Privacy statement EPHNA

1 General

1.1 The European Public Health Nutrition Allliance (EPHNA) is committed to protecting your personal data. In this Privacy Policy we provide information about the way in which we handle personal data.

1.2 In all cases, EPHNA adheres to the applicable privacy legislation, including the General Data Protection Regulation (GDPR). This means that we in any case:

– Process your personal data in accordance with the purpose for which it was provided, these purposes and type of personal data are described in this Privacy Policy;
– Processing of your personal data is limited to only those data that are minimally necessary for the purposes for which they are processed;
– Ask for your explicit consent if we need it for the processing of your personal data;
– Have taken appropriate technical and organisational measures to ensure that your personal data is secured;
– Not pass on personal data to other parties, unless this is necessary for the execution of the purposes for which they were provided;
– Inform you of the rights you have with regard to the processing of your personal data.

2 What personal data do we process?

2.1 We process the personal data that you have provided to us, for example in the context of the delivery of products and/or services to you or have been obtained by us because you have used our website, completed a contact form or signed up for our newsletter.

2.2 The personal data we process about you may be the following:

• Your name;
• your address;
• contact information such as your phone number and email address;
• other data, such as data from your account on X, LinkedIN or other social media services;
• the IP address of the computer you use to visit our website (see also our cookie statement);

3 Purposes of use

3.1 We use your personal data for a number of different purposes. These are the following.

3.1.1 Executing an agreement
If you enter into an agreement with us, we will ask for your contact details. This data can also be used for invoicing.

3.1.2 Maintaining contact with you
Your contact details are kept in our customer system and can be used for, among other things, sending newsletters, updates, invitations to events and seminars and sending information that you have requested from us.

3.1.3 Improving our product and service information and carrying out targeted marketing campaigns
We are happy to provide you with relevant information. For this purpose, we analyse the following data:

3.1.4 Interaction data
Personal data obtained from contact between [customer] and you, for example via our website.

3.1.5 Online behavioural data
Personal data that EPHNA processes about your online behavioural, such as your preferences, opinions, wishes and needs. We can deduce this data, for example, from your surfing behaviour on our website, reading our newsletters or because you have requested information. See also “Use of cookies”.

3.1.6 Analysing the use of our website
The user statistics of the website enable us to get a picture of, among other things, the number of visitors, the duration of the visit and which pages of the website are viewed. It concerns the collection of generic data, without information about persons. We use the information obtained to improve our website.

4 Legal basis of the processing

4.1 We only process personal data if there is a legal basis for doing so. The legal grounds on which we process personal data are:

• permission
• on the basis of an agreement or in the run-up to the conclusion of an agreement
• a legitimate interest

4.2 Permission
If we have asked for your consent to process your personal data and you have given this consent, you also have the right to withdraw this consent at any time.

4.3 Agreement or in the run-up to the conclusion of an agreement
If you have concluded a contract with us, we will process personal data if and insofar as this is necessary for the execution of the order.

4.4 Legitimate interest
We may also process personal data if we have a legitimate interest and do not disproportionately infringe on your privacy. For example, we use your contact details to invite you to relevant meetings.

5 Third parties engaged by us (processors)

5.1 We may engage service providers (processors) for the processing of your personal data who process personal data exclusively on our behalf. We enter into a processing agreement with these processors. This processing agreement states, among other things, that the processors only act on our instructions and may not use the personal data for their own purposes.

5.2 For example, processors we use are parties that offer and host software that we use. We also engage ICT service providers to manage our IT network. We also use third-party services to send our newsletters.

6 Disclosure of personal data to third parties outside the EU

6.1 In the context of our services, it may be necessary to share personal data, including with parties (processors) located outside the European Economic Area (EEA). These parties guarantee an appropriate level of security of personal data. In our contractual relationship with this processor, we use model contracts approved by the European Commission (Decision 2021/914) as appropriate precautionary measures. Your personal data will not be shared with third parties for commercial purposes.

7 Your rights

7.1 Each person can exercise certain rights with regard to his or her personal data on the basis of the law. For example, you have the right to access, rectify and delete personal data. You can also object to the use of your data or ask for this use to be restricted. In certain cases, you can even request your data and take it with you to another party. For all these questions, please contact us via our telephone number or secretary@ephna.eu.

8 Retention periods

8.1 We store your personal data for as long as necessary for the purpose for which we obtained the data, unless a statutory retention period applies.

8.2 If we process your personal data on the basis of your consent, we will delete your personal data if you have withdrawn your consent or if you have opted out.

9 Complaints?

9.1 If you have any complaints about how we handle your personal data, you can contact us by sending an email to secretary@ephna.eu or calling us. We are happy to help you find a solution. If that does not work, you can always turn to the Dutch Data Protection Authority.