PERSONAL DATA PROTECTION STATEMENT FOR USERS
The Global Alliance for Banking on Values (hereinafter “GABV”, “we”, “us”, “our”), is established as a Dutch not-for-profit foundation. GABV, its partners and supporters recognize the importance of protecting your Personal Data and the Personal Data of Users (as defined below).

This Personal Data Protection Statement covers all Personal Data collected and used by GABV for the purposes of the GABV Summit and Annual Meeting 2019 and this website related to the event. This Personal Data Protection Statement is intended to inform you about what types of Personal Data we might collect or hold about you, how we use it, who we share it with, how we protect it and keep it secure, and your rights about your Personal Data. We process your Personal Data in accordance with the applicable legal requirements, including the European General Data Protection Regulation 2016/679 (“GDPR”).

We may update this Personal Data Protection Statement at any time as our activities change. In such case, we will post the newest version to this website and indicate the date of the new version. We encourage you to regularly review the updates of this Personal Data Protection Statement. “Personal data” means any information or pieces of information that could identify you either directly or indirectly. This means that Personal Data includes things like email/home addresses, usernames, user generated content, financial information, IP address, etc.

“User(s)” means any prospects, customers, service providers, partners, subcontractors, candidates and more generally anyone who is in contact with us (hereinafter “you” or “your”).

“Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1. What are the principles for processing Personal Data?
GABV is the “data controller” for the purposes of collection and use of the Personal Data. GABV determines the purposes and the means of the processing of your Personal Data. This means we have responsibility for the Personal Data that you share with us.

We are committed to:

Obtain and process your Personal Data fairly and lawfully;
Obtain your Personal data for specified, explicit and legitimate purposes, and not process it subsequently in a manner that is incompatible with those purposes; Process only Personal Data that is adequate, relevant and not excessive in relation to the purposes for which it is obtained and its further processing; Ensure that your Personal Data is accurate, complete and, where necessary, kept up-to-date; Store your Personal Data for a period no longer than is necessary for the purposes for which it is obtained and processed and in accordance with applicable legislation and statute of limitations. Our partner, Vancouver City Savings Credit Union (“Vancity”) is operating this website on our behalf and managing various aspects of the event, including registration, so will be Processing your Personal Data provided for these purposes and pursuant to our directions.

2. What Personal Data do we collect, why and how do we use it?
As a User of our services and our websites, there are many ways that you might share your Personal Data with us, and that we might collect it.

We might collect or receive Personal Data from you via our websites, forms, services, or otherwise. Sometimes you will provide your Personal Data to us directly (e.g. when you contact us via our websites, when you ask for a quote estimate, when you subscribe to one of our services, sometimes we collect it indirectly (e.g. using cookies to understand how you use our websites) or sometimes we receive your data from other third parties, including our partners and service providers, such as Vancity.

The following table sets out the ways in which we collect your data, the types of data we hold about you, how and why we use it, and the legal basis for collecting it. In addition, when we collect data through forms, including electronic forms, some of the uses will be obvious. Where we require information from you to provide or avail you of a service, we will indicate the mandatory fields. Failure to provide required data could prevent you from accessing a service.
In which context is your Personal Data collected? What types of Personal Data may we hold about you? How and why we may use it? What is our legal basis for processing your Personal Data?
Subscription to a service or event
Information collected during the subscription to one of our services or events
  • Name and surname
  • Email address
  • Postal address (invoicing)
  • Occupation
  • Company details
  • LinkedIn account
  • Phone number
  • Transaction information (details regarding the service subscribed, transaction number, services history, etc.)
  • Payment information
To
  • Process your order
  • Manage payment
  • Manage any contact you have with us regarding your order
  • Provide you with event updates
  • Inform you of future GABV events
  • Seek feedback on how to improve the event
  • Manage any dispute relating to your order
  • Run statistics
  • Facilitate networking between all attendees at the event
  • Performance of a contract: To provide you with the service you requested
Provision of a service
Information collected during the seminar or services you have requested
  • Name and surname
  • Email address
  • Occupation
  • Company details
  • LinkedIn account
  • Phone number
  • Data relating to the commercial relationship: details regarding the service subscribed, the duration, correspondence with the client, etc.)
To
  • Provide you with the service or seminar
  • Allow you to access additional services in the course of the seminars or other services we provide
  • Manage any contact you have with us during the provision of the service
  • Manage the commercial relationship with you
  • Manage any request or dispute relating to a service
  • Facilitate networking between all attendees at the event
  • Performance of a contract: To provide you with the service you requested (subscription)
Conclusion of a specific agreement Information collected when you provide us with a product or service
  • Name and surname
  • Email address
  • Postal address
  • Function
  • Company name
  • Phone number
  • Billing data
To
  • Create and manage supplier/vendor files
  • Manage contracts, orders, deliveries, invoices and accountings
  • Performance of a contract: To manage the contractual relationship with you
Newsletter and commercial communications subscription
  • Name and surname
  • Email address
  • Function
  • Company name
  • Phone number
To:
  • Send you marketing communications prior to event registration (where you have asked us to)
  • Send you marketing communications regarding the event (where you have asked us to)
  • Keep an up to date suppression list if you have asked not to be contacted
  • Run analytics or collect statistics
  • Consent: No direct marketing communication is sent to you if you have not consented to receive it
  • Legitimate Interest: To tailor our marketing communications and understand their effectiveness, to help us better understand your needs and improve our services, to develop our business
  • Compliance with a legal obligation:To keep your details on a suppression list if you have asked us not to send you any direct marketing anymore
Online browsing
Information collected by cookies or similar technologies (“Cookies”*) as part of your browsing on the GABV event website * Cookies are small text files stored on your device (computer, tablet or mobile) when you are on the Internet.
Data related to your use of our website:
  • Pages you navigated from
  • Pages you looked at
  • Duration of your visit
  • Depth of visit
  • Path of visit
  • Conversion pathway
  • Bounce rate
Technical information:
  • IP address
  • browser information
  • device information
  • operating system
Data related to your internet browsing habits through the use of third party cookies:
  • Search queries
  • Website advertising interactions
  • Items and links viewed
  • To tailor our services for you:
    • to send you recommendations or marketing communications based on your interests
    • to display our website in a tailored way
    • to display relevant advertising messages to you when you are outside of our website.
  • To allow proper functioning of our website:
    • proper display of the content,
    • interface personalisation such as language
    • parameters attached to your device including your screen resolution
    • improvement of our website for example, by testing new ideas.
  • To ensure the website is secure and safe and protect you against fraud or misuse of our websites or services
  • To run statistics:
    • To improve our offers
    • To know how you discovered our website
    • To measure the effectiveness of our marketing campaigns.
  • Legitimate interest: To ensure we are providing you with websites and communications that are working properly, are safe and secure and are continually improving, to develop our business
  • Consent: For cookies that are not necessary for the functioning of our website
Inquiries
Information collected when you ask questions relating to our services
  • Name and surname
  • Email address
  • Function
  • Company name
  • Phone number
  • Other information you have shared with us regarding your enquiry
  • To answer your Inquiries
  • Where needed, to connect you with the relevant services
  • For statistics purposes
  • To send you quote estimates when you ask for it
  • Consent: To process your enquiry
  • Performance of a contract: To provide you with the information requested in the context of the contract between you and GABV
  • Legitimate interest: To help us better understand our Users’ needs and expectations and therefore improve our services

3. Notification and Consent
In many jurisdictions, Personal Data protection laws do not generally require we obtain your consent, or express consent, for the collection, use or disclosure of your Personal Data for the purposes listed in the chart above. However, where required by law, we will endeavour to obtain your consent.

4. When do we disclose your Personal Data?
Some of your Personal Data may be accessed:

Within GABV.
This will only be done on a need-to-know basis and where necessary to provide you with the services you have asked for, or in the context of a contract between you and GABV, or with your consent (in particular for marketing purpose).
By trusted service providers acting as subcontractors, such as Vancity, which will carry out certain services necessary for the purposes indicated above on our behalf (marketing services, hosting services, database maintenance, etc.).
Service providers may only access the Personal Data needed to perform the services, and may not use your Personal Data for any other purpose. These service providers will only act upon GABV’ instructions and will be contractually bound to ensure a level of security and confidentiality for your Personal Data that is the same as the level GABV is bound to ensure and to comply with applicable personal data protection laws and regulations.
GABV may also share your Personal Data with third parties, for other purposes authorized or required by applicable law or with your prior consent, including in the following circumstances:

To protect the rights, property or safety of GABV, our Users, our employees or others; or In the event of a merger or sale of GABV assets (in such case your Personal Data will be disclosed to the prospective buyer or successor); or To comply with a legal obligation or to respond to legal proceedings of any nature, Court orders, any legal action or implementing enforcement measures that are required by the competent authorities; or For other purposes required by applicable legislation or with your prior consent.

5. Where do we store your Personal Data?
GABV operates all over the world, works with many partners and uses various service providers located abroad. Thus, the data that we collect from you may be transferred in and out of the European Economic Area (“EEA”) to a country located outside of the EEA.

Where GABV transfers Personal Data, including outside of the EEA, this will always be done in a secure and lawful way by executing Standard Contractual Clauses which have been approved by the European Commission as providing an adequate level of protection for your Personal Data, or other mechanism being considered as ensuring an adequate level of protection, or by ensuring appropriate levels of protection when transferring to a country determined to have adequate protections, such as Canada.

6. How long is your Personal Data retained?
We will keep your Personal Data only as long as necessary for the purposes of the processing for which it was collected (typically the length of the contract). We may, however, keep your data for a longer period of time in application of specific legal or regulatory provisions and/or to comply with applicable statute of limitations periods. In case of longer data retention for other reasons, we will inform you of such reasons and of the applicable retention period upon collecting your Personal Data.

7. How is your Personal Data protected?
We are committed to keeping your Personal Data secure, and taking reasonable precautions to do so. We implement organisational and technical measures in accordance with this Personal Data Protection Policy and applicable laws and regulations to protect your Personal Data against any unauthorized access and modification, disclosure, loss or destruction. We contractually require the same from service providers who handle your Personal Data for.

8. Your rights
In accordance with applicable Personal Data protection laws and regulations, you benefit from a certain number of rights in respect of your Personal Data, namely:

A right of access and information: you have the right to be informed in a concise, transparent, intelligible and easily accessible form of the way in which your Personal Data is processed. You also have the right to obtain (i) confirmation as to whether or not Personal Data concerning you are being processed, and, where that is the case (ii) to access such Personal Data and obtain a copy thereof.

A right to rectification: you have the right to obtain the rectification of inaccurate your Personal Data. You also have the right to have incomplete Personal Data completed, including by means of supplying a supplementary statement.

A right to erasure (‘right to be forgotten’): in some cases, you have the right to obtain the erasure of your Personal Data. However, this is not an absolute right and GABV may have legal or legitimate grounds for keeping such Personal Data.

A right to data portability: you have the right to receive your Personal Data which you have provided to GABV, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller. This right only applies when the processing of your Personal Data is based on your consent or on a contract and such processing is carried out by automated means.

A right to object to processing: you have the right to object at any time to the processing of your Personal Data. When you exercise your right to object, on grounds relating to your particular situation, to a processing based on the legitimate interest of GABV, GABV may, however, invoke compelling legitimate grounds to continue the processing. In some cases, you may have the right to require the restriction of certain processing of your Personal Data.

The right to revoke your consent, at any time, to processing that is based on your consent: you may revoke your consent to the processing of your Personal Data when such processing is based on your consent. The revoking of consent does not prohibit lawful processing carried out on the basis of prior consent.

The right to file a complaint with the supervisory authority: you have the right to contact your data protection authority, privacy commissioner, or other regulator to complain about GABV’ Personal Data protection practices.

The right to give instructions concerning the use of your data after your death: you have the right to give GABV instructions concerning the use of your Personal Data after your death.

The right to obtain a copy of the standard contractual clauses if applicable, signed by GABV when your Personal Data is transferred outside of the EEA.

We may require proof of your identity and full details, before we process requests from you.

9. Contact
If you have any questions or concerns about how we treat and use your Personal Data, would like additional information or would like to exercise any of your rights above, please view the GABV Data Protection Policy or contact Mr. Jasmin Panjeta at jasmin.panjeta@gabv.org