Version 001 - Last Updated: 22 June 2023

At Eurodad, we take your right to privacy seriously and we are committed to protecting your personal data. This privacy notice outlines the information collected by Eurodad and how we use this information.

This privacy notice applies to the following websites: www.eurodad.org and https://knowledge.eurodad.org. Other specific web properties, such as our campaign sites, may use the same or have site-specific privacy notice. We will inform you of other use of your personal data not covered by this notice, and where the processing is based on consent, we will seek your approval. This privacy notice may be updated at any time. We strongly encourage you to visit this section of our site for the latest version of our privacy notice.

Navigate this privacy notice to understand:

1. Who we are and how to contact us
2. Scope of this privacy notice
3. Why we collect and process your personal data
4. The information we collect about you
5. Data Sharing, third-party services and international transfers
6. How we protect your data
7. Data retention
8. Rights you can exercise with regards to your data and how to apply them

1. Who we are and how to contact us

Responsible for your personal data is:

European Network on Debt and Development Asbl (EURODAD) 

Registered address:

Mundo-b building
Rue d'Edimbourg 18-26
1050 Brussels,
Belgium.

Registration number in the Register of Legal Entities (Brussels):

BE0850.769.479

If you have additional questions or require more information about our privacy notice, do not hesitate to contact us directly at [email protected]. 

2. Scope of this privacy notice

This privacy notice applies to the following categories of people:

Interested parties

• Visitors to our website who browse our site
• Newsletter subscribers who sign up to receive news and event updates about our activities and upcoming events
• Vendor contact personnel whom we communicate with in the course of their service provision to us (our prospective and active suppliers).
• Job applicants who visit our website to find open positions and share data as part of the application process (prospective employees).
  

Partner organisation and private company representatives, academics and any other category of individuals with which Eurodad partners or who reach out to us to request information about us or to propose a partnership.

This notice does not apply to: 

• Our employees

3. Why we collect and process your data

When you subscribe to our newsletters, register for our events, or indicate interest in receiving updates on our advocacy events and campaigns or other activities we engage in, we rely on your consent to process your personal data and send you newsletters, details of the event you registered for and event updates, respectively. For promotional purposes and in our legitimate interest, we do a media coverage (eg. photos and videos) of some of our events in which you may appear.

If you use the ‘contact us’ Form on our website, we rely on our legitimate interest to process your data and provide a response to you. We rely on your consent to process the personal data you provide when you register for events on our website.

When you apply for a job position at Eurodad, we rely on your consent to process the personal data that you provide us with.

When you provide your data to us, we will only use the data for the purpose for which it is provided, and to fulfil our legal obligations unless you consent to your data being used for other purposes.

In our legitimate interest, we process the personal data of partner organisations representatives to enable communication with partners, and collaboration for joint advocacy actions such as campaigns.

We also rely on legitimate interest when we process personal data in order to authenticate users and grant them access to our Knowledge Management Platform. 

When we enter into contract with partner organisations or companies, we process the personal data of their representatives and for this purpose, we rely on the performance of a contract.

Sometimes we process public data, e.g. data that are subject to a publication duty, such as the publication of your appointment as director of a company, or data that you made public yourself, such as information posted on your website, or data generally known in your region or which have appeared in the press.

4. The information we collect about you

• When you register to our Knowledge Management Platform, we collect your first name, last name, email address, country, organisation and preferred pronouns.
• When you submit an inquiry via our “Contact Us” Form, we collect your first name, last name and email address. You may provide your mobile phone number and address if you so wish; these data fields are optional.
• When you register for our newsletter or other email updates, we collect your first name, last name, email address, organisation, country and preferred pronouns .
• When you register for an event, we collect your first name, last name, email address, job title, organisation, country and preferred pronouns.
• When you register to be involved in our campaigns, we collect your first name, last name, email address, job title, organisation, country and preferred pronouns .
• When you apply for a job at Eurodad, we process your first name, last name, address, e-mail address, telephone number, motivation letters and any other information you provide to us in your CV and application.
• When you enter into a business contract with us, we collect your first name, last name, address, e-mail address, telephone number, bank account details and any other information necessary to enter into, and perform the contract.
• When you visit our website and depending on your cookie preferences, we collect your browser type, browser version and the pages on our site that you visit for analytical and statistical purposes to help improve our website. We do not collect the internet protocol (IP) address used to connect your device to the internet.

Information that third parties collect about you on our website

When you make use of social media plug-ins on our website (eg. Youtube), these third-party plug-ins may collect some information about you depending on your privacy settings on such social media platforms.

4.1 Cookies

Cookies refer to small pieces of text files sent to your web browser by a website you visit. Cookies are stored in your browser and allow us or a third party to recognise you, to personalise and make your next visit easier, recognise your device and store some information about your preferences or past actions. Cookies could either be "persistent" or "session" cookies. While session cookies are deleted at the end of the session, persistent cookies remain stored in the device until they expire.

When you visit our website, and to ensure the functionality of, and facilitate your navigation through our website, we process your data by the use of strictly necessary and functional cookies. For this purpose, we rely on our legitimate interest. In all other instances, including for analytical and marketing purposes, we rely on your consent to process your data through the use of cookies.

We collect the following information when you access our website: cookies preference, IP address, location, browser version, operating system, device model, browser User-Agent string, platform minor version, device brand and name and screen resolution.

You can refuse non-necessary cookies without consequences.

5. Data Sharing, third-party services and international transfers

When you register for events that are organised in collaboration with our partners, we may share your data with these partner organisations. In those exceptional cases, we will make the list of organisations available to you in our registration forms.

We will not sell your data and will never pass on your personal data to third parties other than in the cases mentioned above, unless we are obliged to do so on the basis of a statutory provision or a judicial ruling. We shall make reasonable attempts to inform you in advance about this, unless disclosure is subject to legal restrictions.

 We rely on third-party providers for some services such as web hosting and technical support. We engage third-party providers who are bound by obligations in relation to confidentiality and security of personal data and who act only on our instructions. For a list of our third-party providers, please see the list below.

Third party service providers

We rely on the following third-party services:

• Google Suite
• Microsoft
• NationBuilder
• Zoom
• Tectonica

Where necessary, we rely on standard contractual clauses in data processing agreements with third-party service providers for international transfers to third countries.

6. How we protect your data

To protect your personal data, we rely on multiple security measures. Some are implemented and maintained by our experts, others are provided for by the tools that we use, the policies we implement, and the reviews we carry out. 

We ensure that there are appropriate technical controls in place to protect your personal data. For example, our online forms are always encrypted and our network is protected by the use of SFTP, SSH, TLS, and is routinely monitored.

We undertake regular reviews of access controls to ensure that your personal data is accessible by only authorised persons. We train our staff regularly on privacy and data protection best practices to ensure that personal data is handled appropriately and with confidentiality.

Where we use third-party providers to process personal data on our behalf, we place strict obligations on them in relation to the security of the data and require them to use the data only as we instruct. In the case of international data transfer, we rely on standard contractual clauses in the data processing agreements to guarantee an adequate level of data protection rights and obligations. 

7. Data Retention

Your personal data will be stored for as long as is necessary to fulfil the purpose for which it was collected. We will also store your personal data to comply with our legal obligations under applicable law. We will delete your personal data at the end of the legal obligation to retain data. If it is determined that your personal data is no longer necessary to achieve the purpose for which it was collected, we may delete your data 1 year after such determination. When you subscribe to email updates, you may opt out by using the unsubscribe link at the bottom of the email.

For research and statistical purposes, we aggregate personal data such that you can no longer be re-identified. 

8. Rights you can exercise with regards to your data and how to apply them

8.1 What rights are available to you?

Relative to the processing activities outlined above (in the table provided in section 3), and provided that we can identify you, the following rights and what they afford are available to you:

The rights of access

You have the right to obtain, the following information from us: 

• What data is being processed about you;
• The purposes those activities serve;
• The recipients of the data;
• How long the data is needed and kept;
• Whether automated decision making is made that impacts your freedom and liberties;
• What applicable safeguards are applied when transferring your data and a copy of these documents.

The right to rectification

You have the right to request the rectification of inaccurate data or the completion of incomplete data.

The right to erasure

You have the right to request that we delete your data in the following cases:

• Data is no longer necessary
• You have objected to the processing under our legitimate interests and we have not been able to provide convincing evidence that these interests override your freedoms and liberties
• The processing takes place unlawfully (i.e., outside of the cases described in section 3)
• We have collected data from publicly accessible sources

We will not, however, be able to delete the data in the following cases:

• Were we are unable to identify you;
• In the instance of a running contract in which you are a party
• We must retain your information to comply with existing law (e.g., tax or invoice records if your data as a fleet manager appears in our sales and payment documents);
• For the establishment, exercise, or defence of legal claims.

The right to restriction

You have the right to request that we mark your data (restrict) against further processing in the following cases: 

• You contest the accuracy of the data;
• You believe the processing we carry out is unlawful;
• You believe your data is no longer needed relative to the original purpose of its collection.

The right to portability 

You have the following rights:

• To receive the personal data we hold about you in a structured, commonly used, machine-readable format;
• To request the direct transmission of that data to another organisation of your choosing

The right to object

You have the right to object to processing based on processing carried out in our legitimate interest and we will halt further processing (no longer process the data) until we have been able to demonstrate compelling legitimate grounds overriding your rights and freedoms. 

The right to lodge a complaint with a supervisory authority

Regardless of the restrictions listed above or the legal grounds for the processing of data listed in the table above, you have the right to contact a data protection authority of your choice and formulate a complaint. No restrictions are keeping you from exercising this right but we kindly request that you do so in cases where you have contacted us with the request to exercise one or more of the rights listed above and 

• You have not heard back from us within a month of your request;
• You have heard back from us but do not find our response satisfactory.

8.2 How can you exercise your rights?

Contacting us

You may contact us directly 

• By email: [email protected]
• By post: Eurodad, Rue d'Edimbourg 18-26, 1050 Brussels - Belgium
• By phone: +32 (0) 2 894 46 40

Contacting a data protection authority of your choosing

We are registered with the Belgian Privacy Commission: Commission for the Protection of Privacy, Drukpersstraat 35, 1000 Brussels, Tel +32 (0)2 274 48 00, Fax +32 (0)2 274 48 35, e-mail: [email protected]

A list of the available data protection authorities is available here.