementing your request.  If you are submitting a request on behalf of someone else, we may ask for additional verification, such as written documentation or other proof of authority. We will try to comply with your request as soon as reasonably practicable, consistent with applicable law.

Further, for Colorado Residents. If you have concerns about the appeal of any action related to your personal data, you have the ability to contact the Colorado Attorney General at https://complaints.coag.gov/s/contact-us or Office of the Attorney General Department of Law, Ralph L. Carr Judicial Building, 1300 Broadway, 10th Floor, Denver, Colorado, 80203.

The policy reflects certain requirements of two European privacy laws and Brazil, as applicable: the General Data Protection Regulation (GDPR) and the ePrivacy Directive, as well as Lei Geral de Protecao de Dados (LGPD) from Brazil. These laws apply to end users in the European Economic Area (EEA) or in Brazil. For purposes of this privacy policy, the UK shall also be covered within these requirements.

PFL  ensures that certain disclosures are given and consents, as required by law, are obtained from end users in the EEA or Brazil. End users in the EEA or Brazil are informed through this policy and other means that they must consent to:

• the use of cookies or other local storage; and
• the collection, sharing, and use of personal data for personalization of ads or other services.

Once consent is obtained, PFL shall:

• retain records of consent given by end users; and
• provide end users with the ability to revoke consent.

In addition to the above, we want to further inform you according to Art. 13 General Data Protection Regulation (GDPR) and the applicable data protection rules about how we process your personal data.

Contact Details – Data Controller
PFL is committed to ensuring the privacy and data protection rights of all our donors. If you are a citizen of the UK or the EU, you can contact us under the following address:

• Email: admin@pflfoundation.org
• Mail to: The Data Protection Officer PO Box 314, Prather, CA 93651

Personal Data or categories of personal data that we process

We provide our supporters and visitors with a number of options to get involved and support the work of PFL including through online donations, performed through our website or social media.

Depending on how you have chosen to communicate with us and to ensure we can provide you with information that is relevant and of interest to you we generally process the following categories of personal data:

• Name (first name and family name)
• Prefix
• Address
• E-mail Address
• data regarding the donation: amount of donation, purpose of donation, date of donation
• history of previous donations
• history of donor and interests regarding our organization and its purposes
• members of your household, if they are giving to our organization or have shown interest in our organization
• Language preference

In case we have direct personal contact with you throughout our donor relationship, we might process further data, as it is shared by you or gained from publicly available resources:

• phone number
• date of birth
• age
• gender
• job title, profession
• place of work
• information about the content and channel of communication, date, reason and result of our interactions with you
• your personal preferences and areas of interest with regards to our organization and its purposes
• PFL events that you and your family have attended
• general publicly available information

Within our research we also gain publicly available information through various publicly non-intrusive accessible sources and may process personal data in line with the purpose of the source.

Purposes of processing your personal data and lawful bases

Through your gift(s) you have expressed support and interest in our work. Our work would not be possible without the voluntary contributions we receive such as the one you are making. Out purpose the collection of data  is in the processing of administrative purposes in relation to the donor relationship and in general will be used to issue tax receipts or process the donation details in order to fulfill legal and administrative obligations. We are actively engages in preventing fraud, money laundering and other criminal activities, preserving the reputation of PFL.

Recipients or categories of recipients of your personal data

We do not share your data with any third parties for promotional purposes.

Within PFL access to your personal data is only given to individual members of staff or teams in order to fulfill our legal and contractual obligations as well as for the above-described purposes.

Your personal data may be shared with service providers that we engage as processors If we do so, we will always enter into data processing agreements including all the legal obligations of Art. 28 GDPR. Such processors can be the following (this list is not exhaustive, and we reserve the right to change service providers):

• service providers that we use for our collection and processing of data in our database, our communication with you, online or in print
• public institutions and authorities regarding our legal reporting obligations (such as tax authorities, federal bank)
• service providers whom we use to process your donation
• service providers we use for the maintenance and support of our IT systems
• service providers we use for our internal financial accounting systems, compliance systems, data screening within legal obligations and audits.

Time of storage of your personal data
We delete your personal data when the legal basis for maintaining the data has/have expired and the processing and storage of your personal data is no longer necessary, this is usually the case after we have had no giving or no contact from your side for more than 2 years, unless we are bound to extend the storage for legal reasons.

Your data protection rights
You have the following rights based on the GDPR:

Access Right (Art. 15 GDPR)
You have the right to request access to the personal data that we process about you.

Right to rectification (Art. 16 GDPR)
In case we process inaccurate personal data about you, you have the right to rectification.

Right of erasure, restriction and objection (Art. 17, 18 and 21 GDPR)
If the legal requirements of Art. 17, 18 or 21 GDPR are given, you have the right to erasure of your personal data, the right to restriction of processing and the right to object the processing of your personal data.

Right to data portability (Art. 20 GDPR)
If you have given your consent to the processing of your personal data or we are processing on the basis of a contract and the processing is carried out by automated means, you have the right to transmit those data to another controller.

Your right to withdraw your consent
You have the right to withdraw any consent you have given at any time for the future by email or mail to the addresses set forth above. This withdrawal does not affect the lawfulness of processing of your personal data that has taken place prior to your withdrawal.

Transfer of data in third countries or international organizations
We only transfer personal data in countries outside of the EU and the EEA (European Economic Area), so called “third countries” in the following cases: necessity for the performance of your orders, legal requirement (duty to report to tax authorities), based on your consent or necessity within a processing agreement that we have with a service provider.

Obligation to provide personal data when required for a contract
We need certain personal data from you to be able to perform the donor relationship and to fulfill our contractual and statutory legal obligations. Without this personal data we cannot conclude the donor contract with you or cannot continue an existing contractual donor relationship.

We do not collect and/or store personal payment information.

This website uses the Google AdWords remarketing service to advertise on third party websites (including Google) to previous visitors to our site. The website may utilize additional remarketing services to advertise on third party websites to previous visitors to our site, as well.  Any such remarketing service shall be determined to be compliant with all US and international privacy law requirements prior to use by this website.  It could mean that, if consistent with applicable privacy laws, we advertise to previous visitors who have visited our site using their desktop computer, tablet, or mobile device even if they haven’t completed a task on our site. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve ads based on someone’s past visits to the PFL website. Of course, any data collected will be used in accordance with our own privacy policy, Google’s privacy policy, and applicable law.

You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin, or opt out of a particular third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page.  Should we use any other remarketing service to advertise on third party sites, we will attempt to advise you on how to establish your preferences with that site and, at your initiative, you may set preferences for how you may be advertised to.

PFL also uses 3rd party vendor re-marketing tracking cookies, including the Google AdWords tracking cookie.  For data collected from end-users in the EEA and Brazil, One Earth will first obtain EEA and Brazilian end-user consent and shall further obtain assurances that the vendor is compliant with US and international laws regarding consumer privacy. This means we may show ads to you across the internet, specifically on the Google Content Network (GCN). However, no such ads shall be shown to EEA or Brazilian end-users without having first obtained consent.  As always we respect your privacy and are not collecting any identifiable information through the use of Google’s or any other 3rd party remarketing system.

With the exception of end users in the EEA whose consent must first be obtained, the third-party vendors, including Google, whose services we use – will place cookies on web browsers in order to serve ads based on past visits to our website.   Third party vendors, including Google, use cookies to serve ads based on a user’s prior visits to our website. This allows us to make special offers and continue to market our fundraising needs and program services to those who have shown interest in us.

Cookie Policy

We use a variety of technologies to help us to deliver customized visitor experiences. In particular, we may use a technology called “cookies” to provide you with, for example, customized information from our website and its webpages (the “Site”). By agreeing to this Cookies Policy you consent to the use of cookies by us as described in this Cookies Policy.

“Cookies” are small pieces of information sent by an organization to your computer and stored on your hard drive to allow that website to recognize you when you visit. For example, we can use cookies to store your country preference. This helps us to deliver a more personalized service when you browse our website and improves our services. European and other national data privacy regulations state that we can store cookies on your device if they are strictly necessary for the operation of this site, enabling basic functions like page navigation and access to secure areas of the website. For all other types of cookies, we need your consent. This site uses different types of cookies, pixel tags, and other technologies. Some cookies are placed by third party services that appear on our pages. You can see a list of these cookies and control your Cookie Settings at any time.

We may use three types of cookies on the Site:

Session cookies – these are temporary cookies that remain in the cookie file of your browser until you close the browser. This cookie is automatically onto your browser by the server software, but it is not used by our website.

Analytical cookies – Our website uses third party cookies, such as Google Analytics cookies (third party cookies) for the following purposes:

• a cookie to record the time of your first visit to website, the time of your  most recent visit to the website and the time of your current visit;
• a cookie to record which page(s) you visit on the website;
• a cookie to record how long you stayed on the website; and
  • a cookie to record how you located our website (i.e. Google search, keyword, link from other page etc.).

We only share the information obtained through the use of Google Analytics with Google. The cookies we use for these purposes do not track your Internet usage after leaving our website and do not store your personal information. They will not be used in connection with any other information to identify you in any way.

Disabling Cookies:  If you wish, you can usually adjust your browser so that your computer does not accept cookies:

1. In your browser, go to the heading “Manage Cookies” and click onto the option you prefer, either stopping cookies being installed, or notifying you of them;
2. From the list provided, click onto the program which your computer uses; if this is not shown on the list, click on the “help” heading on the bar at the top of this page, search for information on “cookies” − an explanation of how to delete cookies will appear, then follow the instructions.

Alternatively, you can adjust your browser to tell you when a website tries to put a cookie on your computer.

How you adjust your browser to stop it accepting cookies or to notify you of them, will depend on the type of internet browser program your computer uses. You can follow the appropriate instructions for your specific browser type at www.aboutcookies.org/  (please note that this link will open a new window and will lead to an external website and that we are not responsible for the content of external websites).

How to disable third party cookies

Users based in the European Union can opt out of these third party cookies by going to www.youronlinechoices.eu. This website is not connected us and we are not responsible for its content. We only keep cookies for the duration of your visit to our Site, except in the case of cookies which remember you for future visits or where you save your login name as referred to above.

Your consent to cookies

By agreeing to this policy you consent to the use of cookies by us as described above. Cookies do not contain confidential information such as your home address, telephone number or credit card details. We do not exchange cookies with any third party websites or external data suppliers. If you do choose to disable cookies, you may find that certain sections of our Site do not work properly.

We use standard industry practices, such as firewalls and encryption, to safeguard your personally identifiable information against unauthorized access, alteration, disclosure, misuse, or destruction. All donations, including the transmission of payment details and other personal information, are handled over secure, encrypted connections. As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Economic Area (“EEA”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EEA. You should be aware that these countries may not have similar data protection laws to the GDPR. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy. If you use our services while you are outside the EEA, your information may be transferred outside the EEA in order to provide you with those services. We undertake regular reviews of who has access to information that we hold to ensure that your information is only accessible by appropriately trained staff, volunteers and contractors.

We do not rent or sell your personal information. We may pass your information to our third-party service providers, suppliers, agents, subcontractors, and other associated organizations for the purposes of completing tasks and providing services to you on our behalf (for example, to process donations and send you mailings). However, when we use these third parties, we disclose only the personal information that is necessary to deliver the services, and we have a contract in place that requires them to keep your information secure and prevents them from using it for their own direct marketing purposes. Please be reassured that we will not release your information to third parties to use for their own direct marketing purposes, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

When you supply your email address, you are consenting to our contacting you via that email address.  For citizens of the EEA, we will obtain your express consent.

We ask for your email address on a number of pages within our site, including when you make a donation, but you may opt out of email communications at any time by doing one or more of the following:

• Click the “Unsubscribe” link that is at the bottom of every email communication from PFL and follow listed instructions
• Contact us and request that we remove you from our email distribution lists.

PFL does not sell, exchange, or rent your email address to any third party. PFL only uses your email address to send you information about PFL and its programs and/or to solicit your support through a charitable donation or as a volunteer. PFL complies with those provisions of the Federal CAN-SPAM Act applicable to charitable organizations, as well as the General Data Protection Regulation (GDPR) and the ePrivacy Directive for end-users in the EEA.

Following are legally required disclosures under state privacy laws, as well as additional information for California residents in terms of the categories and sources of information we collect, how we use that information, and how we may share that information.  Although many other provisions of this privacy policy also address these matters, we include them again here for voluntary compliance with the California Consumer Privacy Act (CCPA) to the extent that such law has application to PFL.  The inclusion of this information addresses our collection and use of California-resident personal information, but is not included as an admission of the ongoing application of the CCPA to our organization. Under the CCPA, California residents have certain rights regarding their personal information, including:

• The right to know the categories of personal information we’ve collected and the categories of sources from which we got the information (see “If you are a California Resident, Following is our Notice at Collection of Categories of Personal Information Collected” section of this Privacy Policy, [ABOVE] as well as the section “How We Use Information/Who Has Access” [ABOVE].
• The right to know the business purposes for sharing personal information (see “If you are a California Resident, Following is our Notice at Collection of Categories of Personal Information Collected” section of this Privacy Policy, [ABOVE] as well as the section “How We Use Information/Who Has Access” [ABOVE].
• The right to know the categories of third parties with whom we’ve shared personal information (explained throughout this Policy with respect to specific information).
• The right to access the specific pieces of personal information we’ve collected and the right to delete your information (see Exercising California Privacy Rights, which follows.

California residents also have the right to not be discriminated against if they choose to exercise their privacy rights. Your authorized agent may make a request to exercise these rights on your behalf.  We will confirm the agent’s authority at the time of request.

Exercising California Privacy Rights

You may contact us and obtain information on the kind of data we’ve collected about you and the types of third parties we share it with.  At your request, we will provide a copy of the data, if you want. If you’d like to delete your data or close your account, or otherwise opt-out of the sale or sharing of your information, you can do that by following the provisions of this Privacy Policy under “Your Options and Opting Out or Requesting Deletion” [ABOVE].

We provide these options for your benefit and we will never discriminate against you for using them. But if you choose to delete your data, we won’t be able to offer you any information, services, or other support that require us to use your personal information.

Processing your Sensitive Personal Data: We do not seek to collect or otherwise process your sensitive personal information (i.e. about race or ethnicity, political opinions, religious or philosophical beliefs, etc.) except where the processing is required or permitted by applicable law; or we have obtained your prior explicit consent.

Links to other websites Our website may contain links to other websites run by other organizations. This Policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other websites, even if you access those using links from our website.  In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site (except as described above) and recommend that you check the privacy Policy of that third-party site.

Vulnerable circumstances We are committed to protecting vulnerable supporters and volunteers and appreciate that additional care may be needed when we use their personal information. In recognition of this, we observe good practice guidelines in our interactions with individuals. If you require additional measures be put in place to protect your data please notify us at admin@pflfoundation.org.

How can I get more information? If you have any questions about this Privacy Policy, your personal information, or data protection on this site, please contact us at admin@pflfoundation.org. For your protection, we may only share and update the personal information associated with the specific email address that you use to send us your request, and we may need to verify your identity before doing so. We will comply with such requests in a reasonably timely manner. Please do not send sensitive personal information, passwords, banking details, or credit/debit card details via email.

Changes to this policy Please check this page regularly to ensure that you have no questions or concerns regarding the changes. If we make any significant changes, will provide the date of the last revision at the top of the Privacy Policy page.