Privacy Policy
Privacy information pursuant to the art. 13 of the EU Regulation n. 679/2016
A. DATA CONTROLLER
The data controller is Synallagma SA (hereafter, “Synallagma”), with registered office in Rue De Hollande 13, 1060 Brussels (Belgium), n. TVA BE0774857180. The data controller can be contacted by email for questions relating to this policy at the address hello@cep-project.org. The Data Protection Officer (DPO) can be contacted at the email address hello@cep-project.org.
B. WHAT PERSONAL DATA WE COLLECT AND WHEN AND WHY WE PROCESS IT
The Consumer Empowerment Project (CEP) website, www.cep-project.org, is managed by our trustworthy service provider, OVH Hosting Ltd. (hereafter, also, “OVHcloud”), based in France. OVHcloud acts as a processor of data whereas Synallagma is the data controller. We have signed a data processing agreement with OVHcloud. OVHcloud will only use the logs and any other information for troubleshooting the supplied services and for monitoring usage patterns for security purposes.
We use cookies to improve your experience on our website. Please, have a look at our cookie policy to discover more. Anyway, the processing of web usage data is kept to a minimum.
This website employs Google Analytics, a web analytics service provided by Google, Inc., located at 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.
Google Analytics utilizes “cookies,” which are text files placed on your computer, to help the website analyze how users interact with the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google processes your data in accordance with its privacy policy. Google is certified under the EU-US Data Privacy Framework which is being enabled under negotiations between the US and the EU. Google’s data privacy framework certification permits this transfer in accordance with GDPR.
We use this information to understand and optimize the user experience on our website and to analyze trends and improve our services. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
Users can prevent the collection of data generated by Google Analytics by opting out of Google Analytics through their browser’s add-on. For more information on Google Analytics and its privacy practices, please visit https://www.google.com/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/us.html.
We run a variety of mailing lists hosted by our trustworthy service provider, SendinBlue, a simplified joint stock company, based in France. If you subscribe to one of our public mailing lists, the membership of these mailing lists is kept confidential, and only available to selected CEP staff members for the purpose of list management.
We also collect personal data that you provide, on a voluntary basis, when you fill in a form on our website, requesting for information.
C. THE PURPOSE AND LEGAL BASIS FOR USING YOUR PERSONAL DATA
When you fill in a form on our website asking for information, the purpose is to provide you the information about the Consumer Empowerment Project and its initiatives: in this case, the legal basis of such processing is the legitimate interest. You are not obliged to provide us your personal data visiting our Website. Only in case you will fill in the Form, you shall provide us your personal data so we will able to give you the necessary information and assistance.
If you want to keep in touch with CEP and subscribe our newsletters or receive updates on upcoming events or other initiatives organized or promoted by CEP or its partners, you may be asked to give your consent: if this occurs, the legal basis of the processing is the data subject’s consent.
D. SHARING PERSONAL INFORMATION WITHIN DATA PROCESSOR AND WITH SERVICE PROVIDERS
Your personal information won’t be transferred to any Third Country and it will be shared only for the purposes listed in the present privacy notice with Data Processors appointed by Synallagma in charge of the management of the communication and public relation services.
E. RETENTION POLICY
The Data Controller will keep your personal data for 12 months from the fulfilment of your request. At the end of the above-mentioned period, all your personal data will be erased.
However, The Data Controller will continue processing the data of those who have express their consent to subscribe our newsletters or receive information on upcoming events or other initiatives organized or promoted by CEP and its partners, accordingly, to point C). In this case, the Data will be stored until the data subject subjects request for them to be deleted.
F. SECURITY
The Data Controller implements and maintains appropriate technical and organizational security measure, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to personal information. The measures the Data Controller and the Processors adopt, include the execution of confidentiality appointment of the employees and staff members and service providers; limiting the access to personal information; destroying the personal information when it is no longer needed for the purposes for which it was collected. As the security of information depends in part on the security of the computer or device you use to communicate with the Data Controller and the security you use to protect user names and passwords, please take appropriate measures to protect this information.
G. DATA SUBJECTS’ RIGHTS
At any moment you can exercise the following rights writing to hello@cep-project.org:
– to access personal information
– rectify or erase personal information
– limit the processing of your personal information
– object to how we use your personal information
– obtain a copy personal information
– lodge a complaint with your local Supervisory Authority, but we kindly ask you to attempt to resolve any issue with us before contacting your local authority.
According to the art. 11 of the EU Regulation n. 679/2016, we may ask you to provide us further information to confirm your identity, otherwise we won’t be able to accomplish your request. As the security of information depends in part on the security of the computer or device you use to communicate with us and the security you use to protect (where relevant) user names and passwords, please take appropriate measures to protect this information.
