Privacy Policy
1. Introduction
This privacy notice (the ”Privacy Notice”) available on the Plant-Based Campus website (www.plantbasedcampus.com), describes how Plant-Based Campus, an non-profit organisation registered in Sweden with the organisation number 802548-7276 (“Plant-Based Campus”, “PBC”, “We”, “Our“), as a data controller, process its members’, volunteers’ and participants’ (“You”, “Your”) personal data.
The Privacy Notice is intended to comply with our obligations to provide you with information about our processing of your personal information under applicable privacy laws. It explains how We collect, use and share personal information in Our business activities.
Questions regarding this Privacy Notice and PBC’s processing of Your personal data can be sent to PBC’s Data Protection Officer.
Data Protection Officer: Kevin Linton
Email: kevin.p.linton@gmail.com
2. Categories of Personal Data
The categories and specific personal data PBC processes depend on how You interact with Our services. PBC only processes data provided by You or gathered through Your interactions with PBC.
Categories of Personal Data
Contact data
Communication data
Employment data
Feedback data
Health data
Identity data
Location data
Marketing data
Online and device data
Photo and audio data
Examples of Personal Data
Email address, phone number.
Emails, text messages.
Student status, employment status.
Event feedback.
Allergies, health conditions.
Name, age, address, sex/gender.
Country, city, address.
Marketing preferences.
Online usage data, cookie preferences.
Photos, videos.
3. Processing Activities
We anonymise or aggregate personal data where possible. We may pseudonymise personal data where anonymisation or aggregation is not possible. The categories and specific personal data PBC uses for each processing purpose depend on the data available to PBC and the specific processing activity. You may withdraw Your consent at any time when the processing of Your personal data is based on Your consent. You can do this by contacting your local PBC campaign or PBC’s Data Protection Officer. You can withdraw Your consent to receiving marketing communications directly in any marketing message.
a) For the purpose of administering events.
Examples of Processing Activities:
Event registration, event reminders, event administration, including health and safety.
We may process the following categories of personal data as described in Section 2 for these purposes:
Contact data
Communication data
Employment data
Health data
Identity data
Location data
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Our legitimate interest to administer events (Article 6(1)(f) GDPR). Where we process Your health data, Our lawful basis for the processing of Your personal data for this purpose is Your consent (Article 6(1)(a) GDPR).
b) For the purpose of conducting media operations.
Examples of Processing Activities:
Taking photos and videos, conducting interviews, uploading to social media.
We may process the following categories of personal data as described in Section 2 for these purposes:
Employment data
Identity data
Location data
Photo and audio data
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Our legitimate interest to conduct media operations (Article 6(1)(f) GDPR).
d) For the purpose of conducting and evaluating marketing activities.
Examples of Processing Activities:
Conducting marketing campaigns, performing user segmentation, storing marketing preferences, analysing marketing campaigns.
We may process the following categories of personal data as described in Section 2 for these purposes:
Contact data
Communication data
Employment data
Identity data
Marketing data
Location data
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Your consent (Article 6(1)(a) GDPR).
c) For the purpose of membership administration.
Examples of Processing Activities:
Membership registration, task allocation, corresponding with You.
We may process the following categories of personal data as described in Section 2 for these purposes:
Contact data
Communication data
Employment data
Identity data
Location data
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Our legitimate interest to administer membership (Article 6(1)(f) GDPR).
e) For the purposes of providing and developing web services.
Examples of Processing Activities:
Storing cookie preferences, redirecting individuals to web pages, displaying web pages, enabling web forms.
We may process the following categories of personal data as described in Section 2 for these purposes:
Online and device data
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Our legitimate interest to provide and develop web services (Article 6(1)(f) GDPR).
f) For the purposes of performing analysis to develop the campaign
Examples of Processing Activities:
Statistical analysis, market analysis, feedback analyis, personal and campaign performance analysis.
We may process the following categories of personal data as described in Section 2 for these purposes:
Contact data
Communication data
Employment data
Feedback data
Identity data
Location data
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Our legitimate interest to perform analysis to develop the campaign (Article 6(1)(f) GDPR).
4. Transfer of Personal Data
a) Local PBC Chapters.
Purpose:
To conduct internal administration and to enable processing activities with the purposes described in Section 3.
We may transfer the following categories of personal data as described in Section 2 for these purposes:
We may transfer the following categories of personal data as described in Section 2 to these recipients:
All categories of personal data as described in Section 2.
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Our legitimate interest to conduct internal administration and enable processing activities with the purposes described in Section 3 (Article 6(1)(f) GDPR).
In some cases, PBC may transfer your personal data outside the EU/EEA. This will only be done after adequate protection measures have been taken by PBC to ensure an adequate level of data protection. PBC may rely on the European Commission’s recognition that a country provides an adequate level of data protection for some transfers. PBC may also include the European Commission’s standard contractual clauses for the transfer of personal data and, where necessary, by implementation of supplementary safeguarding measures. In some cases, PBC may use derogations or binding corporate rules for some transfers when there are no other data transfer mechanisms applicable. You can obtain further information regarding the protection measures taken when personal data is transferred outside the EU/EEA by contacting Us.
PBC may transfer personal data to the following categories of recipients:
c) Recipients because of legal obligation.
Purpose:
To comply with laws, to comply with regulations and to comply with court orders.
We may transfer the following categories of personal data as described in Section 2 to these recipients:
All categories of personal data as described in Section 2.
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Our legitimate interest to enable processing activities with the purposes described in Section 3 (Article 6(1)(f) GDPR).
b) IT Providers.
Purpose:
To enable processing activities with the purposes described in Section 3.
We may transfer the following categories of personal data as described in Section 2 to these recipients:
All categories of personal data as described in Section 2.
Lawful Basis:
Our lawful basis for the processing of Your personal data for this purpose is Our legitimate interest to enable processing activities with the purposes described in Section 3 (Article 6(1)(f) GDPR).
5. Storage Period
Your personal data is stored only as long as is necessary in order to fulfil the purposes for which Your personal data was collected, however, if personal data is processed on account of Your consent or Our legitimate interest, Your withdrawal of the consent or valid objection will put an end to the processing, without affecting any processing that happened until then and without affecting any legal obligation to process personal data. The personal data which is processed to administer your PBC membership is processed for as long as You are a PBC member. If Your membership is terminated, We will delete the personal data, with the exception of personal data which needs to be stored by Us due to legal requirements or to safeguard Our legal interests.
6. Security
The technology used by PBC, together with this Privacy Notice, aims to protect Your personal data from unauthorized access and unauthorized use by using appropriate technical, physical and organisational measures to ensure a level of security appropriate to the risk. We may update these actions as new technology becomes available.
7. Rights
You have certain rights in relation to Our processing of Your personal data. Your rights are the following:
Right to access: You have the right to receive confirmation from Us that we process Your personal data, including a right to access Your personal data and receiving an electronic copy of Your personal data.
Right to erasure (“right to be forgotten”): Under certain circumstances, e.g. if you have objected to the processing and We do not have a compelling legitimate interest, You can request that Your personal data is erased. This does not, however, apply if we have a legal obligation to process the personal data or other legitimate purposes for which Your personal data is processed.
Right to rectification: You have the right to request that incorrect or inadequate personal data about Your is updated or corrected.
Right to withdraw consent: To the extent the processing of Your personal data is based on Your consent, You have the right to withdraw Your consent at any time.
Right to object: When We use legitimate interest (Article 6(1)(f) GDPR) as lawful basis for the processing, or if the processing concerns direct marketing, You have the right to object to the processing. In such case, we may be entitled to continue to process Your personal data if we can demonstrate a compelling legitimate interest to continue the processing operation.
Right to restriction: Under certain circumstances, You have the right to request that the processing of Your personal data is restricted, so that the personal data only may be stored by PBC and not processed for any other purposes.
Right to data portability: If the processing is based on Your consent (Article 6(1)(a) GDPR) or a contract (Article 6(1)(b) GDPR) and the personal data has been obtained directly from You, You are entitled to request data portability, in which case you are entitled to receive Your personal data on a commonly used machine-readable format.
Right to lodge a complaint: If You have any complaints regarding Our processing of Your personal data, You have the right to lodge a complaint to the relevant data protection authority in Your country.
You can request to exercise your rights by contacting PBC’s Data Protection Officer.
8. Changes to This Privacy Policy
PBC may change this Privacy Notice by publishing a new version of this Privacy Notice. In the event that any material change is made to Our processing activities, We will notify You by sending You an e-mail with information about the change where we have your contact details available to Us.