Article 1. DEFINITIONS
Applicable Privacy Legislation:
Applicable Privacy Legislation, including the General Data Protection Regulation (hereinafter: GDPR) and any other applicable law relating to the processing of personal data.
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.
Stichting Designathon Works Foundation
Chamber of Commerce number: 60140615
An operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The person who processes Personal Data on behalf of the controller, without being subject to his direct authority.
The Website Visitor refers to the person who uses the Website of Designathon Works, also including the registration on the Website.
With ‘Website’ the website: <designathon.nl> or <designathonworks.com> is meant.
2.2 The Website of Designathon Works contains references to websites of third parties (for example hyperlinks, banners or buttons). Designathon Works is not responsible for compliance with the Applicable Privacy Legislation by these third parties.
2.3 Website Visitors below the age of 16 can only transmit Personal Data with the consent of their parent or legal guardian. The relevant applicable data protection law may result in different age limits in this regard. See also Designathon Works’ child safeguarding policy in this regard.
Article 3. PERSONAL DATA COLLECTED
3.1 Designathon Works Processes the following Personal Data from Website Visitors:
3.1.a. First name*
3.1.b. Last name*
3.1.d. Place of residence*
3.1.e. School or organisation*
3.1.f. Email address*
3.1.h. Message to Designathon Works
3.1.i. Personal profile
3.1.j. Submitted workshop image and description
3.2 These Personal Data are collected by requesting a Designathon Works newsletter, by logging in into the website, submitting to an online workshop / challenge or otherwise using the Website.
3.3 Designathon Works will only process the Personal Data in accordance with the Applicable Privacy Legislation.
Article 4. PURPOSES AND LEGAL GROUND FOR PROCESSING
4.1 Designathon Works collects and processes your Personal Data solely for the purpose specified below:
4.1.a. Communication: Your Personal Data are used to register on the Website, use our services, respond to your comments and questions and provide customer service, to be used in our GCD promo materials and GCD report, and to communicate with you about upcoming events, and other news about products and services offered by Designathon Works and our selected partners, specifically including our International Network Partners. We may contact you to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any other agreement we may have with you. For these purposes we may contact you via email. This Processing of Personal Data is necessary for purposes of performance of your agreement with Designathon Works (Article 6 paragraph 1 section b GDPR) or is necessary for purposes of a legitimate interest pursued by Designathon Works, namely to conduct its normal business (Article 6 paragraph 1 section f GDPR).
4.1.b. Marketing purposes: Your Personal Data will be used to send the newsletter, the action mail and/or inspiration mail, if you have registered for it. To approach Designathon Works via e-mail for marketing purposes, Designathon Works always requests your prior consent, unless it concerns offers about similar products that you have ordered. You always have the option to unsubscribe from mailings. This Processing of Personal Data is based on consent (article 6 paragraph 1 section a GDPR) or is necessary for purposes of a legitimate interest pursued by Designathon Works, namely to perform marketing activities (article 6 paragraph 1 section f GDPR).
4.1.c. Statistics: We use your Personal and Non-Personal Data to create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services;
4.2 If Designathon Works intends to further process the Personal Data for a purpose other than that the Personal Data have been collected, Designathon Works will provide you with information about that other purpose and all relevant further information before that further processing.
Article 5. TRANSFER OF PERSONAL DATA TO THIRD PARTIES
5.1 Designathon Works shares Personal Data with the following entities:
5.1.a. WIX. (software supplier);
5.1.b. The Rocket Science Group LLC (MailChimp, mailing list provider)
5.1.c. Google Analytics (see article Designathon Works only uses third party cookies to improve the quality and effectiveness of the Website. For example, it uses Google Analytics, which are set up in a privacy-friendly manner. Google Analytics processes the IP addresses for Designathon Works.)
5.1.d Visitor Analytics SRL. Visitor Analytics is a simple website analytics service which measures the traffic and visitors' general details of the customers' websites. Collecting these statistics, a website can make their visitors' experience better (e.g. which pages they visit and when, where they are approximately located, where does a user land first or if they are coming from a specific referral).
5.2 Designathon Works only shares Personal Data of Website Visitors with third parties where necessary to fulfil a contract with you, where we or the Processor has a legitimate interest in the disclosure of your data, or where you have given your consent to that transmission. In such cases, Designathon Works will enter into a contract with these third parties regarding the processing of Personal Data before any Personal Data is shared. In this way, Designathon Works ensures that the Processors take appropriate technical measures, treat the Personal Data confidentially and guarantee the rights of Website Visitors. Such recipients include service providers and our International Network Partners.
5.3 In so far that the transmission of Personal Data would involve the transmission to Processors based outside of the EEA, Designathon Works will ensure ‒ before any data is shared ‒ that either an appropriate level of data protection is maintained by the Processor (e.g. on the basis of an adequacy decision made by the EU Commission for the respective country or the application of the Standard contractual clauses for data transfers between EU and non-EU countries between Designathon Works and the Processor) or that you have given your consent to said sharing.
Article 6. SECURITY
6.1 Designathon Works takes appropriate organisational and technical security measures to protect your Personal Data and to prevent misuse, loss or alteration thereof.
6.2 Designathon Works stores your Personal Data on servers in and outside of Europe, including in the US. If and insofar as Designathon Works stores Personal Data with parties in countries that do not have an adequate level of protection, it will agree with these parties standard data protection provisions set by the European Commission.
Article 7. STORAGE PERIODS
Designathon Works is hosted on the Wix.com platform. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
7.1. First name, last name, school or organization, email address, language for marketing purposes are stored until the Website Visitor objects to our use of the e-mail address;
7.1.a. Message to Designathon Works are stored until the Website Visitor objects to our use of the e-mail address;
7.2 You can request Designathon Works to erase the Personal Data earlier. If the Personal Data are no longer necessary in relation to the purposes for which Designathon Works has collected or otherwise processed the Personal Data, Designathon Works will erase the Personal Data.
Article 8. Cookies
8.2 Cookies are small pieces of information that are stored by the browser on the Website Visitor’s computer. Designathon Works uses different types of cookies for different purposes.
8.2.a. Functional cookies: cookies that are necessary for the Website to function properly.
8.2.b. Analytical cookies: cookies that ensure that insight can be gained into how Website Visitors use (parts of) the Website, so that Designathon Works can improve the Website and that it fits as well as possible with what Website Visitors find interesting and important. Designathon Works does not use the data obtained with these cookies to study the use of the Website at an individual level, but only at an aggregated level.
8.3 Designathon Works only uses third party cookies to improve the quality and effectiveness of the Website. For example, it uses Google Analytics, which are set up in a privacy-friendly manner. Google Analytics processes the IP addresses for Designathon Works.
8.5 Most browsers are set to accept cookies by default. The Website Visitor can set the browser to disable cookies or indicate when a cookie is being sent. However, it is possible that some functions and services of both Designathon Works and other websites do not function properly if cookies are disabled.
Article 9. Scope of your Obligations to provide Data
Generally, you are not obliged to provide us with your personal data. However, if you do not provide this information, we will not be able to make our Website available to you, or to communicate with you. Personal data which we necessarily require for the above mentioned processing purposes are marked as mandatory information by a “*” or another symbol.
Article 10. YOUR RIGHTS
10.1 You can request Designathon Works at all times to view, correct, rectify, supplement, delete or restrict your Personal Data if these are factually incorrect, incomplete or if they are processed in violation of a legal obligation. In so far as the data processing is based on consent (see above), you have the right to withdraw this consent at any time.
10.2 You can request Designathon Works to obtain the Personal Data that you have provided to Designathon Works in a structured and commonly used form, so that you can transfer the data to another controller. You are only entitled to this insofar as the processing is based on consent in the sense of article 6 paragraph 1 section a GDPR or article 9 paragraph 2 section a GDPR or if it concerns a processing that is based on the performance of a contract as referred to in Article 6 paragraph 1 section b GDPR and the processing is carried out by automated means.
10.3 If you wish to make use of one of the rights mentioned in this article, you can request this from Designathon Works’s customer service:
10.4 Designathon Works will provide you with information about the follow-up given to the request immediately and in any case within one month of receipt of the request. Depending on the complexity of the request and on the number of requests, this period can be extended by another two months. Designathon Works will notify you of such an extension within one month of receipt of the request.
10.5 If your requests are manifestly unfounded or excessive, in particular because of the repetitive character, Designathon Works will either charge you a reasonable fee or refuse to comply with the request.
Article 11. RIGHT TO OBJECT
You have the right to object to the processing of your Personal Data at any time. Insofar as the processing of your Personal Data takes place for direct marketing purposes, Designathon Works will always honour your request. For processing for other purposes, Designathon Works will also cease processing, unless it has compelling legitimate grounds for the Processing which override your interests, rights and freedoms or that are related to the institution, exercise or substantiation of a legal claim.
Article 12. DATA PROTECTION AUTHORITY
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or of an alleged infringement of the GDPR at all times.
Article 13. Automated DECISION MAKING / PROFILING
We do not use automated decision making or profiling (an automated analysis of your personal circumstances).
Article 14. MISCELLANEOUS
14.1 Designathon Works is entitled at all times to delete your Personal Data without notice. In such a case, Designathon Works owes no compensation to the Customer as a result of such deletion.