I. General Information
The protection of your personal data is important to us. Therefore, we collect very little data in the first place. We collect and process the data exclusively in compliance with the requirements of applicable law, in particular the General Data Protection Regulation (GDPR). In the following text, you will find more detailed information about how we process your personal data as well as, at the beginning, some information about us.
II. Controller of the Data within the Meaning of the GDPR
Operating this website and responsible (as Controller within the meaning of the GDPR) for your personal data transmitted to us, is:
ID4me AISBL
Rue Belliard 20
1040 Brussels
Belgium
Phone: +49 721 97670859
E-mail: info@ID4me.org
Board of Directors: Thomas Keller, Dr. Jörg Schweiger, Rafael Laguna de la Vera, Andreas Gauger
Registered in the Belgian Banque-Carrefour des Entreprises under the number 0711.986.433.
III. The Data We Collect
1. Our Website
When you visit our website, we receive the following information:
We learn the IP Address used when visiting the website and the exact date and time of the visit, and we see which (sub-)pages and files are accessed on our website.
We also receive information about the browser you use (product and version information), your operating system and the type of device you use. Furthermore, we receive information about the website from which you come to our website as well as information about which website you access via our website.
Our website does not use cookies, except for the sub-page where you can administer the personal settings for the usage of the e-mail lists. There, the cookie is necessary from a technical point of view in order to allow users to change and save their personal settings. A cookie is a file that is placed on the user’s data carrier. It stores certain settings and pieces of information to be exchanged with the website having set the cookie via the user’s browser.
2. E-Mail
If you send us an e-mail, we learn your e-mail address and receive any other data you may submit in the e-mail.
3. Newsletter and E-Mail Lists
When you subscribe to our newsletter or one of our e-mail lists, we obviously need your e-mail address. Voluntarily, you can also fill in your name when subscribing.
To the extent you have given your consent (cf. Section IV.3.), the newsletter uses a tracking technology in the form of a so-called web beacon which allows various statistical evaluations and analyses. A web beacon is a small (image) file in the size of a pixel. When you open the newsletter, the web beacon collects and transmits to us your e-mail address, the time of access to the newsletter or links therein, the IP address used as well as technical information about your system and browser.
4. Slack Channel
If you would like to join a Slack channel we administer, you must sign up for it through the Slack platform. In this context, we will learn your e-mail address and your username, should you choose one (which is optional). In addition, we receive other data that you specify when using the Slack channel.
IV. Purpose of the Data Processing and Legal Basis
1. Our Website
We collect the above-mentioned data (cf. Section III.1.) so that we can display and you can use our website. In addition, we use the data to ensure that we can operate the website free of failures and interferences, which to do we have a legitimate interest. Likewise, we have a legitimate interest in presenting the website to users in a pleasing manner by taking into account the technical systems used by them. The legal basis for the data processing is Art. 6 (1) lit. f GDPR.
2. E-Mail
We save the e-mail address used by you when writing to us so that we can answer your e-mail. Any other information you may have provided within your e-mail could also be relevant for replying to your request. To the extent your e-mail aims at concluding a contract with us or leads to the conclusion of such a contract, the legal basis for the data processing is Art. 6 (1) lit. b GDPR. With regard to other inquiries, we have a legitimate interest in processing your data in order to reply to your request and for possible future communication with you (Art. 6 (1) lit. f GDPR).
3. Newsletter and E-Mail Lists
We use the e-mail address provided by you to send you the newsletter or to enable you to participate in the e-mail list. The optional specification of your name serves to address you personally in the context of communication with you. In addition, we can identify you more easily if you want to exercise your rights in relation to data processing. The processing of the data is based on your consent (Art. 6 (1) lit. a GDPR) which you grant when you register for the newsletter or the respective e-mail list.
The other data mentioned in Section III.3., we collect for statistical purposes and to further improve our newsletter, for example by adjusting its content to the interests of the readers. The processing of this data is also based on your consent (Art. 6 (1) lit. a GDPR) which you can issue during the registration process for the newsletter.
4. Slack Channel
We need the e-mail address you used to sign up for our Slack channel and your username (if you have chosen one) to manage the members of the channel and, as the case may be, to communicate with you through the channel. Any other information you provide in connection with the use of the channel, we may need to reply to your respective request.
V. Retention and Erasure
1. Our Website
The data accessible to us when you use the website (cf. Section III.1.) is stored in its entirety only temporarily for the duration of the communication with our website. Thereafter, we store the data only in an anonymized form which means that it is no longer possible to attribute it to a specific user or a specific IP address.
2. E-Mail
We store your e-mail address and any other data contained in your e-mail for as long as necessary in connection with your request. We check at regular intervals whether the storage of the data is still required in this respect. If this is not the case, we delete all data. However, this does not apply if applicable law contains an obligation to store the data for a longer period of time. In this case, we store the data for as long as prescribed by such applicable law. For example, this would apply if your request led to the conclusion of a contract.
3. Newsletter and E-Mail Lists
As long as you are registered for the newsletter or for one or more e-mail lists, we will store the data mentioned in Section III.3. At any time, you can unsubscribe from the newsletter or the e-mail lists or revoke your consent to the processing of your data (cf. Section VIII. below). To the extent you revoke your consent, we will then delete your personal data and, naturally, cease to provide the services and to perform the data processing which would require and were based on your consent.
If you send messages to an e-mail list, these messages will generally remain available through the archives of the e-mail lists on our website. If you wish to delete any or all of the e-mails you sent to our e-mail lists, please let us know.
4. Slack Channel
As long as you participate in the Slack channel, we will save the e-mail address used by you as well as the username you may have chosen. If you leave the Slack channel, the communications you sent there will stay available for the duration of the channel’s existence. If you wish to delete any or all of your messages, please let us know.
VI. Service Providers
In order to provide you with our website and the additional services described above, we cooperate with providers of corresponding services. These service providers inevitably come into contact with the respective data (cf. for each service Section III.). Therefore, we have not only carefully selected the providers but entered into contractual agreements with them in order to ensure their compliance with the law.
Specifically, these providers are:
– 1&1 IONOS Internet SE (website and e-mails)
– The Rocket Science Group LLC d/b/a Mailchimp (newsletter)
– Open-Xchange AG (server for e-mail lists)
– Slack Technologies, Inc. (Slack channel)
The Rocket Science Group LLC and Slack Technologies, Inc. have their headquarters in the United States of America. Therefore, when you use the respective services, your data may be transferred to the United States of America. However, both companies are certified under the so-called Privacy Shield. As a result, they are obliged to ensure an adequate level of data protection within the meaning of the GDPR.
Furthermore, we use the software GNU Mailman to provide the e-mail lists. This is open source software. GNU Mailman is not provided by a company but a community of volunteers working together to maintain and improve the software. With respect to our e-mail lists, the software is operated by us.
VII. Transfer of Your Personal Data
We will not transfer or disclose your data to third parties unless and to the extent we are so obliged by applicable law and / or so ordered by a competent authority or court of justice. In particular, we do not disclose the data for advertising or market research purposes.
VIII. User’s Rights
You have several rights with regard to the processing of your personal data:
You have a right of access to your personal data (Art. 15 GDPR) and can request the rectification of personal data when the data is incorrect or incomplete (Art. 16 GDPR). If it is not necessary (anymore) that your personal data is stored you have the right to obtain from us the erasure of the data (Art. 17 GDPR). Under certain conditions, you also have the right to obtain from us the restriction of the processing of your personal data (Art. 18 GDPR). You also have a right to data portability (Art. 20 GDPR).
To the extent the data processing is based on your consent, you have the right to revoke your consent at any time. The revocation of your consent does not affect the lawfulness of the processing that occurred prior to such revocation.
According to Art. 21 (1) GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 (1) lit. f GDPR. In case of such an objection, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing of the data serves the establishment, exercise or defence of legal claims.
If you wish to exercise any of your rights or have any questions with respect to the processing of your data, you can contact us by sending an e-mail to info@id4me.org. Alternatively, you can use the contact details given in Section II.
In addition, you have a right to complain to the competent data protection authorities. The data protection authority responsible for us can be reached under the following contact details:
Commission de la protection de la vie privée
Rue de la Presse 35
1000 Brussels
Phone: +32 (0)2 274 48 00
Facsimile: +32 (0)2 274 48 35
E-Mail: commission@privacycommission.be
Website: www.privacycommission.be
Furthermore, you can usually contact the data protection authority of the EU member state in which you live or work.
IX. No Legal Obligation to Provide Your Personal Data
There is no legal or contractual obligation on your part to use our services described above and thus provide personal data to us. However, without providing the necessary data you cannot make use of these services.
X. Hyperlinks
The website contains hyperlinks to third party websites. If you follow a hyperlink to one of these websites, please note that we are not responsible in any way for the content of such websites nor the data protection policies applied there. Please check the data protection conditions of such websites before you transfer personal data to them or their operators.
XI. Version
This privacy policy was last updated on 21 March 2019 and is currently valid. We reserve the right to make changes to this policy if need be, in particular in order to implement new legal requirements and to adjust to technical or other developments of our website. The most current and thus applicable version of the privacy policy will always be available at our website.