The European Partnership for Democracy (EPD) manages your personal data in compliance with the European Union’s General Data Protection Regulation (GDPR). Find out what personal data we process for which reasons and how it’s being processed.
Who we are
European Partnership for Democracy (EPD)
Rue Froissart 123-133, B-1040 Brussels, Belgium
What personal data do we collect and why we collect it
EPD only stores data when this is necessary for our objectives and when we have a legal basis for storing and processing the data. All the personal data we hold is password protected so that only EPD staff can access this. Below, you can read what type of data we collect via which channel and what we use it for.
When you sign up to Beyond Ballots, you are asked to opt in twice, and provide your name and email address. This is necessary for us in order to send you our weekly democracy updates. We use the MailerLite system to send Beyond Ballots to our subscribers and analyse click and open rates. This is necessary to understand our readers’ interests and thereby improve the content of the newsletter.
MailerLite is based in Vilnius, Lithuania, and compliant with the EU’s GDPR. Any data you provide is stored on secure servers by MailerLite. They only process data when given permission to do so and don’t sell or rent email addresses to any third party. In this relationship, EPD is the “Data Controller” and MailerLite the “Data Processor,” in GDPR terminology. To find out more about how MailerLite manages your data, visit https://www.mailerlite.com/privacy-policy.
You can unsubscribe from the newsletter at any point without having to give a reason why. Every newsletter contains a reminder of the possibility to unsubscribe. The information is then automatically deleted from the register.
When you use our website, your personal data is shared with a third-party company based outside the EU called Google Analytics (owned by Google LLC), whose software we use to track and analyse how people use and interact with our website. Any data collected is stored on secure servers by EPD and Google.
Google Analytics is compliant with the EU-US Privacy Shield Framework, which means they are certified to receive data from EPD. In this relationship, EPD is deemed the ‘Data Controller’ and Google Analytics the ‘Data Processor’. To find out more about how Google manages data, visit www.google.com/privacy. Moreover, our website is WordPress-based, which allows us to manage your data erasure or data report requests. By default WordPress does not collect data.
Please see our cookies policy below for more information on which data Google Analytics collects.
We also store the names, positions and email addresses of our partners external to our organisation. These include other democracy support organisations, NGO networks, universities, think tanks and EU officials. These are necessary for achieving the 3 key objectives of EPD: advocacy, programmes and knowledge sharing. Data processing is limited to direct exchanges with these external contacts, like requests for meetings, invitations to events, sharing publications, requests for cooperating on programmes, etc. An assessment showed both parties have a legitimate interest in this data processing and we thus rely on this legal basis for storing the names, positions and email addresses of external partners.
How do we keep your data safe?
We store your data securely in our password protected server and shared cloud. These are accessible only to EPD staff, not members’ staff. We will regularly check our contacts database to ensure all information is accurate and necessary.
A “cookie” is a small file sent out by the servers of Google Analytics and WordPress and installed on the hard disk of your computer. The information stored on these cookies can only be read by us and only during the duration of the visit to the Website.
Tracking cookies from Google Analytics are used to determine the surfing behaviour of visitors.
- The time and length of the visit
- The new visitor / recurrent user
- Pages visited
- Browser + Operating system
- Screen resolution
- Origin of traffic
- Service provider
You can refuse or block cookies by changing the configuration parameters of your navigation system.
- Right of access and inspection: You have the right – at any time, free of charge – to access your personal data and how we use it.
- Right of correction, deletion and restriction: You are free to communicate your personal data, or not. You always have the right to ask us to correct, supplement or delete your personal data. You may also ask to restrict the processing of your personal data. You acknowledge that we cannot send you Beyond Ballots anymore without your email address, if you were to send us a request to delete your personal data.
- Right of opposition: You have a right of opposition against the processing of your personal data for serious and legitimate reasons.
- Right of free data transfer: You have the right to obtain your Personal Data that are processed by us in a structured, commonly used and machine-readable form and/or to transfer them to other controllers.
- Right to withdraw consent: In so far as the processing is based on your prior consent, you have the right to withdraw this consent. In other words, you can opt out of Beyond Ballots without giving a reason for it.
Please contact firstname.lastname@example.org you have any questions or requests regarding your personal data.
Updated May 24th2018.