Privacy & Cookie Policy

EGBA Privacy Policy – updated 17 July 2018

1. INTRODUCTION

This Privacy Policy informs you about the ways your personal data is collected, stored and used by EGBA, and how you can exercise your rights.

EGBA is a non-profit association and we do not use any of your personal data for commercial marketing and/or commercial purposes.

All personal data that you provide us is processed in compliance with the General Data Protection Regulation 2016/679(“GDPR”).

2. DEFINITIONS

In this policy the following terms shall have the following meanings:

3. HOW TO CONTACT US

Address: Rue Gray 50, 1040, Brussels, Belgium.

Email: egba@egba.eu

4. INFORMATION WE MAY COLLECT ABOUT YOU

Personal data that we may collect and use includes the following:

• Your name and contact information, including email address and telephone number, job title and company details including your address;
• We will collect any information contained in any correspondence between you and us via the website, emails, telephone calls, or any other means;
• We may collect information about you visiting our website. This may include your IP address, geographical location, device information, browser type, operating system. This information may be collected by a third party website analytics service provider on our behalf and/or may be collected using cookies;
• Information required to provide a service at your request.  This may include date of birth and passport or other identity information. If you choose not to provide this information we may not be able to fulfil your request.

5. HOW AND WHY WE USE YOUR INFORMATION

The data protection law allows us to process your personal information only if we have a proper reason for doing so, e.g.:

• when you consent to the processing of your personal data;
• to comply with our legal and regulatory obligations;
• for the performance of our contract with you or to take steps at your request before entering into a contract;
• for our legitimate interests or those of a third party.

A legitimate interest is when we have a business reason to use your information, so long as this is not overridden by your own rights and interests.

EGBA considers as legitimate interests: to inform you and keep in contact with you about industry news and regulatory developments that we believe may be of interest you and; to contact you with information about events organized by EGBA.

EGBA does not use your information for commercial purposes.

EGBA does not use any type of automated decision-making affecting your personal data.

EGBA does not disclose your personal data, except as described in this Privacy Policy.

We may use your information for the following purposes:

• to provide you with services or information that you have requested from EGBA such as receiving an email, newsletter or press release;
• to contact you with information about an event organized by EGBA;
• to inform you and keep in contact with you about other events or services that we believe may interest you;
• to perform statistical analyses of users of the website to improve the user’s experience.

For these purposes, we will keep your personal data for as long as necessary to provide you with the information and services described above or for as long as we are legally obliged to do so.

You can always withdraw your previously granted consent; however, this will not invalidate any previously consented processing.

Moreover, you have the right to opt out of receiving our general communications at any time by:

• contacting us at egba@egba.eu;
• using the ‘unsubscribe’ link in emails received via MailChimp.

This will not prevent us contacting you in relation to administrative issues such as managing your membership, the performance of any contract, or regarding a specific request that you have made.

6. WHO WE MIGHT SHARE YOUR INFORMATION WITH

For the provision of our internal and external services, we make data accessible to third party service providers (e.g. distribution mailing services, website hosts). In the case in which the third party is located outside of EU, we will take measures to ensure it is protected to the same standards as it would be within the EU by relying on one of the following:

• The country that is receiving your Personal Data has been found by the European Commission to offer the same level of protection as the EEA. More information can be found on the European Commission Justice website;
• We will use contracts that require the recipient to protect your Personal Data to the same standards as it would be within the EEA;
• Where the transfer is to the US and the recipient is registered with Privacy Shield. Privacy Shield is a framework that ensures Personal Data is protected to a level approved by the EU. Read more about Privacy Shield on the European Commission Justice website.

E.g. for some services and information that we provide you through emails we use MailChimp. You can find here MailChimp’s privacy policy.

7. SECURITY

Data security is of great importance to EGBA and to protect data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected, in accordance with the applicable laws.

8. YOUR RIGHTS

Under the GDPR, you have the following rights:

• The right to be provided with a copy of your personal information (right of access);
• The right to require us to correct any mistakes in your personal information;
• The right to require us to delete your personal information in certain situations;
• The right to require us to restrict processing of your personal information in certain circumstances, e.g. if you contest the accuracy of the data;
• The right to receive the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party in certain situations;
• The right to object (i) at any time to your personal information being processed for direct marketing (including profiling) and (ii) in certain other situations to our continued processing of your personal information, e.g. processing carried out for the purpose of our legitimate interests.
• The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
• The right to propose a complaint to the Belgium supervisory authority, the Commission for the Protection of Privacy, where the conditions exist.

The requests of exercise of the rights referred above are to be sent to egba@egba.eu.

9. COOKIES

EGBA uses cookies to automatically collect information about website users when they navigate on our website. Cookies are small text files placed on your web browser by websites that you visit while browsing the Internet. Cookies are widely used to help make websites work efficiently as well as to analyse traffic on websites. Cookies also allow websites to tailor information to individuals based on browsing preferences. You can enable, disable or delete cookies through your Internet browser. In order to do this, follow the instructions provided by your browser.

10. CHANGES TO THIS PRIVACY POLICY

EGBA reserves the right to change this Privacy Policy as we may deem necessary from time to time or as may be required by law. Any such changes will be posted on this page. We will notify you of any significant or material changes in the way we treat your information by placing a prominent notice on our site or by email.