BIC’s data privacy statement
- Last updated: 24.05.2018
- The legal basis for this processing of personal data is Article 6 (1) b) of the EU General Data Protection Regulation (GDPR).
- Bio-Based Industries Consortium is the body responsible for the processing of personal data.
We, Bio-Based Industries Consortium, assume the role of controller as per the EU General Data Protection Regulation (GDPR). In other words, we are the legal entity that shall determine the purposes and means of the processing of personal data. Our contact details are as follows: European Forestry House,
Rue du Luxembourg 66,
HOW IS YOUR PERSONAL DATA PROCESSED?
1. GENERAL STATEMENT ABOUT THE PURPOSES OF DATA PROCESSING
The main reason we process personal data is to fulfil our contractual obligations towards the BIC members, e.g. the users of the BIC Member Area, its applications and related websites. The processing of data is required for us to be able to offer you a personal account to access the BIC Member Area, and herewithin to offer you networking services around the annual BBI Calls.
2. INFORMATION YOU PROVIDE TO US
This refers to data we obtain from you via the BIC Membership application form and information you publish and send on the BIC Member Area such as:
- Login details (e.g. username and password)
- Profile information (e.g. job title, company name, industry, educational background, contact options, photo)
- Topic selections and Pitches
- Messages, Meeting invitations, network invitations
- Event participation
- Administrative information and billing details
There are both mandatory entry fields (which as marked as such) and optional information you can provide.
LOGIN AND PROFILE DETAILS
When you register to BIC Member Area and its applications we have to record and process certain personal data as your login data and profile data. The legal basis for this processing of personal data is Article 6 (1) b) of the EU General Data Protection Regulation (GDPR).
You have to fill in certain mandatory fields when you register. This information is essential for a functioning professional network, e.g.
- E-mail address to log in
- Title, first name, family name
- Job title and organisation
- Place of work and postal address of organisation
Your login data is not visible to third parties. We will not ever pass this information on to third parties under any circumstances.
As well as the mandatory information we require, you can also enter additional information to complete your profile, activate the different service features within the BIC Member Area. These information are shared with the other users of the BIC Member Area.
You can retract most optional information at any time for the future by deleting the respective data in your profile.
We use the electronic mail address(es) that you have provided to us to send you regular updates about the BIC Member Area activities, upcoming events and newsletters and/or status e-mails electronically.
You can unsubscribe to newsletters at any time, either in your notification settings in the BIC Member Area or by clicking on the link provided at the end of e-mail newsletters.
Generally speaking, the content you publish on the BIC Member Area and your feedback on specfic data, for example topic selections, are visible to all users in BIC Member Area.
For individual features the level of visibility may be more restricted (e.g. only visible to contacts). In such cases you will be informed about visibility when using the respective feature. Please be aware that even if you restrict visibility, the content and reactions that you share may become visible beyond your own network if your contacts choose to share this information with other users.
The BIC Member Area is available to BIC members only, and we will collect and use your billing details to process payments and invoices in accordance with the method of payment you choose. Your billing details are saved for payment and invoice processing when your user term is automatically renewed.
Billing details cannot be seen by other users under any circumstances.
We save this data until your user account is deleted or beyond this point, until a time when the data is no longer subject to any tax-related, commercial or other statutory storage obligations.
The legal basis for this processing of personal data is Article 6 (1) b) of the EU General Data Protection Regulation (GDPR).
3. INFORMATION WE AUTOMATICALLY OBTAIN THROUGH YOUR USE OF BIC MEMBER AREA
THE PURPOSES OF TRACKING AND YOUR OPT-OUT OPTIONS
One reason for tracking is to ensure and preserve the legitimate interest of the protection of users, the security of user data, BIC Member Area and related websites and applications. To this end, we save the data we record for up to 90 days in its full form. Only a limited number of our employees with the respec-tive authorisation rights have access to this data. The legal basis for this processing of personal data is Article 6 (1) f) of the EU General Data Protection Regulation (GDPR).
PROVISION OF OUR SERVICE
The tracking and analysis of user behaviour helps us to review and optimise the effectiveness of our service, and to correct any errors and faults. We endeavour at all times to adapt our products and services to the needs of our users. Personalisation is an important aspect here. Analysing data obtained from tracking is necessary to make personalised services available to you in accordance with the contractual purpose of BIC Member Area and to ensure that you gain the great possible benefit from BIC Member Area. The implicit feedback that you provide to us through our tracking of your usage of BIC Member Area forms an important part of understanding what content you are more or less interested in, and being able to suggest you relevant data and contacts.
4. YOUR RIGHTS
You have legal rights available to you with regard to data access, rectification, erasure, restriction of processing and objection to processing, as well as the right to data portability, amongst others. In addition, you can withdraw any consent you may have given to data processing at any time, and have the right to lodge a complaint with a supervisory authority.
RIGHT TO OBJECT
You have the right to object at any time to the processing of personal data concerning you, pursuant to Article 6 (1) f) of the EU GDPR. This shall also apply to any profiling carried out on the basis of these provisions. Please use our contact form to submit any objection.
RIGHT OF ACCESS
You have the right to demand confirmation as to whether we process your personal data. If this is the case you are entitled to receive information about this personal data.
You also have a right to access the following information:
- The reasons for the data processing
- The categories of personal data that are processed
- If possible the planned period of time that the personal data will be saved for, or if this isn't possible then the criteria used to determination this time period
- The existence of a right to rectification or erasure of your personal data and/or the right to restriction of processing by the controller, or a right to object to this processing
- The existence of a right to lodge a complaint with a supervisory authority
- All available information about the origin of the personal data if the data was not obtained from the person in question
- The existence of automated decision-making including profiling pursuant to Article 22 (1) and (4) of the EU GDPR and – at least in some cases – insightful information about the logic involved plus the scope and aims of the repercussions of this kind of processing for the person affected
If personal data is passed on to a third country or an international organisation, you have the right as the person affected to be informed about the respective guarantees (pursuant to Article 46 of the EU GDPR) regarding this sharing of data.
RIGHT TO RECTIFICATION
You have the right to demand that we correct any incorrect personal data concerning you with immediate effect. Taking the purposes of processing into account, you have the right to demand the completion of any incomplete personal data – including by means of a supplementary explanation.
RIGHT TO ERASURE
You are entitled to demand that we delete your personal data without delay if one of the following applies: The personal data is no longer required for the purposes for which it was collected or processed in some other way. You withdraw your consent that the processing was based on pursuant to Article 6 (1) a) or Article 9 (2) a) of the EU GDPR , and there are now no valid legal grounds for processing. You submit an objection to the processing of your data pursuant to Article 21 (1) of the EU GDPR and there are no overriding justifiable grounds for the processing, or you submit an objection to the processing of your data pursuant to Article 21 (2) of the EU GDPR. The personal data was processed unlawfully. The deletion of the personal data is required to fulfil a legal obligation in accord-ance with EU law or the law of individual member states. The personal data was recorded in relation to the offer of information society services directly to a child, pursuant to Article 8 (1) of the EU GDPR. Once you have made your request we are obliged to delete the data with immediate effect. The lawfulness of the data processing for the period between the consent and the withdrawal of this consent shall remain unaffected.
RIGHT TO RESTRICTION OF PROCESSING
You are entitled to demand a restriction to the processing of your personal data in cases where you dispute the correctness of the personal data, for a period of time that allows the controller to review the correctness of that personal data. If the processing is unlawful and you reject the erasure of the personal data in favour of demanding a restriction to the use of the personal data we will fulfill this request. Processing will also be restricted if we no longer require your personal data for the purposes of processing but do require it for the establishment, exercise or defence of legal claims. Or if you have objected to processing pursuant to Article 21 (1) of the EU GDPR, for as long as is not yet ascertained whether the justifiable grounds of the controller outweigh your grounds. You will be informed in advance by us should the restriction be revoked.
RIGHT TO DATA PORTABILITY
You have the right to receive personal data concerning you that you have made available to us in a structured, conventional and machine-readable format, and you also have the right to transfer this data to another controller without being impeded by us to whom the personal data has been made available. The condition is that a) processing is based on consent pursuant to Article 6 (1) a) of the EU GDPR or Article 9 (2) a) of the EU GDPR or on a contract pursuant to Article 6 (1) b) of the EU GDPR, and b) the processing is conducted with the help of automated processes. When exercising your right to data portability you have the right to demand that the personal data is transferred directly from us to another controlling body, provided this is technically viable.
RIGHT TO WITHDRAW CONSENT
If processing is subject to your consent you have the right to withdraw this consent at any time. This shall not affect the lawfulness of any processing that took place with your consent up until its withdrawal.
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with the supervisory authority responsible for our company.