Privacy Policy
Privacy Policy
Protecting your private information is our priority. This Statement of Privacy applies to sfbcc.us, sfbasqueculturalcenter.org, and San Francisco Basque Cultural Center and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to San Francisco Basque Cultural Center include sfbcc.us, sfbasqueculturalcenter.org, 599 Railroad Catering, Inc., sfbcc.us and sfbasqueculturalcenter.org. The San Francisco Basque Cultural Center website is an information, e-commerce site. By using the San Francisco Cultural Center website, you consent to the data practices described in this statement.
Collection of your Personal Information
In order to better provide you with products and services offered, the San Francisco Cultural Center may collect personally identifiable information, such as your:
- First and Last Name
- Mailing Address
- E-mail Address
- Phone Number
If you purchase the San Francisco Basque Cultural Center's products and services, we collect billing and credit card information. This information is used to complete the purchase transaction.
We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) entering a sweepstakes or contest sponsored by us or one of our partners; (c) signing up for special offers from selected third parties; (d) sending us an email message; (e) submitting your credit card or other payment information when ordering and purchasing products and services. To wit, we will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us. We also may gather additional personal or non-personal information in the future.
Use of your Personal Information
San Francisco Basque Cultural Center collects and uses your personal information to operate and provide you with requested services.
San Francisco Basque Cultural Center may also use your personally identifiable information to inform you of other products or services available from San Francisco Basque Cultural Center and its affiliates.
How long We Keep Your Personal Information
We will only retain your personal information for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information, whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
Sharing Information with Third Parties
San Francisco Basque Cultural Center does not sell, rent or lease its customer lists to third parties.
San Francisco Basque Cultural Center may share data with vendors or other trusted partners to help perform statistical analysis, send you email or postal mail, or provide customer or membership support. All such third parties are prohibited from using your personal information except to provide these services to San Francisco Basque Cultural Center, and they are required to maintain the confidentiality of your information.
San Francisco Basque Cultural Center may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on San Francisco Basque Cultural Center or the site; (b) protect and defend the rights or property of San Francisco Basque Cultural Center; and/or (c) act under exigent circumstances to protect the personal safety of users of San Francisco Basque Cultural Center, or the public.
Automatically Collected Information
Information about your computer hardware and software may be automatically collected by San Francisco Basque Cultural Center. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the San Francisco Basque Cultural Center websites.
Links
This website may contain links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.
Security of your Personal Information
San Francisco Basque Cultural Center secures your personal information from unauthorized access, use, or disclosure. San Francisco Basque Cultural Center uses the following methods for this purpose:
- SSL Protocol
When personal information (such as a credit card number) is transmitted to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer (SSL) protocol.
We strive to take appropriate security measures to protect against unauthorized access to or alteration of your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet which are beyond our control; and (b) security, integrity, and privacy of any and all information and data exchanged between you and us through this Site cannot be guaranteed.
Right to Deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
Delete your personal information from our records; and
Direct any service providers to delete your personal information from their records.
Please note that we may not be able to comply with requests to delete your personal information it it is necessary to:
Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing relationship (including business relationship) with you, or otherwise perform a contract between you and us;
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
Debug to identify and repair errors that impair existing intended functionality;
Exercise free speech, ensure the right of another individual to exercise their right of free speech, or exercise another right provided for by law;
Comply with the California Electronic Communications Privacy Act;
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
Comply with an existing legal obligation; or
Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Children Under Thirteen
San Francisco Basque Cultural Center does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of thirteen, you must ask your parent or guardian for permission to use this website.
E-mail Communications
From time to time, San Francisco Basque Cultural Center may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communications.
If you would like to stop receiving marketing or promotional communications via email from San Francisco Basque Cultural Center, you may opt out of such communications. Email recipients may unsubscribe from emails by clicking on the UNSUBSCRIBE button or updating SUBSCRIPTION PREFERENCES.
Changes to this Statement
San Francisco Basque Cultural Center reserves the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our website, and/or by updating any privacy information. Your continued use of the website and/or Services available after such modifications will constitute your: (a) acknowledgment of the modified Privacy Policy; and (b) agreement to abide and be bound by that Policy.
Contact Information
San Francisco Basque Cultural Center welcomes your questions or comments regarding this Statement of Privacy. If you believe that San Francisco Basque Cultural Center has not adhered to this Statement, please contact San Francisco Basque Cultural Center at:
San Francisco Basque Cultural Center
P.O. Box 1281
San Bruno, California 94066
Email Address: info@sfbasqueculturalcenter.org
Phone Number: +1 (650) 204-1489
International Transfers
We are a California (CA), United States of America (U.S.A.), non-profit mutual benefit corporation. As a result, any personal data you provide us or that we collect from you through this website will be transferred to us in the U.S.A. We take appropriate steps to protect your personal data and process it in accordance with applicable data protection laws.
United Kingdom and European Economic Area Only
Legal Basis for Processing Your Personal Information
We will only use your personal information where we are permitted to do so by applicable law. Under European Union (EU) and United Kingdom (UK) data protection laws, the use of personal information must be justified under one of a number of legal grounds.
The table below identifies the different categories of personal data we process and for what purpose. For individuals in the UK and the European Economic Area (EEA), it also identifies the relevant lawful basis we rely on for carrying out each type of processing (as required by applicable data protection law).
Types of Data
Purposes for which we will Process the Information
UK/EEA Legal Basis for the Processing
Contact Data, Correspondence Information, Employment Information
To maintain information on our members and to respond to your questions and provide you with information and materials that you request from us.
To deliver relevant marketing materials to you, invite you to events and other functions we believe may be of interest to you and measure or understand the effectiveness of the
It is in our legitimate interests to keep track of our membership and to respond to your queries and provide any information and materials requested in order to maintain good relations.
It is necessary for our legitimate interests to generate interest in our organization and to inform our marketing strategy.
Contact Data
To notify you about changes to our policies, terms, and other administrative information such as reminders, technical notices, updates, and security alerts.
It is in our legitimate interests to keep records about changes to our terms and policies and to ensure that any changes are communicated to you.
Your Rights
If you have any questions about our use of your personal information, you should first contact us via the details provided in the Contact Information section above. Under certain circumstances and in accordance with UK, EU, or other applicable data protection laws, you have or may have the following rights:
Right of access: You have the right to obtain access to your personal information.
Right of portability: You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
Right to rectification: You have the right to have any inaccurate or incomplete personal information we hold about you corrected without undue delay.
Right to erasure: You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
Right to restriction: You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in that way is not justified, such as where the accuracy of the personal information is contested by you.
Right to object: You have the right to object to any processing based on our legitimate interests in certain circumstances. You can also object to our direct marketing activities for any reason by clicking the “unsubscribe” link set out in any marketing communication you receive or by contacting your usual contact at San Francisco Basque Cultural Center.
Right to withdraw consent: If you have provided consent to any processing of your personal information, you have a right to withdraw that consent but without affecting the lawfulness of processing based on consent before its withdrawal.
Please note that not all of the above rights are absolute and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply. You can exercise any of your rights as described in this Privacy Policy and under data protection laws by contacting us as provided in the Contact Information section above.
Except as described in this Privacy Policy or provided under data protection laws, there is no charge for the exercise of your legal rights. However, if your requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may either: (a) charge a reasonable fee taking into account the administrative costs of providing the information or taking the action requested; or (b) refuse to act on the request.
Where we have reasonable doubts concerning the identity of the person making the request, we may request additional information necessary to confirm your identity.
Complaints
If you have any questions or concerns regarding our Privacy Policy or practices, please contact us using the details provided in the Contact Information section below. If you are located in the UK or EEA, you also have the right to complain to your local data protection supervisory authority. For residents of the UK, this is the Information Commissioner’s Office (ICO), website: (https://ico.org.uk/). For residents of the EEA, you can find details regarding your local data protection regulator at:
https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-es/
In France, this is Commission Nationale de l'Informatique et des Libertés (CNIL), website: https://www.cnil.fr/.
In Spain, this is the Agencia Española de Protección de Datos (AEPD), website: https://www.aepd.es/.
Revised on February 23, 2023