Privacy Policy

Effective Date: 14th September 2024

At Pashtouki (“we,” “our,” or “us”), we are committed to protecting and respecting your privacy. This privacy policy outlines how we collect, store, use, and protect your personal data when you visit our website, pashtouki.com (“Website”), or interact with us in relation to our postcard exhibit. We are committed to processing your data in compliance with the General Data Protection Regulation (GDPR).

By using our Website, you agree to the terms outlined in this Privacy Policy.

1. Data We Collect

We collect the following categories of data:

1.1 Personal Data:

Personal data refers to information that can identify you as an individual, including but not limited to:

• Name
• Email address (for newsletter subscriptions, queries, or exhibit updates)
• IP address (collected automatically when you visit our website)

1.2 Non-Personal Data:

We may collect non-personal data such as browser type, operating system, and website usage patterns through cookies or similar technologies. This data cannot be used to identify individuals.

2. How We Collect Your Data

We collect data through:

• Direct Interactions: When you fill out forms, subscribe to newsletters, or contact us via email at pashtouki.com@gmail.com.
• Automated Technologies: Such as cookies and server logs to collect technical data during your website visit.

3. Purpose of Data Collection

We use your personal data for the following purposes:

• To provide you with information about our postcard exhibit and related updates.
• To communicate with you regarding your inquiries.
• To improve our Website’s functionality and user experience.
• For security and fraud prevention purposes.
• To comply with any legal obligations.

We do not use your personal data for any purposes other than those explicitly mentioned without your consent.

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases for processing your data:

• Consent: When you opt-in to receive communications such as newsletters.
• Contractual Obligation: To respond to your inquiries or provide information you’ve requested.
• Legal Obligation: Where processing is necessary for compliance with legal or regulatory requirements.
• Legitimate Interest: For improving our Website and maintaining security.

5. Data Sharing and Disclosure

We do not sell or rent your personal data. However, we may share your data in the following instances:

• Service Providers: With trusted third-party service providers who help us operate our website, such as hosting providers or email marketing services.
• Legal Requirements: If required by law, or in response to legal processes or governmental requests.

All third parties we work with are required to comply with GDPR and to safeguard your data to the same standard we do.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once data is no longer required, it will be securely deleted or anonymized.

7. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect against unauthorized access, alteration, or destruction. These include encryption, secure hosting environments, and regular security audits.

8. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
• Right to Erasure (“Right to be Forgotten”): You can request the deletion of your data, provided it is not required for legal purposes.
• Right to Restriction of Processing: You can ask us to limit the processing of your data in certain circumstances.
• Right to Data Portability: You can request that your data be transferred to another service provider.
• Right to Object: You have the right to object to the processing of your personal data in some cases, such as for direct marketing purposes.
• Right to Withdraw Consent: You can withdraw your consent for data processing at any time.

To exercise any of these rights, please contact us at pashtouki.com@gmail.com. We will respond to your request within one month, in compliance with GDPR.

9. Cookies

We use cookies and similar tracking technologies on our Website to enhance user experience. Cookies are small text files placed on your device to collect information about your browsing activity. You can manage or disable cookies via your browser settings, but this may impact the functionality of our Website.

10. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. We encourage you to review their privacy policies before submitting any personal data.

11. International Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as standard contractual clauses, to protect your data in compliance with GDPR.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page with the “Effective Date” updated accordingly. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: pashtouki.com@gmail.com

By using our Website, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your data as outlined above.

This policy ensures full compliance with GDPR and provides transparency regarding data handling practices.