What we need

The Pacific Asia Travel Association (PATA) will be what is known as the ‘Controller’ of the personal data you provide to us. PATA’s company registration number is 94-1244384 and its registered address is: 201 California Street, 17th Floor, San Francisco, CA  94111. This privacy notice applies to all “PATA Web-Properties,” i.e.,  www.patamalaysia.org and all of its associated subdomains.

Unless otherwise agreed with you, we will only collect basic personal data about you, which does not usually include any special categories of personal information about you (often known as ‘sensitive personal data’). This information does, however, include the likes of your name, email address, business type, business name, work address, job title and any interests you have indicated you have.

Why we need it

We need to know basic personal data in order to keep you up-to-date with our services, as requested by you on submission of your data via the website  www.patamalaysia.org or any of its subdomains (‘PATA Web-properties’). You can choose to unsubscribe from these communications at any time, either via the unsubscribe option on any communication sent from us, or via email to  communications@patamalaysia.org. You should note that should you do so, we will be unable to provide the service requested.

What we do with it

All the personal data we hold about you will be processed by our staff located in Thailand. Without your permission we will never send your data to any third parties except those who directly assist us to provide the services stated above. These firms are:

• Mailchimp of The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA;

• Microsoft Corporation of One Microsoft Way, Redmond, WA, 98052 USA;

• Eventbrite Inc of 155 5th St, 7th Floor, San Francisco, CA 94103 USA and

• Google LLC of 1600 Amphitheatre Parkway, Mountain View, CA, 94043 USA

• Zoom Video Communications, Inc. of 55 Almaden Boulevard, Suite 400, 500, 600, San Jose, CA 95113 USA

Mailchimp, Microsoft, Eventbrite, Google, and Zoom have each provided the following safeguards to ensure the safety of your personal data, and it shall be processed to at least the same standards as set out by the General Data Protection Regulations: Mailchimp, Microsoft, Eventbrite, and Google each participates in The Privacy Shield framework, which is accepted by the European Commission as evidence that an adequate level of protection exists for the personal data in the country, territory, or organisation where it is being transferred, in this case, the United States.

You can obtain a copy of the safeguards and any other of Mailchimp’s data protection documentation by visiting  https://mailchimp.com, or applying via post to Mailchimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA.  

You can obtain a copy of the safeguards and any other of Microsoft Corporation’s data protection documentation by visiting  https://www.microsoft.com/, or applying via post to Brendon Lynch, Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA.

You can obtain a copy of the safeguards and any other of Eventbrite Inc’s data protection documentation by visiting  https://www.eventbrite.com, or applying via post to Eventbrite, Inc., Attn: Legal Department, 155 5th St., 7th Floor, San Francisco, CA 94103 USA.

You can obtain a copy of the safeguards and any other of Google LLC’s data protection documentation by visiting  https://privacy.google.com or applying via post to Google LLC, Attn: Legal Department, 1600 Amphitheatre Parkway, Mountain View, CA, 94043 USA.

You can obtain a copy of the safeguards and any other of Zoom Video Communications, Inc’s data protection documentation by visiting  https://zoom.us/, or applying via post to Zoom Video Communications, Inc., ATTN: Data Privacy Officer, 55 Almaden Blvd, Suite 600, San Jose, CA 95113 USA.

We take all reasonable steps to ensure that your personal data is processed securely.

We would like to send you information about our own products and services, by telephone or email. Please note that if you have consented to being sent our marketing information via email then your data will be shared with the third parties listed above, and you will receive communications via the third-party organization Mailchimp ( https://mailchimp.com).

How long we keep it

We will generally keep your personal data for an indefinite period of time, in order to enable us to provide you with the services requested (ongoing newsletter and information communications via email for our events and membership). Your information will be kept with us until you notify us that you no longer wish to receive this information. You have the right to withdraw consent at any time.

Sensitive Personal Data

In addition to the basic data described above, it may also benefit you to notify us of any health condition or disability you have, so that we are aware of these conditions and how they affect you. This will allow us to take any reasonable steps to accommodate specific needs or requirements you have when providing our services to you. This type of information is known under the law as ‘special category information’ (you may also know this as ‘sensitive personal data’) and we require your explicit consent to process this information.

This kind of information will be collected from you only if you proactively offer it to PATA and authorize PATA to process it for the purpose of assisting you. This information will not be shared with any third parties and will only be kept as long as it is required for this purpose, or until such time as you notify us you no longer consent to its processing.

Cookies

We use automatically collected information and other information collected on our site through cookies and similar technologies to: (i) personalize our Service, such as remembering a User’s or Visitor’s information so that the User or Visitor will not have to re-enter it during a visit or on subsequent visits; (ii) provide customized advertisements, content, and information; (iii) monitor and analyze the effectiveness of Service and third-party marketing activities; (iv) monitor aggregate site usage metrics such as total number of visitors and pages viewed; and (v) track various entries, submissions, and other site actions. You can obtain more information about cookies by visiting  http://www.allaboutcookies.org, and you can learn more about how PATA uses cookies in our cookie policy here:  www.patamalaysia.org/cookie-policy.

Analytics

We use Google Analytics to measure and evaluate access to and traffic on our web properties, and create user navigation reports for our Site administrators. Google operates independently from us and has its own privacy policy, which we strongly suggest you review. Google may use the information collected through Google Analytics to evaluate Users’ and Visitors’ activity on our Site. For more information, see  Google Analytics Privacy and Data Sharing.

We take measures to protect the technical information collected by our use of Google Analytics. The data collected will only be used on a need to know basis to resolve technical issues, administer the Site and identify visitor preferences; but in this case, the data will be in non-identifiable form. We do not use any of this information to identify Visitors or Users.

What are your rights?

Under data protection legislation, you have several rights regarding the use of your personal data, as follows:

If at any point you wish to either confirm whether your personal data is being processed and/or access the data we hold on you, you can request to see this information free of charge, and we will respond to this request within a month.

You also have the right for certain data you have provided to PATA to be provided to you in a structured and commonly used electronic format (for example, a Microsoft Excel file), so that you can move, copy or transfer this data easily to another data controller. You may also request that we transmit this data directly to another organisation where it is practical for us to do so.

You are entitled to have data deleted if it is no longer needed or there is no longer a legitimate reason for the processing, or if the data in question has otherwise unlawfully been processed. You may also request deletion of your personal data if it was only being processed as a result of you consenting to this and you now withdraw your consent.

You have the right to object to the processing of your personal data (note that this only provides you with the right to raise your objections, not a blanket right to have any and all processing cease).

You have the right to restrict the processing of your personal data under certain circumstances, including if you have consented to its accuracy and while this is being verified by PATA, or if you have objected to its processing and while PATA is considering whether it has legitimate grounds to continue to do so.

How to complain about the use of your data

If you wish to raise a complaint about how we have handled your personal data, including in relation to any of the rights outlined above, you can contact the PATA’s Communications Department at  communications@patamalaysia.org, and they will investigate your concerns.

If you are not satisfied with our response, or believe we are processing your data unfairly or unlawfully, you can complain to the relevant data compliance oversight body in your country or visit the European Data Protection Supervisor at  https://edps.europa.eu/ to learn more.