FAA Certified Aerial Videography & Photography - Powered by Purpose

GDPR Privacy Notice

Effective Date: March 3, 2026
Last Updated: March 3, 2026

This GDPR Privacy Notice supplements the Cloud Cause Privacy Policy and applies to individuals located in the European Economic Area (EEA), United Kingdom (UK), and Switzerland.

Cloud Cause (“we,” “our,” or “us”) is a United States–based charitable organization that conducts and manages projects for nonprofit and for-profit entities.


1. Data Controller

For purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Cloud Cause is the Data Controller of your personal data.

Contact Information:
Cloud Cause
Email: inquiries@cloud-cause.com
United States


2. Personal Data We Collect

We may collect the following categories of personal data:

  • Identity Data (name, organization name)

  • Contact Data (email address, phone number, mailing address)

  • Financial Data (donation/payment transaction records — processed by third-party providers)

  • Technical Data (IP address, browser type, device data)

  • Communication Data (messages, inquiries, project communications)


3. Legal Bases for Processing

Under GDPR, we process personal data based on one or more of the following legal grounds:

A. Consent

When you:

  • Subscribe to newsletters

  • Agree to cookies

  • Voluntarily provide information

You may withdraw consent at any time.

B. Contractual Necessity

When processing is necessary to:

  • Process donations

  • Deliver project services

  • Fulfill agreements

C. Legal Obligation

When required for:

  • Tax reporting

  • Regulatory compliance

  • Financial recordkeeping

D. Legitimate Interests

When processing is necessary for:

  • Improving services

  • Preventing fraud

  • Ensuring network security

  • Managing operations

We ensure our legitimate interests do not override your fundamental rights.


4. International Data Transfers

Cloud Cause is based in the United States. If you are located in the EEA, UK, or Switzerland, your personal data may be transferred to and processed in the United States.

Where required, we implement appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs)

  • Contractual protections with service providers

  • Data protection agreements


5. Data Retention

We retain personal data only as long as necessary to:

  • Fulfill the purposes described

  • Comply with legal obligations

  • Maintain financial and tax records

  • Resolve disputes


6. Your GDPR Rights

If you are located in the EEA, UK, or Switzerland, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“Right to be Forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

To exercise your rights, contact:
📧 inquiries@cloud-cause.com

We may verify your identity before fulfilling requests.


7. Automated Decision-Making

Cloud Cause does not engage in automated decision-making or profiling that produces legal or similarly significant effects.


8. Data Security

We implement appropriate technical and organizational safeguards to protect personal data from unauthorized access, disclosure, alteration, or destruction.


9. Complaints

If you believe your rights under GDPR have been violated, you have the right to lodge a complaint with your local Data Protection Authority.

We encourage you to contact us first at:
📧 inquiries@cloud-cause.com