DNS4EU privacy policy
DNS4EU PRIVACY POLICY
Date of issue 16.10.2023
About this Privacy Policy
This document provides information to the individual(s) (also the “data subject(s)”) on the method and extent of personal data processing when accessing the website related to the DNS4EU Project at https://www.joindns4.eu/ (the “Privacy Policy”).
This privacy policy is provided by the Coordinator of the DNS4EU project, as the controller:
Whalebone, s.r.o.
Jezuitská 13/14
602 00 Brno, Czech Republic,
Reg. No.05120403
registered under the file No.C 93547 in the Commercial Register kept by the Regional Court in Brno, Czech Republic.
How to contact us
If a visitor has additional questions or require more information about our Privacy Policy, it is possible to contact us through email contact@joindns4.eu or our DPO at: dataprotection@whalebone.io or write to us to the above listed address.
Personal data processed when using the website
This privacy policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or we collect in Join DNS4EU.
Information we collect
Join DNS4EU follows a standard procedure of using log files. These files log visitors when they visit websites. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.
The usage data may be used for automated profiling to evaluate visitor’s potential interest in deliverables of the DNS4EU Project.
We track the domains from which visitors come to collect statistics on DNS4EU’s site traffic for usage and trend analysis.
Cookies
DNS4EU utilizes “cookies”, to learn more about how we use cookies check DNS4EU Cookie Policy.
Personal data actively provided by website’s visitor are, namely:
- when registering for a newsletter: email address
- when registering for a webinar: name, surname, e-mail address, company name, telephone number.
- when contacting us directly: any other information the visitor may choose to provide
Purpose of the processing and legal basis
We process personal data only to the extent necessary in each case.
-
Based on data subject’s consent
The data subject may withdraw the consent at any time by sending a written notice to us or e-mail us; this includes, e.g.: subscription to newsletter or e-book or other informational communication, registration for a webinar, promotions, contact enquiries.
With respect to“direct marketing”, the data subject can opt-out of receiving any marketing information at any time by using the unsubscribe link provided in every email.
-
Based on contract or prospective contract
Potential customers and anyone who may have a question for our consultants about the deliverables of the DNS4EU project.
-
Based on legal obligation
We may process personal data when it is required for compliance with legal regulations, order or other obligations to which we are subject.
-
Based on legitimate interest
We also process personal data insofar as it is necessary to safeguard the legitimate interests of DNS4EU, its Consortium members after deliberate consideration of data subject's interests; this includes, e.g.:
- to improve and evaluate the quality and performance of our websites and to follow usage trends (based on pseudonymized data);
- sharing personal data within DNS4EU Consortium for internal administrative purposes (e.g. a list of workshop participants available to Consortium members participating in the workshop)
- secure our applications and systems; and
- establish, exercise or defend our legal rights.
Retention period
We store the data as long as necessary in accordance with the applicable regulations, as long as there is our legitimate interest, or until we receive a request for deletion from the data subject.
Further, we retain the personal data collected in order to process the data subject’s request submitted via an online form until the request is processed.
In the case of newsletter subscription, the personal data is processed from the date of collection until the individual chooses to unsubscribe from the newsletter via the link provided in every email with the newsletter.
Once we no longer have a legitimate interest to process the personal data or once the processing period has expired, the personal data is anonymized (where allowed by law), deleted or destroyed. If this is not possible (e.g. if the data is stored in backup archives), the personal data will be stored securely and isolated from further processing until it can be deleted.
Recipients of personal data
For the specific purposes, we engage external providers who may have access to or process personal data (the hired personal data processors). We use the services of the following categories of personal data recipients:
- service providers related to our IT, operation and communication services
- admin and development providers of the websites, providers performing analysis and improvements of our websites
We take full responsibility in relation to the relevant data protection legislation and ensuring that the personal data is equally protected in case it is processed by an external provider contracted by us.
DNS4EU Consortium members – Personal data will only be made available to other Consortium members, if and insofar as this is necessary for the Project (e.g. a list of workshop participants available to Consortium members participating in the workshop).
Rights of Data Subjects
The data subjects have the following rights regarding the processing of their Personal Data as stipulated in Art. 15 to 18 GDPR:
- right to be informed,
- right to access,
- right to rectification,
- right to data portability,
- right to erasure,
- right to restrict processing.
Right to object
In case of data processing in the public interest and to protect legitimate interests, the data subject has the right to object to data processing, in relation to a particular situation, and we are required to assess the processing to ensure compliance with applicable regulations and legally binding rules.
In case of direct marketing, we cease processing personal data for such purposes after the objection.
How to contact the supervisory authority
If the individual is of the opinion that the processing of personal data by us is not in accordance with the data protection regulations or the individual is not satisfied with the information provided by us, he/she may contact the competent supervisory authority, that is for the Czech Republic “Urad pro ochranu osobnich udaju”: https://www.uoou.cz/
Privacy policy of 3rd parties
DNS4EU website contains links to other websites. DNS4EU Privacy Policy applies only to DNS4EU Project website, so when clicking on a link to another website, e.g. a social media provider, their privacy policy shall apply.