Updated 23 May 2018
As a membership-based association dedicated to serving institutional philanthropy, we understand the importance of maintaining your privacy, keeping your personal information secure and complying with data protection laws. This policy describes what personal information we may collect from you, why and how we use this information, and the practices we maintain to ensure the integrity of your data.
2. Legal framework – privacy legislation
- the Belgian Data Protection Act of 8th December 1992 on the protection of privacy in relation to the processing of personal data (as amended) (the “Privacy Act”); and
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”); and
- All other applicable legislation regarding the protection of privacy and the processing of personal data;
3. Purpose for collecting personal data and legal basis
- achieve its purpose and exercise its activities and services to its members as foreseen in our statutes; and/or
- send out alerts on new documents and studies, updates, newsletters, info brochures, emails, marketing materials, invitations to events such as conferences (e.g. the annual EFC conference), exhibitions, launches, seminars and workshops and other information that may be useful to its members/affiliates and to others where they have given consent or it is in the legitimate interest to do this; and/or
- better understand its members’ needs and preferences in order to adjust its services hereto; and/or
- execute contract(s); and/or
- it is legally obliged to process the data or if it is necessary in the public interest.
For you as an EFC member/affiliate, this means that in the context of your membership (contractual basis), we hold and process personal data mainly for the following purposes:
- Manage your membership
- Send information we reasonably believe may be of interest to you
- Seek information from you, your organisation and your views on the priorities and services you would like us to provide to you.
For project implementation purposes (contractual basis), we will also hold and process data of persons engaged in concrete projects. We may also collect personal data of non-members if we manage your participation in an event or other activity of ours. In this case the lawful basis is the legitimate interest in line with our mission and statutes.
4. Personal data
The personal data the EFC can process are, amongst others, but not limited to: first name, last name, contact information (including email address, phone number, photo, function within your organisation), payment information you have provided in the context of membership or event registrations.
5. Transfer of personal data to third parties
5.1 The EFC guarantees that it does not transfer your personal data to third parties, unless:
- there is a legal obligation to transfer the personal data
- you have given permission to do so
- EFC has a legitimate interest to do so
5.2 The EFC will not sell personal data to third parties.
6. Storage period
The EFC stores the personal data for as long as is necessary to achieve the Purpose.
7. Your rights
Privacy legislation provides you with the following rights in relation to your personal data:
- to have access to and receive a copy of your personal data;
- to have your personal data corrected in case errors occur;
- to have your personal data erased in case:
- your personal data are no longer necessary to achieve the Purpose;
- you withdraw your consent and there is no other legal ground for the processing of the personal data;
- you object to the processing of the personal data and there is no other legal ground for the processing of the personal data;
- the personal data have been unlawfully processed;
- there is a legal obligation to erase the personal data;
- to have the processing of your personal data restricted;
- to have your personal data transferred to a third party (transferability);
- vito object against the processing of your personal data;
- to withdraw your consent to process your personal data;
- to lodge a complaint with the Commission for the Protection of Privacy (“Privacy Commission”) if you are of the opinion that the processing of your personal data breaches the Privacy Legislation.
In case you wish to exercise the above rights, and provided you prove your identity, you can send a written, dated and signed request by post to EFC, Rue Royale 94, 1000 Brussels, Belgium or by email to firstname.lastname@example.org.
The EFC commits to take all reasonable measures to safeguard the protection of the personal data through technical safety measures and an appropriate safety policy for its employees. The personal data are stored with the EFC, or, if applicable, with the processor of the personal data. Transfer and storage of personal data is never without risk and consequently, any damage that you may suffer from the unlawful use of your personal data by third parties cannot be collected from the EFC.
The EFC can solely be held accountable for damages which directly result from the processing of your personal data due to the fault or negligence of the EFC.
11. Applicable law and competent court
You agree that all disputes between you and the EFC regarding personal data and privacy issues, are exclusively subject to Belgian law, excluding any conflict of law principles. Any dispute regarding personal data and privacy issues belongs to the exclusive jurisdiction of the French speaking courts of Brussels, Belgium.