GDPR & Privacy Policy

eurinn.eu (the "Site") is owned and operated by European Innovators Association ("we," "us," or "our"), which acts as the data controller of your personal data within the meaning of the General Data Protection Regulation (EU) 2016/679 ("GDPR").

We have adopted this Privacy Policy to explain how we collect, use, and protect the information gathered through eurinn.eu, and to set out the legal grounds on which we process it. Please read this Privacy Policy before using eurinn.eu.

We take the security of your personal data seriously and are committed to keeping it confidential and secure, in line with our obligations under the GDPR and other applicable data protection law.

Who is the data controller

The data controller responsible for your personal data is:

European Innovators Association [registered address] Email: info@eurinn.eu

If we appoint a Data Protection Officer, their contact details will be added here. Until then, you can direct any data protection question or request to the email address above.

Personal information we collect

When you visit eurinn.eu, we automatically collect certain information about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the Site, we also collect information about the individual pages you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically collected information as "Device Information."

In addition, we may collect personal data you provide directly to us, including but not limited to your name, surname, address, and payment information, for example when you register for an account or place an order, so that we can fulfil an agreement with you.

Cookies

Some of the Device Information we collect is gathered using cookies and similar tracking technologies. Where required by law, we ask for your consent before placing non-essential cookies, and you can manage or withdraw that consent at any time through your browser settings or our cookie banner, where available. For more detail on the specific cookies we use and their purpose and duration, see our separate Cookie Policy, where available, or contact us using the details above.

Why and on what legal basis we process your data

Our priority is to collect and process only the personal data that is reasonably necessary to operate the Site and provide our services. We rely on the following legal bases under Article 6 GDPR, depending on the purpose:

Contract performance: to create your account, process an order, or otherwise fulfil an agreement with you.

Consent: for optional activities such as subscribing to our newsletter or accepting non-essential cookies. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Legitimate interests: to identify and prevent potential abuse or fraud, to keep the Site secure, and to compile aggregated statistics about how the Site is used. This statistical information is not used in a way that identifies any particular visitor.

Legal obligation: where we are required to retain or disclose information to comply with the law.

You can browse the Site without telling us who you are. If you wish to use certain features, such as receiving our newsletter, contacting us through a form, or placing an order, you may need to provide personal data such as your email, first name, last name, city of residence, organization, or telephone number. You are free not to provide this data, but you may then be unable to use the corresponding feature, for example receiving the newsletter or contacting us directly through the Site. If you are unsure which fields are mandatory, contact us at info@eurinn.eu.

How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including satisfying any legal, accounting, or reporting obligations. Device Information used for statistical and security purposes is generally retained in a form that does not identify you beyond the period reasonably needed for that analysis. Data linked to a contract, order, or account is generally kept for the duration of our relationship with you and for the period required afterwards under applicable tax, accounting, or limitation-period rules. Where processing is based on your consent, we retain the data until you withdraw that consent, unless we are required or entitled to keep it for longer.

Who we share your data with

We do not sell your personal data. We may share it with trusted third parties who help us operate the Site and our business, such as hosting providers, payment processors, email or newsletter providers, and IT service providers, acting as our processors under a data processing agreement, and only to the extent necessary for them to perform their services. We may also disclose information as described under "Legal disclosure" below.

International data transfers

If you are located in the European Economic Area, please note that your information, including personal data, may be transferred to, and processed in, countries outside the EEA, including Canada and the United States, where data protection laws may differ from those in your country. Where we make such a transfer, we take steps to ensure an adequate level of protection, such as relying on an adequacy decision by the European Commission or entering into Standard Contractual Clauses approved by the European Commission with the recipient. You can request more information about the safeguards we use for a specific transfer by contacting us.

Your rights under the GDPR

If you are located in the European Economic Area, you have the following rights in relation to your personal data:

The right to be informed about how your data is collected and used.

The right of access to the personal data we hold about you.

The right to rectification of inaccurate or incomplete data.

The right to erasure of your data in certain circumstances.

The right to restrict processing in certain circumstances.

The right to data portability, allowing you to obtain and reuse your data across services.

The right to object to processing based on our legitimate interests or carried out for direct marketing.

Rights in relation to automated decision-making and profiling, described further below.

The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us using the details in the "Contact information" section below. We will respond to your request within one month, as required by the GDPR, and may extend this by a further two months for complex or numerous requests, in which case we will explain the reason for the delay. We may need to verify your identity before acting on a request.

If you believe we have not addressed your concern adequately, you also have the right to lodge a complaint with your local data protection supervisory authority, or with the supervisory authority in the country where we are established.

Automated decision-making and profiling

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. If this changes, we will update this Policy and, where required, obtain your explicit consent or otherwise ensure the processing meets the conditions set out in the GDPR.

Links to other websites

Our Site may contain links to other websites that are not owned or controlled by us. We are not responsible for the privacy practices of such other websites or third parties. We encourage you to review the privacy policy of every website you visit after leaving our Site.

Information security

We store the information you provide on servers in a controlled, secure environment, protected against unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards designed to protect your personal data against unauthorized access, use, modification, and disclosure. However, no method of transmission over the internet or wireless network can be guaranteed to be completely secure.

Legal disclosure

We may disclose information we collect, use, or receive where required or permitted by law, for example to comply with a subpoena or similar legal process, or where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Changes to this Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or for legal or regulatory reasons. We will post the updated version on this page with a revised "Last updated" date, and where changes are material, we will take reasonable steps to bring them to your attention.

Contact information

If you have questions about this Policy or wish to exercise any of your rights regarding your personal data, contact us at info@eurinn.eu.