Privacy statement for ECA Global

ACCORDING TO ARTICLE 13 – REGULATION (EU) 2016/679 (GDPR)

Dear User, as “data subject” according to the European General Data Protection Regulation, your personal data is collected by ECA Global through the contact web form to consent requests to be submitted by the users and establishing possible collaboration or enhancing our platform’s features, and through the newsletter subscription form for marketing communications.

Here you may find complete privacy statement in legal words.

Data Controller

The data controller is ECA Global, with its registered offices in 5017 37TH Avenue SW Seattle, WA 98126. ECA Global is the owner of the website platform identified by the domain name ecaglobal.org, which is used to collect your personal information as detailed below.

Contact information about privacy concern is: contactus@ecaglobal.org

Categories of personal data collected by ECA Global and processing purposes

Through the web forms on the ECA Global website, we collect the following personal data for distinct purposes:

  1. Contact Form (Information/Collaboration): Name and/or surname, email, and the content of your message. These are necessary to reply to the request submitted by the user and to establish possible collaboration or address inquiries.
  2. Newsletter Subscription Form: Email address (and optionally, name/surname if requested). This is necessary for the purpose of sending periodic informational, promotional, or community-related communications about ECA Global’s activities (i.e., Direct Email Marketing – DEM).
Lawfulness of processing

The lawfulness of processing is based on the following legal grounds, depending on the specific form submitted:

  1. Contact Form (Information/Collaboration): The processing is based on the data subject’s consent (lett. a) of Article 6 of the GDPR) and/or for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract (lett. b) of Article 6 of the GDPR), particularly when the request aims at establishing a collaboration.
  2. Newsletter Subscription Form: The processing is based exclusively on the data subject’s explicit and informed consent (lett. a) of Article 6 of the GDPR), specifically for the purpose of Direct Email Marketing (DEM).
Place of data processing (Including Extra-EU Transfer Notice)

Data collected according to this statement is stored and processed on servers and offices of ECA Global and its Data Processors.

  • Hosting Provider (GreenGeeks): The Website and the data collected through the contact form are hosted on the servers of GreenGeeks (GreenGeeks International LLC).
  • Newsletter Provider (Mailchimp): Data collected for the newsletter is transferred to and processed by Mailchimp (The Rocket Science Group LLC).

Since ECA Global’s registered office, GreenGeeks, and Mailchimp’s servers are located outside the European Union (United States), the processing of personal data involves an Extra-EU Data Transfer. This transfer is subject to the provisions of Chapter V of the GDPR. ECA Global undertakes to ensure that such transfer occurs only in the presence of an adequate legal basis, such as the adoption of the Standard Contractual Clauses (SCCs) approved by the European Commission, or based on the data subject’s explicit consent or other applicable derogations under Article 49 of the GDPR, ensuring an adequate level of protection for the data subject.

Recipients of personal data

Data processing will not include any dissemination or publication. Data will be processed by:

a) data processor, acting on behalf of the data controller, such as:

  • Mailchimp (The Rocket Science Group LLC), a company based in the United States, used for managing and sending the newsletter and for Direct Email Marketing (DEM). Mailchimp acts as a Data Processor and adopts measures to facilitate compliance with GDPR, including the use of Standard Contractual Clauses (SCCs) for the Extra-EU data transfer.
  • persons, companies or professional firms providing ECA Global with advice and consulting in accounting, administrative, legal, tax, financial and debt collection matters related to the provision of ecaglobal.org terms of use;
  • subjects to engage with in order to provide the services (for instance, hosting providers like GreenGeeks) or the projects which ECA Global aims at selecting and promoting (for instance, key-partner working in selected geographical areas);
  • persons companies or professional firms providing ECA Global with technical maintenance (including maintenance of hardware and software systems, network equipment and electronic communications networks).

b) subjects, bodies or authorities to disclose personal data to, in accordance with the provisions of law or under the orders of the authorities or in case of abuse reports to investigate complaints and identify the source of messages received from users;

c) persons authorized by ECA Global to process data required for carrying out activities strictly related to the performance of the obligation required by the user that submit the webform: those authorized persons have undersigned specific agreement to grant confidentiality and correct behavior according to data processing law;

Optional data conferment

The provision of personal data is treated as follows:

  • Contact Form (Information/Collaboration): The provision of personal data (name and email) is absolutely necessary to let ECA Global consider and reply to the request submitted by the user. Failure to provide this data will make it impossible for ECA Global to process the request.
  • Newsletter Subscription Form: The provision of the email address for the newsletter is optional and is not necessary to browse the website. Refusal to provide this data will only result in the impossibility of receiving the newsletter.
Processing method and duration

Personal data is processed by automated tools for the time strictly necessary to answer to the request submitted by the user and so let ECA Global performance the required obligation if necessary. Data provided for the newsletter is processed until the user withdraws consent or unsubscribes. Specific security measures are observed to prevent data loss, illegal or incorrect use and unauthorized access. Data provided in the user’s message could by anonymized to archive possible useful information for the social purpose of ECA Global (e.g.: the technical improvement of the platform, the update of policies, the community building tasks, etc).

Rights of Data subject

The data subject has the right:

  • To ask the data controller, pursuant to Article 15, 16, 17, 18, 19 and 21 of Regulation (EU) 2016/679, the access to their personal data and correction or their cancellation or limitation of the data processing that concerns him/her or to object to their processing.
  • to portability as provided in Article 20 of Regulation (EU) 2016/679
  • to submit a complaint to a supervisory authority if you believe that the processing of the data you have provided violates the European regulation.