{"id":68,"date":"2020-06-03T10:21:27","date_gmt":"2020-06-03T08:21:27","guid":{"rendered":"https:\/\/www.eglcc.eu\/?page_id=68"},"modified":"2026-07-25T16:01:39","modified_gmt":"2026-07-25T14:01:39","slug":"data-privacy","status":"publish","type":"page","link":"https:\/\/www.eglcc.eu\/en\/data-privacy\/","title":{"rendered":"Data Privacy"},"content":{"rendered":"<div id='layer_slider_1'  class='avia-layerslider main_color avia-shadow  avia-builder-el-0  el_before_av_one_full  avia-builder-el-first  container_wrap fullsize' style='  height: 301px; max-width: 1600px; margin: 0 auto;' ><\/div><div id='after_layer_slider_1'  class='main_color av_default_container_wrap container_wrap fullsize' style=' '  ><div class='container' ><div class='template-page content  av-content-full alpha units'><div class='post-entry post-entry-type-page post-entry-68'><div class='entry-content-wrapper clearfix'>\n<div class=\"flex_column av_one_full  flex_column_div av-zero-column-padding first  avia-builder-el-1  el_after_av_layerslider  avia-builder-el-no-sibling  \" style='border-radius:0px; '><section class=\"av_textblock_section \"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\" ><div class='avia_textblock  '   itemprop=\"text\" ><h1>Data Privacy<\/h1>\n<\/div><\/section><br \/>\n<section class=\"av_textblock_section \"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\" ><div class='avia_textblock  '   itemprop=\"text\" ><p>Updated and effective as of: July 25, 2026<\/p>\n<p>This Privacy Policy applies to www.eglcc.eu and www.eglcc.com (further in this Policy as the \u201eSite\u201c), which is owned and operated by EGLCC, The LGBTIQ Chamber of Commerce, ekonomisk f\u00f6rening (ek. f\u00f6r.), a member-owned economic association registered in Sweden (further in this Policy as \u201cEGLCC\u201d, \u201cwe\u201d or \u201cus\u201d). The privacy policy further applies to third parties processing personal data on our behalf (\u201cprocessors\u201d). EGLCC reserves the right to change this Privacy Policy. You should check the Site periodically to review our current Privacy Policy, which is effective as of the effective date listed above.<\/p>\n<p>Please read the following carefully to understand\u00a0how we use your personal data, our efforts to protect your personal data, and the rights and options you have to control your data.<\/p>\n<p>Our processing activities take into consideration the applicable European and local EU Member States\u2019 legislation, including Regulation (EU) No. 2016\/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (\u201c<strong>GDPR<\/strong>\u201c), Directive 2002\/58\/EC of 12 July 2002 as amended by Directive 2009\/136\/EC (\u201c<strong>ePrivacy Directive<\/strong>\u201c), and any applicable national implementation laws or regulations or any subsequent laws or regulations that may follow them.<\/p>\n<p>This Privacy Policy does not apply to any personal data collected by third parties who are not processors acting on our behalf or instructions, for instance websites or apps that are not operated by EGLCC.\u00a0EGLCC\u00a0is not responsible for the way in which these third parties handle your personal data. We advise you to read the privacy statements of such third parties when, for instance visiting their websites in order to understand how these third parties collect and process your personal data.<\/p>\n<p>By accessing, visiting, using, submitting data to, or otherwise interacting with our website, you acknowledge that our use of your personal data will be carried out in accordance with this Privacy Policy.<\/p>\n<p>If you do not agree to the terms of this Privacy Policy, please do not use our services or provide personal data to us.<\/p>\n<h3>1. DEFINITIONS AND OVERVIEW<\/h3>\n<p>The definitions below mirror or translate the definitions provided under Article of 4 GDPR.<\/p>\n<ul>\n<li>\u201c<strong>Personal data<\/strong>\u201c: any information relating to an identified or identifiable natural person (\u2018data subject\u2019); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.<\/li>\n<li>\u201c<strong>Process\/processing<\/strong>\u201c: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;<\/li>\n<li>\u201c<strong>Data controller<\/strong>\u201d or \u201c<strong>controller<\/strong>\u201c: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law<\/li>\n<li>\u201c<strong>Data processor<\/strong>\u201d or \u201c<strong>processor<\/strong>\u201c: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;<\/li>\n<li>\u201c<strong>Third party<\/strong>\u201c: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;<\/li>\n<li>\u201c<strong>Consent<\/strong>\u201d of the data subject: any freely given, specific, informed and unambiguous indication of the data subject\u2019s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.<\/li>\n<\/ul>\n<p>In addition,\u00a0\u201cCorporate Partners\u201d\u00a0refers to those organisations who have made a commitment to equal opportunities, diversity and inclusion and that joined EGLCC as their sponsors who would potentially procure products and services from the Certified or Registered Businesses.<\/p>\n<h3>2. DATA CONTROLLER<\/h3>\n<p>The controller of your personal data is EGLCC of which full corporate information is EGLCC, European LGBTIQ Chamber of Commerce ekonomisk f\u00f6rening, a Swedish member-owned economic association, officially registered under the number 769636-7999, and of which address is Klarabergsviadukten 63, United Spaces, 111 64 Stockholm, Sweden.<\/p>\n<h3>3. DATA PROTECTION OFFICER<\/h3>\n<p>Our data protection officer (\u201cDPO\u201d) is responsible for overseeing questions in relation to this Privacy Policy and the processing of your personal data. If you have any questions about the processing of your personal data by us or our processors, or about this Privacy Policy, including any requests to exercise your legal rights, please contact the DPO at\u00a0<a href=\"mailto:privacy@eglcc.eu\">privacy@eglcc.eu<\/a>. We are committed to handling your queries and complaints as best we can.<\/p>\n<p>You also have the right to complain to the supervisory authority. For the list of the corresponding authority in your country, you can refer to <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/library\/list-personal-data-protection-competent-authorities\" target=\"_blank\" rel=\"noopener\">List of Personal Data Protection Competent Authorities | Shaping Europe\u2019s digital future<\/a>.<\/p>\n<h3>4. PERSONAL INFORMATION WE COLLECT<\/h3>\n<p>You may browse our Site without registering by us. However, if you register for our Services, we will ask you to provide certain information. In general, we ask you to provide the following types of Personal Information through our Site:<\/p>\n<h4>Applicant Information<\/h4>\n<p>In order to qualify for the EGLCC European LGBTIQ Business Certification or EGLCC Registration, or in order to become an EGLCC Corporate Partner, we ask you to provide us with information which differs depending on the type of process you apply for.<\/p>\n<p><strong>\u00a0<\/strong>The tables below sets out in detail the (1) categories of personal data that we collect, (2) purposes for which we collect that data, and (3) legal bases for these purposes.<\/p>\n<table width=\"588\">\n<tbody>\n<tr>\n<td colspan=\"5\"><strong>Data collected from you directly only as part of the supplier certification process<\/strong><\/td>\n<\/tr>\n<tr>\n<td><span style=\"color: #000000;\"><em><strong>What kind of data do we process?<\/strong><\/em><\/span><\/td>\n<td><span style=\"color: #000000;\"><em><strong>When do we collect the data<\/strong><\/em><\/span><\/td>\n<td><span style=\"color: #000000;\"><em><strong>Why do we process this?<\/strong><\/em><\/span><\/td>\n<td><span style=\"color: #000000;\"><em><strong>Is it permitted by law to process the data for these purposes?<\/strong><\/em><\/span><\/td>\n<td><span style=\"color: #000000;\"><em><strong>Legal basis<\/strong><\/em><\/span><\/td>\n<\/tr>\n<tr>\n<td>Data included in your passport or<\/p>\n<p>identity card, or resident permit (excluding biometric information). First name, surname, physical address at the time the document was issued, date of birth, nationality, photograph, passport or identity card number<\/td>\n<td>You provide it to us when you apply for certification<\/td>\n<td>To process applications for certification by verifying\u00a0 identity and eligibility for certification, including the fact that applicants have the right to work and own a business in the country of reference.<\/td>\n<td>Yes.<\/p>\n<p>The law requires, amongst others, that we do not process more data than necessary. This is why we request one identification document with options as to which one you may provide.<\/td>\n<td>Contractual necessity<\/td>\n<\/tr>\n<tr>\n<td>Director \/ partner details in the official business registration documents delivered by the registrar, including: director names, director date of birth, director addresses (if any), director place\/country of birth.<\/td>\n<td>You provide it to us when you apply for certification<\/td>\n<td>To process applications for certification by verifying\u00a0the actual registration status of the business.<\/td>\n<td>Yes.<\/p>\n<p>The law requires, amongst others, that we do not process more data than necessary. This is why we request only the information that is relevant to establishing the registration status of the business.<\/td>\n<td>Contractual necessity<\/td>\n<\/tr>\n<tr>\n<td>Previous year\u2019s audited or unaudited financial statements (P&amp;L, statement of cash flows) confirming the turnover of the business.\u00a0<u>Note<\/u>: To the extent that the information relates to a sole trader or sole practitioner or otherwise to specific individuals, this constitutes personal data.<\/td>\n<td>You provide it to us when you apply for certification<\/td>\n<td>To conduct initial screening regarding the business\u2019 solidity, to be complemented, as the case may be, by the relevant Corporate Member.<\/td>\n<td>Yes.<\/p>\n<p>The law requires, amongst others, that we do not process more data than necessary. This is why we request only the information that is relevant to establishing a financial baseline.<\/td>\n<td>Contractual necessity<\/td>\n<\/tr>\n<tr>\n<td>Information about the applicant\u2019s LGBTIQ identity<\/td>\n<td>You provide it to us when you apply for certification<\/td>\n<td>To process applications for certification by verifying\u00a0the applicants and their business fall within the category we are seeking to protect and promote, i.e. businesses which, in the qualifying country, tend to be directly and indirectly disadvantaged due to the fact they are owned, managed and\/or controlled by LGBTIQ people.<\/p>\n<p>Such data is solely used internally during the certification process to establish the eligibility for the receiving the LGBTIQ certification or EGLCC registration.<\/p>\n<p>The LGBTIQ identities are only established in the detail of summarily falling within the the LGBTIQ spectrum or not. At any point of the certification or registration processes, no records are being made to link a person to a particular gender or sexual identity.<\/td>\n<td>Yes.<\/p>\n<p>Under Article 9 GDPR the processing of personal data revealing sexual orientation or gender identity, is permitted, amongst others, where the data subject has given explicit consent to the processing of such personal data for one or more specified purposes.<\/td>\n<td>Consent<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>Other uses<\/h4>\n<table style=\"height: 1872px;\" width=\"1127\">\n<tbody>\n<tr>\n<td colspan=\"4\"><span style=\"color: #000000;\"><em><strong>Other personal data<\/strong><\/em><\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"color: #000000;\"><em><strong>What kind of personal data do we process?<\/strong><\/em><\/span><\/td>\n<td><span style=\"color: #000000;\"><em><strong>When do we have access to it<\/strong><\/em><\/span><\/td>\n<td><span style=\"color: #000000;\"><em><strong>Why do we process this?<\/strong><\/em><\/span><\/td>\n<td><span style=\"color: #000000;\"><em><strong>Legal basis<sup>1<\/sup><\/strong><\/em><\/span><\/td>\n<\/tr>\n<tr>\n<td>Contact information. This includes your first and last name, email address, username, and current mailing address<\/td>\n<td>You provide it to us to register on our online platform.<\/td>\n<td>We use this information to register you, and provide your access to our platform.<\/td>\n<td>Contractual necessity<\/td>\n<\/tr>\n<tr>\n<td>Payment information. This includes name, billing address, other contact address, payment details, transaction details.<\/td>\n<td><\/td>\n<td><\/td>\n<td>Contractual necessity<\/td>\n<\/tr>\n<tr>\n<td>Profile information. This includes first name, last name, username, data of birth, the service subscribed to.<\/td>\n<td><\/td>\n<td><\/td>\n<td>Contractual necessity<\/p>\n<p>Necessary to comply with a legal obligation<\/td>\n<\/tr>\n<tr>\n<td>Profile information. This includes first name, last name, username, data of birth, the service subscribed to.<\/td>\n<td><\/td>\n<td><\/td>\n<td>Legitimate interest (to ensure service improvement)<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>You provide it to us to register on our online platform and when you apply for certification, registration or corporate access.<\/td>\n<td>We use this information to be able to communicate with you about matters relating to your registration, certification or corporate partnership and develop and improve our services, which will include asking you to leave a review or take a survey or produce analytics.<\/td>\n<td>Legitimate interest of ensuring continuous use of the website<\/td>\n<\/tr>\n<tr>\n<td>Business Profile Information relating to the business entity, such as industry sector, products or services, age of the business, business revenues, ownership and control structures, statistical information regarding the roles of LGBTIQ persons within the organisation, and other information about the history or status of the business that is relevant to certification or registration. This information does not include personal identifiers (such as names, email addresses, phone numbers, or private addresses).<\/td>\n<td>When you apply for EGLCC certification or registration, or when you update your business profile during the validity period of certification or registration.<\/td>\n<td>To assess eligibility for certification or registration, to administer and improve EGLCC programmes and services, and to produce aggregated or anonymised research, statistical reporting, and market insights related to LGBTIQ-owned and controlled businesses.<\/td>\n<td>Not applicable where the information does not constitute personal data under Article 4 GDPR. Where Business Profile Information contains or becomes linked to personal data, processing is based on contractual necessity and\/or legitimate interest, as described elsewhere in this Privacy Policy.<\/td>\n<\/tr>\n<tr>\n<td>Donation-related data: first and last name, contact details (email, postal address), donation amount, payment and transaction details, and any information required for accounting or tax purposes.<\/td>\n<td>When you donate to EGLCC and during related accounting and reporting processes.<\/td>\n<td>To process and administer donations, issue confirmations or receipts, comply with accounting and tax obligations, communicate with donors regarding their donation, and maintain records for transparency and audit purposes.<\/td>\n<td>Contractual necessity (processing the donation).<\/p>\n<p>Compliance with a legal obligation (accounting, tax, audit requirements).<\/p>\n<p>Legitimate interest (administration, fraud prevention, donor relationship management).<\/p>\n<p>Consent applies only where donor details are shared with third parties beyond what is legally required.<\/td>\n<\/tr>\n<tr>\n<td>Event registration data: first and last name, email address, phone number (if provided), job title, organisation\/business name, country, billing details (if the event is paid), dietary\/accessibility requirements (if provided), and other information depending on the type of event (e.g., attendance type, role, networking preferences). We may also associate this information with other personal data you have provided to us (e.g., membership\/certification account data).<\/td>\n<td>When you register for an EGLCC event via the Site, by email, or in person (e.g., our yearly signature event and other programs), and during event administration (e.g., confirmations, attendee management, invoicing).<\/td>\n<td>To administer and deliver the event (registration, confirmations, logistics, invoicing\/payments where applicable), manage participation, provide access to event content or platforms, respond to your enquiries, and ensure the security and integrity of the event and its systems. We may also use aggregated\/anonymised event participation data to improve future events and services.<\/td>\n<td>Contractual necessity<\/p>\n<p>Legitimate interest (event security, administration)<\/p>\n<p>Consent<\/td>\n<\/tr>\n<tr>\n<td>Networking \/ attendee visibility data: name, organisation, role\/title, and (where enabled) contact details such as email\/LinkedIn profile, plus any profile details you choose to display to other attendees on event platforms.<\/td>\n<td>When you enable\/complete your attendee profile or when an event platform is used and you choose your visibility settings.<\/td>\n<td>To facilitate networking and interaction between participants during the event and to provide event platform functionality.<\/td>\n<td>Consent (where you choose to make your profile visible or share contact details).<\/p>\n<p>Legitimate interest (basic event platform functionality, limited to what is necessary).<\/td>\n<\/tr>\n<tr>\n<td>Data collected by strictly necessary cookies, such as the choice expressed by users on the use of cookies, logs used for authentication to a service, including logs designed to ensure the security of the authentication mechanism, for example by limiting robotic or unexpected access attempts; contents of a shopping basket; language and country choice.<\/td>\n<td><\/td>\n<td><\/td>\n<td>Legitimate interest of ensuring continuous use of the website<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>We collect the information as you browse the EGLCC website, using Matomo analytics plugin.<\/td>\n<td>We use this information to use data analytics to improve our website, products\/services,\u00a0customer relationships and experiences. You may object to or opt out of such analytics via the cookie settings available on the Site.<\/td>\n<td>Consent<\/td>\n<\/tr>\n<tr>\n<td>Contact information. This includes your first and last name, phone number, email address, username, and current mailing address. Browsing data: IP address, pages visited, time spent on each page, traffic on pages, usage, trends, and browsing patterns on, cookies or other terminal ID or tracking technologies.<\/td>\n<td>You provide us with the information for marketing purpose. We collect the information as you browse the EGLCC website<\/td>\n<td>We use this information to deliver relevant website content and newsletters.<\/td>\n<td>Consent<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>5. DISCLOSURES OF YOUR PERSONAL DATA AND INTERNATIONAL TRANSFERS<\/h3>\n<p>EGLCC handles your personal data carefully and confidentially. Your personal data is only available to our employees to the extent this is necessary to provide our services. We also share personal data with external third parties that we trust. They are our:<\/p>\n<ul>\n<li><strong>EGLCC Corporate Partners<\/strong>: As part of the application process for EGLCC certification, registration or corporate partnership, your personal data will be shared with Corporate Partners of EGLCC on strict need-to-know basis where needed for the performance of the contract we have with you with regard to EGLCC membership and\/or certification.<\/li>\n<li><strong>Professional advisors<\/strong>: we share your personal data with our professional advisors to the extent this is relevant, such as lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services. In specific situations, our advisers may act as joint or independent controllers.<\/li>\n<li><strong>Service providers<\/strong>: we share your personal data with our service providers that act as our data processors. This includes providers of IT and system administration services and professional advisers acting as processors including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services. We make sure that our service providers respect the security of your personal data and treat your personal data in accordance with the law and enter into data processing agreements with them for this purpose. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.<\/li>\n<\/ul>\n<p>We provide your personal data to some third parties that are based outside the European Economic Area (EEA).\u00a0Whenever we transfer your personal data out of the EEA, we ensure your personal data is handled and protected in a similar degree as provided in the EEA. This means that we make sure that appropriate safeguards are taken, including any of the following safeguards:<\/p>\n<ul>\n<li>We transfer your personal data to countries that have been deemed, by the European Commission, to provide an adequate level of protection for personal data.<\/li>\n<li>We use specific contracts approved by the European Commission, which give personal data the same protection it has in the EEA.<\/li>\n<li>We transfer your personal data to third parties that participate in the Data Privacy Framework recognised by the European Commission as adequate.<\/li>\n<\/ul>\n<p>Please contact us at\u00a0<a href=\"mailto:privacy@eglcc.eu\">privacy@eglcc.eu<\/a> if you want further information on the specific mechanism used by us when transferring your personal data out of the\u00a0 EEA.<\/p>\n<h3>6. DATA SECURITY<\/h3>\n<p>We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other Third Parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.<\/p>\n<p>Our data are being stored on servers located in the European union.<\/p>\n<p>We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.<\/p>\n<h3>7. DATA RETENTION<\/h3>\n<p>We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.<\/p>\n<p>To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.<\/p>\n<p>Data concerning the LGBTIQ status are handled separately from any other personal data, is being accessed for the sole purpose of establishing the eligibility for the LGBTIQ business certification by concrete selected employees and this data is deleted permanently within three weeks after the end of the certification process.<\/p>\n<p>In some circumstances you can ask us to delete your data.<\/p>\n<p>In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.<\/p>\n<h3>8. YOUR LEGAL RIGHTS<\/h3>\n<p>You have the right to:<\/p>\n<p><strong>Request access\u00a0<\/strong>to your personal data (commonly known as a \u201cdata subject access request\u201d). This enables you to obtain confirmation as to whether personal data concerning you is being processed, and, where that is the case, to get access to the data, and receive a copy of the personal data we hold about.<\/p>\n<p><strong>Request correction\u00a0<\/strong>of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.<\/p>\n<p><strong>Request erasure\u00a0<\/strong>of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.<\/p>\n<p><strong>Object to processing\u00a0<\/strong>of your personal data where we are relying on a legitimate interest (or those of a Third Party) and there is something about your situation which makes you want to object to processing on this ground based on your specific situation. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes.<\/p>\n<p><strong>Request restriction of processing\u00a0<\/strong>of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:<\/p>\n<ul>\n<li>If you want us to establish the accuracy of your personal data, for the period that enables us to check this.<\/li>\n<li>Where our use of your personal data is unlawful, but you do not want us to erase it.<\/li>\n<li>Where you need us to hold your personal data even if we no longer require it as you need it to establish, exercise or defend legal claims.<\/li>\n<li>You have objected to our use of your personal data, but we need to verify whether we have overriding legitimate grounds to use it.<\/li>\n<\/ul>\n<p><strong>Request the transfer\u00a0<\/strong>of your personal data to you or to a Third Party. We will provide to you, or a Third Party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to personal data that we process by automated means based on your consent or to perform the contract we have with you.<\/p>\n<p><strong>Withdraw consent\u00a0<\/strong>at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.<\/p>\n<h4>EXERCISING YOUR RIGHTS<\/h4>\n<p>If you wish to exercise any of the rights set out above, please contact us at\u00a0<a href=\"mailto:privacy@eglcc.eu\">privacy@eglcc.eu<\/a>.<\/p>\n<p><strong>No fee usually required<\/strong><\/p>\n<p>You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, in accordance with Article 12.5 GDPR, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.<\/p>\n<p><strong>What we may need from you<\/strong><\/p>\n<p>We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.<\/p>\n<p><strong>Time limit to respond<\/strong><\/p>\n<p>We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you within the first 30 days and keep you updated.<\/p>\n<h3>9. CONTACT US<\/h3>\n<p>If you have any questions about this Privacy Policy, or how we process your personal data, please contact us at\u00a0<a href=\"mailto:privacy@eglcc.eu\">privacy@eglcc.eu<\/a>.<\/p>\n<p>You can also write to us on the following address: EGLCC, European LGBTIQ Chamber of Commerce ek. f\u00f6r., United Spaces, Klarabergsviadukten 63, 111 64 Stockholm, Sweden.<\/p>\n<p>&#8212;<\/p>\n<p><strong><sup>1<\/sup>Meaning of the legal basis<\/strong><\/p>\n<p><strong>Legitimate interest<\/strong>\u00a0means the interest of our organisation in conducting and managing our activities and processing the personal data to enable us to give you the best service and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us at\u00a0<a href=\"mailto:privacy@eglcc.eu\">privacy@eglcc.eu<\/a>.<\/p>\n<p><strong>Performance of contract<\/strong>\u00a0means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.<\/p>\n<p><strong>Comply with a legal obligation<\/strong>\u00a0means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.<\/p>\n<\/div><\/section><\/p><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-68","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.eglcc.eu\/en\/wp-json\/wp\/v2\/pages\/68","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.eglcc.eu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.eglcc.eu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.eglcc.eu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.eglcc.eu\/en\/wp-json\/wp\/v2\/comments?post=68"}],"version-history":[{"count":11,"href":"https:\/\/www.eglcc.eu\/en\/wp-json\/wp\/v2\/pages\/68\/revisions"}],"predecessor-version":[{"id":12873,"href":"https:\/\/www.eglcc.eu\/en\/wp-json\/wp\/v2\/pages\/68\/revisions\/12873"}],"wp:attachment":[{"href":"https:\/\/www.eglcc.eu\/en\/wp-json\/wp\/v2\/media?parent=68"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}