EUROPEAN ASSOCIATION OF HEALTH LAW PRIVACY POLICY
The European Association of Health Law (hereafter “EAHL”) is deeply committed to ensure the compliance of its activities with the right to privacy and the right to data protection.
This privacy policy provides the information required by the General Data Protection Regulation (hereafter “GDPR”) regarding the processing of personal data by or on behalf of the association.
If you follow any link on the EAHL website to any other website or make use of any third-party services, please be aware that they may have their own privacy policies and that EAHL do not assume any responsibility or liability for their processing of personal data.
I. Name & address of the data controller
The data controller is the European Association of Health Law.
The European Association of Health Law is a non-profit organization created under the Dutch law.
The corporate seat is established at Faculty of Law, University of Bergen, P.O. Box 7806, N-5020 BERGEN.
n° EAHL registration number: 34299335
the Dutch Chamber of Commerce (Kamer van Koophandel)
The office is established : Faculty of Law, University of Bergen, P.O. Box 7806, N-5020 BERGEN.
email : <eurohealthlaw@gmail.com>
II. Data processing purposes
Personal data may processed to the extent of what is necessary for:
1° enabling the technical operation of the website and improving user’s experience;
2° registering and managing the association’s members and national contact points information and members list (the latter including their pictures if they agree to);
3° offering information and activities;
4° promoting the association’s activities;
5° allowing the access to the restricted parts of the website including the forum and members’ list;
6° statistics purposes;
7° administrative purposes (including managing and billing member’s fee);
8° archives;
9° liability issues;
10° when required by law (e.g. by law enforcement agencies or for tax issues);
11° Further processing of personal data may occur if compatible with the purposes pursued by the association and for which personal data may have been collected and processed.
Personal data are collected when you are navigating through the website and when you are using the services offered to the registered members (like the forum or the members’ list).
You may be invited to provide personal data and other information (on your organization for instance) when registering for conferences/trainings, answering surveys, subscribing to newsletters, downloading samples, applying for a job, or using the collaborative and interactive tools available on the xebsite. These data will be processed for answering your requests, invoicing and processing payments, keeping our records up to date. They also may be used for marketing our services and events or for any other purposes specified in the forms or on the website.
III. Legal basis for processing personal data
The legal basis for processing personal data chosen by the EAHL is GDPR Article 6.1 (f). The legitimate interests pursued by the EAHL is the realization of its purpose and objectives as detailed in its constitutive act https://eahl.eu/content/eahl-constitution.
In second order, Article 6.1 (b) also gives a legal basis to the processing of personal data when data processing is processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
In any case, Article 6.1 (c) is another legal basis to the processing of personal data when data processing is necessary for compliance with a legal obligation to which the controller is subject (such as archives, billing, auditing, etc.).
Normally, the EAHL does not process special categories of personal data.
IV. Cookies
The cookies policy is detailed on the website https://eahl.eu/cookies-policy.
V. Hosting of the website
The website is hosted by 123-REG Ltd (United Kingdom, The Shipping Building, Old Vinyl Factory, Blyth Road, Hayes, UB3 1HA) (registered in England and Wales n° 05306504 & VAT n° 927 1292 22).
VI. Accessing the forum
The access to the forum is managed by SiteLock (8701 East Hartford Drive, Suite 200, Scottsdale, AZ 85255, USA). SiteLock has certified its compliance with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework.
VII. Recipients of personal data
The EAHL share some of the collected personal data with its hosting service provider and other technical providers and solely to the extent of what is strictly necessary. If these providers are located outside the EEA, the EAHL will ensure that they provide the same protection to your personal data.
VIII. Duty to provide personal information
Failing to process the necessary personal data for navigating through the website will oppose the functioning of the website.
Providing some personal data may be necessary to benefit from some services (such as participating to the forum or to register as a member of the association). Failing to provide the necessary data will oppose the possibility to access those services or to be a registered member of the association.
IX. Storing duration of personal data
1° Personal data are deleted as soon as the purpose of the processing is achieved.
Longer data retention may occur when required by law and for liability and archiving purposes.
2° IP addresses are processed during the session to ensure the functionality of the services. After, IP address and log files are completely deleted, unless provided otherwise by law.
3° Some data processing may occur to optimise the website and to ensure the security of our system.
4° Evaluation of the data for marketing purposes may occur. Statistical evaluation of datasets may also take occur.
5° As a rule, data analysis is done in anonymous way as much as possible.
X. Data subject’s rights
The data subject is entitled to :
1° the right to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability;
2° withdraw consent where it is the legal basis of the data processing (this does not affect the lawfulness of previous data processing);
3° to lodge a complaint with a supervisory authority;
4° except when forbidden by the GDPR or any other applicable law or any judiciary injunction.
To exercise your rights, please contact the EAHL :
1° by letter (mail) send to : Faculty of Law, University of Bergen, P.O. Box 7806, N-5020 BERGEN.
2° by email at the following address : <eurohealthlaw@gmail.com>
______________________________________________________________________