Privacy notice
This privacy notice for CuttingEEG association describes how and why we might collect, store, use, and/or process your information when you join the association.
Data Privacy Information according to Art. 13, 14 and 21 GDPR
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.
The following information must be provided to you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) when the personal data is collected:
Name and Address of the controller
CuttingEEG association controller is the data controller for the personal information processed during the CuttingEEG membership registration at the CuttingEEG website (from https://cuttingeeg.org/join).
At the end of the registration, data is stored in the database linked to our website, which is hosted in France by the OVHcloud provider. OVHcloud provider adheres to the EU/US Privacy Shield, which ensures that your data is stored securely and complies with the GDPR. For more information on OVHcloud’s privacy policy, please see here.
Name and Address of the Data Protection Officer
The adminitrator of the CuttingEEG website which is also a member of the CuttingEEG administrative board, is the data protection officier.
Name: Adrien Schramm
You can contact him at: contact@cuttingeeg.org
Purpose and legal basis
1. Personal data collected and processing
The data will be collected and processed in accordance with the provisions of the General Data Protection Regulation (GDPR).
1.a Purposes
The processing and use of the individual data is necessary for the following purposes:
-
- managing information concerning members of the association (globally and individually)
- communicating with member (such as to send administrative information to you, for example concerning changes to our terms and policies)
- allowing members to access their personal member account on CuttingEEG website
1.b Consent
In principle, registering to become a member is voluntary. In this case, Art. 6 para. 1 lit a GDPR is the legal basis. We conscientiously protect your data from loss, misuse, unauthorized access, unauthorized disclosure, falsification or destruction.
You can revoke your consent at any time.
1.c Data collected
We collect these personal information that you voluntarily provide to us when you register:
-
- your first name and last name
- your email address
- your password (not visible in our admin interface, and encrypted in our database)
- your employer
- your billing address (if provided)
- an associated transaction number (a unique identifier that is automatically generated during the payment)
- the registration date
- your newsletter subscription choice (yes or no)
- the coupon code you used if any
1.d Recipients of personal data
Your personal data is only passed within the administrative board members of the CuttingEEG association, to manage the members and the event registrations. The recipients names are: Maximilien Chaumon (Founder and Co-President), Anne-Sophie Dubarry (Co-President), Anaïs Llorens (Executive Board), Alexandra Cornelly (Executive Board), Christelle Zielinski (Executive Board) and Adrien Schramm (Independant Consultant and Executive Board).
1.e Transfer of data to a third country or an international organization
A part of the data processing takes place outside the EU or the EEA: at the end of the registration, certain information is automatically copied to a spreadsheet that is shared amongst the administrative board members only. The speadsheet is hosted by Google Drive, in a server that could be located outside the EU or the EEA.
The Google Drive follows the Google privacy policies that are available here.
The data that are copied are the same that are listed in the 1.c section, excluding the password and the billing address.
1.f Storage period
We process and store your data as long as it is necessary to achieve the above-mentioned purposes, in particular our contractual and legal obligations. If the data is no longer required for these purposes and our obligations, it will be deleted.
1.g Provision of data
The provision of your personal data is based on your consent (Article 6 (1) a) GDPR).
2. Right to the image
As you are likely to take part in our events as a member of CuttingEEG, we ask for your consent to image rights when you register:
By registering for any CuttingEEG event, I acknowledge that I may directly/indirectly be photographed by event organizers and agree that my image may be used by CuttingEEG for promotional purposes.
3. Your rights
You have the following rights vis-à-vis the controller with regard to the personal data concerning you:
-
- Right to information, Art. 15 GDPR
- Right to rectification, Art. 16 GDPR
- Right to erasure, Art. 17 GDPR
- Right to restriction of processing, Art. 18 GDPR
- Right to object to collection, processing and/or use, Art. 21 GDPR
- Right to data portability, Art. 20 GDPR
As the processing of personal data is based on your consent (Art. 6(1)(a) GDPR), you may revoke it at any time for the relevant purpose. The lawfulness of the processing based on your consent given remains unaffected until we receive your revocation.
You also have the right to lodge a complaint with the data protection supervisory authority.
4. Your personal account
The access to your account at https://cuttingeeg.org/login/ allows you to review and change your personal information at any time. You can also view your transaction information (date, paid amount) and download the invoice PDF.
Upon your request to terminate your account (by sending us an email to contact@cuttingeeg.org), we will deactivate or delete your account and information from our active databases.
5. Contact us
If you still have any questions or concerns, please contact us at contact@cuttingeeg.org.