Image

Privacy Notice

Last updated on May 24, 2018

This privacy notice provides you with information as required by Article 13 General Data Protection Regulation (GDPR) about the processing of personal data that takes place when you visit this website or that may take place if you should make use of certain functionalities of this website. It covers both the publicly available sections of the EuroPriSe website and the "expert internal" section (log-in required) that is reserved for admitted EuroPriSe experts. The notice provides different subsections for the publicly available sections and the "expert internal" section in respect of most of the topics addressed below.     

Table of Contents

Controller

The controller of the processing is: 

EuroPriSe GmbH
Joseph-Schumpeter-Allee 25
53227 Bonn
Germany
Phone: +49 228 763 679 30
Fax: +49 228 763 679 09
E-Mail: contact@european-privacy-seal.eu

Recipients

EuroPriSe GmbH discloses your personal data to service providers who support us in operating this website and in managing processes that are related to the operation and maintenance of the website. These service providers process the personal data as processors on behalf of EuroPriSe GmbH. We make use of the following service providers:

2B Advice GmbH
2B Advice s.r.o. 

Log files

Your IP address is processed when you access the publicly available sections of this website and/or the "expert internal" section (this is necessary due to technical reasons). EuroPriSe GmbH processes your IP address only for the purpose of establishing and maintaining a communication channel between our website and your technical device that allows you to make use of the funcionalities of the website. Your IP address is not kept beyond your visit on our website. In particular, IP addresses are not stored in log files (cf. below for details regarding log files).

Publicly available sections of the website

During access to publicly available sections of the website, specific data are stored in log files. Log data cannot be related to individual persons. This means that the keeping of the log files does not result in the processing of personal data.

In detail the data stored in log files are:

  • Name of the requested file
  • Date and time of the request
  • Message if transmission was successful

EuroPriSe GmbH does not store visitors’ IP addresses.

The log files are used for statistical purposes only.

"Expert internal" section (log-in required)

Access to the “expert internal” section of the website requires log-in and is reserved for admitted EuroPriSe experts. During access, specific data are stored in log files. Log data cannot be related to individual persons. This means that the keeping of the log files does not result in the processing of personal data.

Logging attributes do not differ from those when accessing the publicly available sections of the website (without being logged in).

This means that only the following data are stored in log files:

  • Name of the requested file
  • Date and time of request
  • Message if transmission was successful

Log files do not contain any personal data such as visitors’ names or user names. Furthermore, EuroPriSe GmbH does not store visitors’ IP addresses.

The log files are used for statistical purposes only.

Cookies

This website makes use of http cookies. An http cookie is a small piece of data sent from a website and stored on the visitor's device (computer or other technical device) by their web browser while the visitor is browsing the website.

Publicly available sections of the website

A session cookie is stored in the device used by a visitor of the website.

The name of the cookie is ASP.NET_SessionId. It is used to clearly identify a session (time during which the user browses the website). Legal basis for the processing of this cookie is Article 6(1)(f) GDPR, the legitimate interest pursued is to offer certain functionalities of this website to its visitors by upholding a session. The cookie is deleted when visitors close their browsers.

"Expert internal" section (log-in required)

Two session cookies are stored in the device used by a visitor of the “expert internal” section of the website:

The name of the first cookie is ASP.NET_SessionId. It is used to clearly identify a session (time during which the user browses the website). Legal basis for the processing of this cookie is Article 6(1)(f) GDPR, the legitimate interest pursued is to offer the functionalities of the "expert internal" session by upholding a session. The cookie is deleted when visitors close their browsers.

The name of the second cookie is .ASPXAUTH. This cookie serves the purpose to authenticate EuroPriSe experts who want to access the “expert internal” section. A token that is used for authentication is stored in the cookie. This allows continued authentication of visitors of the “expert internal” section during one session. Legal basis for the processing of this cookie is Article 6(1)(f) GDPR, the legitimate interest pursued is to offer the functionalities of the "expert internal" session by upholding a session and being able to authenticate the respective visitor during that session. The cookie is deleted when visitors close their browsers.

External links

Publicly available sections of the website 

Hyperlinks on this website may lead to external sites that are not controlled by EuroPriSe GmbH. Such external links are marked explicitly, e.g.

http://ec.europa.eu/justice/data-protection/article-29/documentation/opinion-recommendation/ [external link]

Secured external connections are identified as such, e.g.

https://secure.edps.europa.eu/EDPSWEB/ [external link / TLS]

All other hyperlinks within this website point to internal resources that are subject to the conditions stated in this privacy notice.

EuroPriSe GmbH cannot assume any responsibility for contents or privacy policies of external resources. This privacy notice and the assurances provided in it do not apply to visitors’ actions on, or related to, such third-party sites.

"Expert internal" section (log-in required)

The above remarks regarding external hyperlinks that form part of the publicly available sections of the website hold true for the "expert internal" section as well. 

Contacting

Publicly available sections of the website

The following contact opportunities are available for visitors of the publicly available sections of the website:

Contact webform

Visitors of the website may make use of the contact webform at

https://www.european-privacy-seal.eu/EPS-en/Contact

in order to provide feedback on the website or other topics to EuroPriSe GmbH or to make an enquiry with us.

When completing the webform, visitors are required to provide the following information:

  • Subject
  • Message
  • Captcha (captchas are used to prevent abusive use of the form by means of bots)

Visitors may also provide the following information on a voluntary basis:

  • Name
  • E-mail address (the email address is necessary if a visitor wants EuroPriSe to reply to his or her message)

Transmission of information is secured by means of transport layer security (TLS).

The submitted information may contain personal data.

Contact e-mail address

Visitors of the website may contact EuroPriSe GmbH via e-mail (contact@european-privacy-seal.eu) in order to provide feedback on the website or other topics or to make an enquiry with us. 

EuroPriSe GmbH supports the exchange of encrypted e-mail messages. Visitors who want to send an encrypted e-mail to EuroPriSe can find our PGP key at https://www.european-privacy-seal.eu/EPS-en/EuroPriSe-Imprint. Please configure your PGP client to the extent that it provides the highest possible level of security.   

The submitted information may contain personal data. 

Information about the processing of personal data resulting from the use of these contact means 

EuroPriSe GmbH processes the information submitted via the contact webform or by e-mail for the purpose of processing the enquiry of the visitor of the website. If the visitor should submit contact information such as an e-mail address or a phone number via the form, then EuroPriSe GmbH may make use of this information to respond to the respective enquiry. If the visitor should aim at ordering services of EuroPriSe GmbH, the information might also be processed to take steps at the request of the visitor prior to entering into a contract and for the performance of such a contract (if applicable). 

Legal basis for the processing of personal data that may result from the use of the contact webform is Article 6(1)(b) or Article 6(1)(f) GDPR. In respect of Article 6(1)(f) GDPR, the legitimate interest pursued is to process and answer your enquiry timely and as excpected. Your personal data are deleted as soon as they are no longer necessary in relation to the purpose(s) stated above, unless EuroPriSe GmbH is subject to legal retention periods. Commercial letters and other relevant data are stored for a period of ten years as is required by German commercial law (if applicable). 

"Expert internal" section (log-in required)

The "expert internal" section does not offer any contact opportunities that go beyond the ones that are available for visitors of the publicly available sections of the website.  

Webforms

Besides the contact webform that was already addressed under the heading "contact", the EuroPriSe website also contains the following webforms: 

Webforms that form part of the publicly available sections of the website:

Webforms that form part of the "expert internal" section (log-in required):

Publicly available sections of the website

Dispute resolution complaint form

EuroPriSe dispute resolution is an important tool to guarantee continued compliance of certified products, services and websites with EU data protection law. Anyone who has evidence that an IT product, an IT-based service or (publicly available parts of) a website that has been awarded the seal does not meet the relevant EuroPriSe requirements anymore may file a complaint with EuroPriSe GmbH. For this purpose, EuroPriSe provides a dispute resolution complaint webform that is available at    

https://www.european-privacy-seal.eu/EPS-en/Dispute-Resolution-Complaint-Form.

In order to avoid misuse of the dispute resolution procedure, EuroPriSe requires complainants to indicate their real first name and last name as well as a valid e-mail address. They are required to affirm that they are aware of the fact that EuroPriSe will disclose this contact information to the seal holder concerned by the complaint.  

In addition, complainants are required to provide the following information when completing the webform:

  • Name of the seal holder concerned by the complaint
  • Name/URL of the product, service or website concerned by the complaint
  • Version of the product, service or website concerned by the complaint (if applicable)
  • Validity period of the seal that has been awarded to the product, service or website concerned by the complaint
  • Description of the complaint
  • List of documents and/or other proof supporting the complaint
  • Indication whether the complaint was filed in the internal dispute resolution process previously
  • Information on the result of the internal dispute resolution process or indication of extraordinary circumstances that make the internal dispute resolution process dispensable in the case at hand (as applicable)
  • Captcha (captchas are used to prevent the abusive use of the form by means of bots)

As can be gathered from the list above, the submitted information does not only contain personal data about the complainant, but may also contain personal data about the seal holder concerned by the complaint. If this should be the case, then EuroPriSe GmbH will inform the seal holder (or the respective employee) in accordance with Article 14 GDPR. 

EuroPriSe GmbH processes the personal data collected via this form for the purpose of dispute resolution only (basic information about EuroPriSe dispute resolution is available at https://www.european-privacy-seal.eu/EPS-en/Dispute-Resolution). This involves the disclosure of the data to the seal holder concerned by the complaint. EuroPriSe may also disclose information on the circumstances of the case to the EuroPriSe experts who were involved in the certification project concerning the product, service or website concerned by the complaint. Complainants who want to submit the webform are required to affirm that they are aware of the fact that these disclosures will / may take place.

Legal basis for the processing of personal data that may be submitted via this form is Article 6(1)(f) GDPR, the legitimate interest pursued is to uphold the high quality of the EuroPriSe certification scheme and to assist the complainant in enforcing any rights or interests that may have been violated by a seal holder. EuroPriSe GmbH records and tracks all complaints as well as actions undertaken to resolve them in accordance with the International Standard ISO/IEC 17065:2012. Personal data that is processed in the context of EuroPriSe dispute resolution is stored during the complete dispute resolution process and beyond (as long as EuroPriSe GmbH is required to be able to demonstrate that the respective dispute resolution activities took place).  

Transmission of information is secured by means of transport layer security (TLS).

Online contracting form for EuroPriSe website certification

With online contracting for website certification, EuroPriSe offers a quick and convenient way to contract with both the EuroPriSe certification authority and selected legal and technical EuroPriSe experts who are qualified to evaluate websites according to EuroPriSe. Companies and other organisations who are determined to undergo the certification process with their websites ("ordering companies or organisations") may choose to make use of the online contracting option.

Online contracting involves the completion and submission of a webform which is available at

https://www.european-privacy-seal.eu/EPS-en/Website-Privacy-Certification-Order-Form.

When using the webform, ordering companies or organisations are required to provide the following information:

  • First name of the contact person for the contracts to be concluded
  • Last name of the contact person for the contracts to be concluded
  • Legal name of the ordering company or organisation
  • Address of the ordering company or organisation
  • Phone number of the contact person for the contracts to be concluded
  • E-mail address for correspondence regarding the contracts to be concluded
  • URL of the website to be certified
  • Full name of the owner of the website to be certified
  • Brief description of the nature and the purpose of the website to be certified
  • Contact data of the legal and the technical EuroPriSe expert who have been selected by the ordering company or organisation to conduct the evaluation of the website
  • Captcha (captchas are used to prevent abusive use of the form by means of bots)

Ordering companies or organisations may also provide the following information on a voluntary basis:

  • Title of the contact person for the contracts to be concluded
  • Product order numbers used by the ordering company when referring to the contracts to be concluded

As can be gathered from the list above, the submitted information contains personal data about the contact person on the part of the ordering company or organisation as well as personal data about the selected legal and technical EuroPriSe experts. EuroPriSe GmbH will inform the EuroPriSe experts about the submission of the form in accordance with Article 14 GDPR.

EuroPriSe GmbH processes the personal data collected via this webform for the purpose of contracting with the ordering company or organisation and for the performance of the contract only. This contract governs the legal relationship between the EuroPriSe certification authority and the ordering company or organisation as far as the certification of the indicated website is concerned. In addition, the EuroPriSe certification authority discloses the data regarding the ordering company or organisation and the respective contact person that it collects via the webform to the EuroPriSe experts who have been selected and indicated by the ordering company or organisation. This disclosure takes place to facilitate and speed up contracting between the ordering company or organisation and the selected experts.

Legal basis for the processing of your personal data that results from the use of the online contracting webform is Article 6(1)(b). Your personal data are deleted as soon as they are no longer necessary in relation to the performance of the contract, unless they are required for a legal dispute that is related to the contract or unless EuroPriSe GmbH is subject to legal retention periods. Commercial letters and other relevant data are stored for a period of ten years as is required by German commercial law.

Transmission of information is secured by means of transport layer security (TLS).

"I love EuroPriSe, because..." form

EuroPriSe stakeholders such as seal holders or accredited EuroPriSe experts may make use of the "I love EuroPriSe, because..." webform to indicate what they like best about EuroPriSe. The webform is available at    

https://www.european-privacy-seal.eu/EPS-en/why-we-love-europrise.

When using the webform, EuroPriSe stakeholders are required to provide the following information:

  • Reasoning why they love EuroPriSe
  • First name
  • Last name
  • Company name
  • Indication of their relationship with EuroPriSe (EuroPriSe expert, EuroPriSe customer, member of the EuroPriSe advisory board, other)
  • E-mail address
  • Captcha (captchas are used to prevent abusive use of the form by means of bots)

They may also provide the following information on a voluntary basis:

  • Salutation

EuroPriSe GmbH processes the personal data collected via this form for marketing purposes. More precisely, the information (except for the e-mail address) may be displayed on the EuroPriSe website and in EuroPriSe marketing materials.

Personal data submitted via the webform is processed on the legal basis of consent. Before submitting the webform, EuroPriSe stakeholders are required to agree to the following declaration of consent: "I give EuroPriSe permission to send me a confirmation e-mail, to retain the information collected with this form and to display this information (except for my e-mail address) as well as my company logo on their website and in their marketing materials. I am aware of the fact that I have the right to revoke my consent to my data being used for these marketing purposes at any time."

Transmission of information is secured by means of transport layer security (TLS).

Registration Form(s) for EuroPriSe Expert Admission Workshops

As an element of the admission procedure for prospective EuroPriSe experts, EuroPriSe GmbH conducts EuroPriSe Expert Admission Workshops on a regular basis. Privacy professionals who want to participate in an admission workshop may register for this event via submitting a registration webform. As soon as the registration for a workshop is open, this is indicated on the respective event overview webpage and a hyperlink to the registration webform is added to this page. All current event overview pages are hyperlinked at       

https://www.european-privacy-seal.eu/EPS-en/Expert-Admission.

When using the webform, future participants are required to provide the following information:

  • First name
  • Last name
  • Company name
  • Address
  • E-mail
  • Phone
  • VAT ID
  • Indication of their role / professional background (legal privacy expert, technical privacy expert, manufacturer, other)
  • Indication whether they will also attend the EuroPriSe Expert Enhancement Workshop
  • Captcha (captchas are used to prevent abusive use of the form by means of bots)

They may also provide the following information on a voluntary basis:

  • Salutation
  • Fax
  • Optional billing address (if it is different from the address that was already indicated in the form)

EuroPriSe GmbH processes the personal data collected via this form for the purpose of organising and conducting the respective EuroPriSe Expert Admission Workshop.

Transmission of information is secured by means of transport layer security (TLS).

Registration Form(s) for EuroPriSe Expert Enhancement Workshops

EuroPriSe GmbH offers advanced education to its accredited experts and any other interested privacy professionals in the form of EuroPriSe Expert Enhancement Workshops on a regular basis. Privacy professionals who want to participate in an enhancement workshop may register for this event via submitting a registration webform. As soon as the registration for a workshop is open, this is indicated on the respective event overview webpage and a hyperlink to the registration webform is added to this page. All current event overview pages are hyperlinked at       

https://www.european-privacy-seal.eu/EPS-en/Expert-Enhancement-Workshops.

When using the webform, future participants are required to provide the following information:

  • First name
  • Last name
  • Company name
  • Address
  • E-mail
  • Phone
  • VAT ID
  • Indication of their role / professional background (legal privacy expert, technical privacy expert, manufacturer, other)
  • Captcha (captchas are used to prevent abusive use of the form by means of bots)

They may also provide the following information on a voluntary basis:

  • Salutation
  • Fax
  • Optional billing address (if it is different from the address that was already indicated in the form)
  • Indication whether they meet certain criteria that allow them to participate in the event free of charge (this is only relevant for admitted EuroPriSe experts) 

EuroPriSe GmbH processes the personal data collected via this form for the purpose of organising and conducting the respective EuroPriSe Expert Enhancement Workshop.

Transmission of information is secured by means of transport layer security (TLS).

"Expert internal" section (log-in required)

Nomination form for the election of an expert representative to the EuroPriSe advisory board

The EuroPriSe advisory board includes one EuroPriSe expert to represent the interests and opinions of all experts. This expert representative is determined by a vote of all accredited experts for a term of three years. At the beginning of each election, a nomination form is activated in the "expert internal" section. Subsequently, all accredited experts are informed about the voting process and may then use the nomination form to nominate themselves or other experts.

When using the webform, EuroPriSe experts are required to provide the following information:

  • First name of the candidate
  • Last name of the candidate
  • Introduction of the candidate
  • Rationale why the candidate is qualified for being a board member
  • Experiences of the candidate on EU / international level
  • Further comments that the expert deems to be relevant for the nomination

In addition, EuroPriSe experts are required to affirm   

  • that they obtained the consent of the candidate prior to the submission of the information via the webform or
  • that they nominate themselves

At the bottom of the webform and directly above the button that is to be clicked to submit the form, experts are made aware of the fact that the information that is submitted via the webform will be disclosed to all voting experts in order to introduce the candidate to them. It is worth noting that prior to the disclosure, EuroPriSe will verify that all nominated experts indeed consented to the nomination and the disclosure of the nomination data.

EuroPriSe GmbH processes the personal data collected via this webform for the purpose of conducting the voting process for the expert representative to the EuroPriSe advisory board.

Transmission of information is secured by means of transport layer security (TLS).

Your rights

As a user of this website, the General Data Protection Regulation (GDPR) assigns the following rights to you:  

Right of access (Article 15 GDPR)

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed. Where personal data concerning you are being processed, you have the right of access to these data and to the information listed in Article 15 GDPR.

Right to rectification (Article 16 GDPR)

You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. During access to publicly available sections of the website, specific data are stored in log files. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. 

Right to erasure (Article 17 GDPR)

You have the right to obtain erasure of personal data concerning you without undue dealy where one of the grounds listed in Article 17 applies (e.g., the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed). 

Right to restriction of processing (Article 18 GDPR)

You have the right to obtain restriction of processing where one of the grounds listed in Article 18 applies (e.g., you have objected to processing pursuant to Article 21 GDPR pending the verification whether legitimate grounds of EuroPriSe GmbH override your legitimate grounds).

Right to data portability (Article 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readyble format and the right to transmit those data to another controller without hindrance, where one of the grounds listed in Article 20 GDPR applies.

Right to object (Article 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR. In such a case, EuroPriSe GmbH will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member state of your habitual residence, place of work or place of the alleged infringement if you should consider that the processing of personal data concerning you infringes data protection regulations. The competent supervisory authority for companies that are situated in Bonn / Germany is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Germany 

Questions

If you should have any questions about this privacy notice, please do not hesitate to send an email to contact@european-privacy-seal.eu.

EuroPriSe GmbH supports the exchange of encrypted e-mail messages. Visitors who want to send an encrypted e-mail to EuroPriSe can find our PGP key at https://www.european-privacy-seal.eu/EPS-en/EuroPriSe-Imprint.   

EuroPriSe GmbH processes the information that is submitted via e-mail for the purpose of processing and responding to the enquiry of the visitor of the website.

© 2008 - 2017 | EuroPriSe GmbH - European Privacy Seal | Handelsregister-Nr. (Commercial Register No.): Bonn HRB 20387

No responsibility for the accuracy of the information. Contact | Privacy Notice | Imprint