Select your language

Privacy

We value your privacy.

Table of contents

1. General information
2. General information on the purposes of data processing
3. Information you provide us with
3.1 Client
3.2 Provider – Basic Membership
3.3 Provider – Premium Membership
4. Information that we automatically receive as a result of your use of the platform
5. Who receives personal data?
6. What rights can you assert?
7. Terms used in our privacy policy


1. General information

Scope of the data protection declaration

The European Transformation Association (hereinafter "EUTAS") operates a platform (hereinafter "EUTAS Platform") at www.eutas-connect.com for the placement of coaches, trainers and consultants (hereinafter "Provider") with companies and private individuals (hereinafter "Clients"). Within the framework of the EUTAS platform, EUTAS offers clients to evaluate the selected provider in a database operated by EUTAS (hereinafter referred to as "EUTAS database") after conclusion of a consulting contract. However, the provider must have given his prior consent for inclusion in the EUTAS database.

The data protection declaration applies equally to EUTAS EWIV and its affiliated company EUTAS Operations GmbH in foundation.

Person in charge

The data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.

Data protection officer
You can contact our data protection officer by e-mail at privacy@eutas.org.

Alternatively, you can contact us by post:
Data Protection Officer
c/o EUROPEAN TRANSFORMATION ASSOCIATION EWIV
Julius-Hoelder-Straße 40
70597 Stuttgart
GERMANY

Further processing for another purpose

If we intend to process personal data for any other purpose - i.e. not for those for which the personal data was originally collected - we will inform you again. Information on the purpose for which we process your data can be found in section 2. General information on the purposes of data processing.

Obligation to provide/require personal data for the conclusion of a contract

The provision of personal data is not required by law. In order to use the platform, it is necessary that you enter your name, an e-mail address and, depending on your role, other data in addition to agreeing to the Terms of Service. Without these data we cannot enter into a user relationship with you. In addition, by agreeing to the Terms of Service, you agree to keep the data you provide truthful and accurate at all times.

When entering personal data on the platform, we will always inform you whether the information is mandatory for use ("mandatory field") or whether it is voluntary. Failure to provide the necessary data means that we are unable to provide our services. If optional data is missing, we may not be able to offer our services in full.

External links

The EUTAS platform allows other users to share links to websites of third parties - providers not affiliated with us. After clicking on the link, we have no influence on the collection, processing and use of any personal data (such as the IP address or the URL of the page on which the link is located) transferred to the third party by clicking on the link, since the conduct of third parties is naturally beyond our control. We assume no responsibility for the processing of personal data transmitted in this way by third parties.

Security

Our employees and the service companies commissioned by us are bound to secrecy and compliance with the provisions of the applicable data protection laws. We take all necessary technical and organisational measures to ensure an appropriate level of protection and to protect your data managed by us, in particular against the risks of unintentional or unlawful destruction, manipulation, alteration, unintentional loss or unauthorized disclosure or access. Our security measures are constantly improved in line with technological developments.


2. General information on the purposes of data processing

We process your personal data in order to fulfill our contractual obligations towards our users. The processing is a prerequisite for us being able to propose promising providers to clients or offer providers exciting projects time and again. In addition, we process your personal data in order to settle our agency services with the providers in the event of success (cf. I. No.2, II. No. 2 and II. No. 6 of our Terms of Service).

Deviating from this, we process personal data to protect our legitimate interests in consideration of your interests (e.g. if we send you promotional newsletters). In some cases we are legally obliged to process data (e.g. to surrender data to investigative authorities).

In all other cases we ask you for a separate consent for data processing (e.g. submission including possible publication of a rating for a provider in the EUTAS database).


3. Information you provide us with

By using the EUTAS platform in accordance with our Terms of Service, we receive the following data from you directly or through publication on your part, for example:

  • Access data (e.g. user name and password)
  • Profile data (e.g. company name, industry, contact possibilities, photo)
  • News, group contributions, appointment information
  • Project information and, if applicable, information on contracts between you and third parties
  • payment details

The above data includes both mandatory and optional information. The data we receive from you varies according to your role as a provider or client.

E-mail address(es)

We use the e-mail address(es) you provide to send you newsletters or status e-mails as well as advertising for further services and offers from EUTAS or surveys for the purpose of our own market research in accordance with our Terms of Services, unless you have objected to such use.
You can unsubscribe from the newsletter and advertising information either via the link at the end of the respective e-mail or you can send an e-mail to info@eutas.org.

Retention period:

  • If you have not already deleted the e-mail addresses yourself, we will delete them when you delete your user account.

Legal basis:

  • with regard to newsletters and advertising: Art. 6 I f) EU GDPR
  • in the remaining cases: Art. 6 b) EU GDPR

Data in the context of user feedback

If you provide us with feedback on your own initiative or as part of one of our surveys, we will process your data to carry out the survey and to evaluate and, if necessary, implement your feedback. If necessary, we may ask you for your separate consent to the processing of your data within the scope of a survey.

Retention period:

  • We store this data until your user account is deleted, unless you have consented to further processing.

Legal basis:

  • Separate Consent: Art. 6 I a) EU GDPR
  • Other cases: Art. 6 I b) EU GDPR

3.1 Client

Mandatory information during registration

Registration is required to use the platform. To do this, we must collect and process certain personal data.

Category: e.g.

  • Email
  • Password
  • First name and surname
  • company

Visibility:

  • Your access data (e-mail address and password) are not visible to third parties.
  • We will not pass this data on to third parties under any circumstances.
  • EUTAS and providers associated with you can view the following information: First name, surname and company

Retention period:

  • We delete this data when you delete your user account

Legal basis:

  • Art. 6 I b) EU GDPR

Optional information during registration

You can also enter additional information during registration.

Category: e.g.

  • Business unit

Visibility:

  • Providers and EUTAS associated with you can view your details
    Retention period:

  • We delete this data when you delete your user account

Legal basis:

  • Art. 6 I b) EU GDPR

Optional information in the user profile on the EUTAS platform

You can voluntarily provide additional information in your user profile.

Category: e.g.

  • Job role
  • Division
  • Portrait photo (Avatar)
  • Specialties (experience)
  • Telephone number
  • Supplementary company-related data

Visibility:

  • Providers and EUTAS associated with you can view your details

Retention period:

  • We delete this data when you delete your user account

Legal basis:

  • Art. 6 I b) EU GDPR

Information for inquiries to EUTAS

Within the scope of a (project) inquiry you can provide EUTAS with various information

Category: e.g.

  • Name and objective of the project
  • Project specification and files
  • Project description
  • Objectives
  • Support required
  • Properties required by the provider

Retention period:

  • We delete this data when you delete your user account
  • However, these will remain with the recipients even after deletion of your user account.

Legal basis:

  • Art. 6 I b) EU GDPR

Feedback in the context of a reflection paper or an offer

You can provide written feedback in the context of the entire reflection paper and for each individual offer position.

Visibility:

  • The visibility of the contributions is always determined by the context. By default, your contributions are only visible to users of the same work space.
  • Your contributions cannot be found by non-users or via Internet search engines.

Retention period:

  • We delete this data when you delete your user account
  • However, these will remain with the recipients even after deletion of your user account.

Legal basis:

  • Art. 6 I b) EU GDPR

Submission of evaluations (EUTAS database)

Clients have the possibility to evaluate their provider(s) in the EUTAS database. With the release for publication the user gives in any case an independent consent.

Category: e.g.

  • Appraisals

Visibility:

  • Your rating will be visible to all registered users after a check.

Retention period:

  • If you have not requested your ratings to be deleted (by e-mail to info@eutas.org), we will delete or make them anonymous if you delete your user account.

Legal basis:

  • Art. 6 I a) EU GDPR

3.2 Provider – Basic Membership

Mandatory information during registration

Registration is required to use the platform. To do this, we must collect and process certain personal data.

Category: e.g.

  • Email
  • Password
  • First name and surname

Visibility:

  • Your access data (e-mail address and password) are not visible to third parties.
  • We will not pass this data on to third parties under any circumstances.
  • EUTAS and clients associated with you can view the following information: First name and surname

Retention period:

  • We delete this data when you delete your user account

Legal basis:

  • Art. 6 I b) EU GDPR

Optional information during registration

You can also enter additional information during registration.

Category: e.g.

  • company

Visibility:

  • Providers and EUTAS associated with you can view your details

Retention period:

  • We delete this data when you delete your user account

Legal basis:

  • Art. 6 I b) EU GDPR

3.3 Provider – Premium Membership

Mandatory information during registration

Registration is required to use the platform. To do this, we must collect and process certain personal data.

Category: e.g.

  • Email
  • Password
  • First name and surname
  • Telephone number
  • Skills
  • Sector experience
  • Spoken languages

Visibility:

  • Your access data (e-mail address and password) are not visible to third parties.
  • We will not pass this data on to third parties under any circumstances.
  • EUTAS and clients associated with you can view the following information: First name, surname, telephone number, skills, sector experience and spoken languages

Retention period:

  • We delete this data when you delete your user account

Legal basis:

  • Art. 6 I b) EU GDPR

Optional information during registration

You can also enter additional information during registration.

Category: e.g.

  • company

Visibility:

  • Providers and EUTAS associated with you can view your details

Retention period:

  • We delete this data when you delete your user account

Legal basis:

  • Art. 6 I b) EU GDPR

Optional information in the user profile on the EUTAS platform

You can voluntarily provide additional information in your user profile.

Category: e.g.

  • Web page
  • Hobbies
  • References

Visibility:

  • Providers and EUTAS associated with you can view your details

Retention period:

  • We delete this data when you delete your user account

Legal basis:

  • Art. 6 I b) EU GDPR

Feedback in the context of a reflection paper or an offer

You can provide written feedback in the context of the entire reflection paper and for each individual offer position.

Visibility:

  • The visibility of the contributions is always determined by the context. By default, your contributions are only visible to users of the same work space.
  • Your contributions cannot be found by non-users or via Internet search engines.

Retention period:

  • We delete this data when you delete your user account
  • However, these will remain with the recipients even after deletion of your user account.

Legal basis:

  • Art. 6 I b) EU GDPR

Payment data for commission payments

EUTAS processes payment data from providers within the scope of commission processing for consultancy contracts and follow-up orders (see Terms of Service II. 6.).

Category: e.g.

  • Bank account
  • Transaction data

Visibility:

  • Payment data can never be viewed by other users.

Retention period:

  • We store this data until your user account is deleted and/or beyond that until the data is no longer subject to any tax, commercial or other legal storage obligations.

Legal basis:

  • Art. 6 I b) EU GDPR

Payment data for monthly contribution

EUTAS uses the service provider Stripe Payments Europe Ltd. (The One Building, 1 Grand Canal Street Lower, Dublin, Ireland) to collect the monthly membership fee for the Premium Membership.

Category: e.g.

  • Payment data

Visibility:

  • Payment data can never be viewed by other users.

Retention period:

  • We store this data until your user account is deleted and/or beyond that until the data is no longer subject to any tax, commercial or other legal storage obligations.

Legal basis:

  • Art. 6 I b) EU GDPR

Registration EUTAS database

Providers have the possibility to register in the EUTAS database. A separate consent of the user is required for this.

Categories: e.g.

  • Ratings by clients
  • Selected user profile information

Visibility:

  • Your profile and ratings submitted for your database entry can be viewed by all clients of the EUTAS platform

Retention period:

  • We store this data until you revoke your consent to listing in the EUTAS database - at the latest, however, until your user account is deleted.

Legal basis:

  • Art. 6 I a) EU GDPR

4. Information that we automatically receive as a result of your use of the platform

If you use the EUTAS platform or the EUTAS database, we automatically collect data from you during your use and visit.

Server log files

On the server we create so-called log files. These log every access to a resource on our servers. We record the IP address and the time at which a certain URL is called up. Furthermore, the amount of data transferred and the web browser used are registered. Log files are used to provide and maintain the security of the EUTAS platform and the EUTAS database.

The collected data will be stored for 14 days in complete form. Only a few of our employees have access to this data with the appropriate access rights. The legal basis for this processing of personal data is Art. 6 I f) EU GDPR. If the data is required as part of a criminal investigation, the retention period is extended until the investigation is completed and any legal retention periods within the scope of criminal prosecution have expired.

Cookies

In order to identify you as a user during your visit, we use so-called session cookies. These session cookies are stored in your web browser and can be managed via it. The session cookies are deleted after the end of the session or after a certain period of inactivity. Most browsers are preset to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser so that it informs you before cookies are stored. Users who do not accept cookies may not be able to use the full range of functions of the EUTAS platform and the EUTAS database. The legal basis for this processing of personal data is Art. 6 I b) EU GDPR.

Third-party cookies

To ensure the availability, integrity and security of the EUTAS platform and the EUTAS database, we use the free service reCAPTCHA from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to prevent spam and misuse of forms. By using this service, personal data is transferred to Google LLC. We cannot influence which personal data is processed. The personal data collected, the purposes for which they are used and how long they are stored can be found in the service's data protection statement: google.com/policies/privacy. The legal basis for this processing of personal data is Art. 6 I f) EU GDPR.


5. Who receives personal data?

We will only pass on your personal data to third parties if

  • this is necessary to fulfil our own business purposes,
  • you have given your consent,
  • we are legally, judicially or officially obliged to do so.

If we cooperate with an external service provider in the context of data processing (e.g. in software development or payment processing), we use so-called data processing agreements. With this data protection regulation we always remain responsible for data processing. All service providers are checked by us in advance and continuously for the measures they have taken with regard to data protection and data security. In this way, we ensure the statutory and contractually stipulated regulations for the protection of personal data.

Users of the EUTAS platform

See section 3. Information you provide us with for information about the visibility to other users.

Non-member countries

Data is transferred to non-member countries, but only in compliance with the legal requirements.
In particular, we make certain data available to other users or third parties worldwide in order to fulfill our contract with you. Neither an adequacy resolution pursuant to Art. 45 EU GDPR nor suitable guarantees pursuant to Art. 46 EU GDPR are required for this.

If the transfer of data to a third country does not serve to fulfill our contract with you, if we do not have your consent, if the transfer is not necessary to assert, exercise or defend legal claims and if no other exception applies, we will only transfer your data to a non-member country if an adequacy decision pursuant to Art. 45 EU GDPR or suitable guarantees pursuant to Art. 46 EU GDPR are available.

One of these adequacy resolutions is the so-called "Privacy Shield" for the USA. For transmissions to companies certified according to the Privacy Shield, the level of data protection is generally considered appropriate within the meaning of Art. 45 EU GDPR.

As a rule, however, we do not rely on the Privacy Shield, but create appropriate guarantees in accordance with Art. 46 EU GDPR by concluding the EU standard data protection clauses issued by the European Commission with the receiving body and an appropriate level of data protection.

More categories of recipients

  • State authorities and courts
  • Technical Service Providers
  • hosting service provider
  • email delivery service provider
  • email marketing service provider
  • marketing automation service provider
  • Software Developer
  • payment service providers

6. What rights can you assert?

General

You have the right to object at any time to the processing of your personal data in accordance with Art. 6 para. 1 f) of the EU GDPR. Therefore please send an e-mail to privacy@eutas.org.

Direct mail / Newsletter

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can unsubscribe from the newsletter and advertising information either via the link at the end of the respective e-mail or you can send an e-mail to info@eutas.org.

Right to information

You have the right to ask us to confirm whether we are processing personal data concerning you. If this is the case, you have a right to information about this personal data. Please send us an e-mail to privacy@eutas.org.

You also have the right to the following information:

  • the processing purposes
  • the categories of personal data to be processed
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
  • the existence of a right of rectification or deletion of personal data concerning to you or of a restriction on processing by the controller or of a right of opposition to such processing
  • the existence of a right of appeal to a supervisory authority
  • if the personal data are not collected from the data subject, all available information on the origin of the data
  • the existence of automated decision-making, including profiling in accordance with Art. 22 para. 1 and 4 of the EU GDPR and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject

If personal data are transferred to a third country or an international organisation, you as the data subject have the right to be informed of the appropriate guarantees (in accordance with Art. 46 EU GDPR) in connection with the transfer.

Right of rectification

You have the right to request us to correct any inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

Right of deletion

You have the right to request us to delete personal data concerning you immediately if one of the following reasons applies:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You revoke your consent on which the processing was based in accordance with Art. 6 para I a) or Art. 9 para II a) EU GDPR and there is no other legal basis for the processing.
  • You file an objection to processing in accordance with Art. 21 para 1 of the EU GDPR and there are no overriding legitimate grounds for processing or you file an objection to processing in accordance with Art. 21 para 2 of the EU GDPR.
  • The personal data have been processed unlawfully.
  • The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
  • The personal data was collected in relation to information society services offered directly to a child in accordance with Art. 8 para 1 EU GDPR.

Upon your request, we are obliged to delete the relevant data immediately. The legality of the processing based on the consent until revocation remains unaffected.

Right to limitation of processing

You are entitled to request a restriction in the processing of your personal data if you dispute the accuracy of the personal data for the duration of time that enables the data controller to verify the accuracy of the personal data. If the processing is unlawful and you refuse to delete your personal data and instead request us to restrict the use of your personal data, we will comply with this request. The processing is also restricted if we use your personal data for the purposes of processing, but you need it to assert, exercise or defend your own legal claims, or you have filed an objection against the processing pursuant to Art. 21 para. 1 EU GDPR, as long as it is not yet clear whether the legitimate reasons of the person responsible outweigh their reasons. You will be informed by us before the restriction is lifted.

Right to data transferability

You have the right to receive the personal data concerning you that you have provided to us in a structured, current and machine-readable format and you have the right to transmit this data to another person in charge without obstruction by us to whom the personal data was provided. The precondition is that

a) the processing is based on consent pursuant to Art. 6 para. 1 letter a) EU DSGVO or Art. 9 para. 2 letter a) EU DSGVO or on a contract pursuant to Art. 6 para. 1 letter
b) EU DSGVO and b) the processing is carried out using automated procedures.

When exercising your right to data transferability, you have the right to request that the personal data be transferred directly by us to another responsible party, insofar as this is technically feasible.

Right of revocation in case of consent

You can withdraw your consent to the processing of your data. In future we may no longer use these (Art. 7 para. 3 EU GDPR). This does not affect the legality of the processing carried out on the basis of the consent until revocation.

Right of appeal

We do not process your data in accordance with legal requirements? You can file a complaint about us (Art. 77 EU GDPR). Contact person is the

Landesbeauftragte für den Datenschutz und die Informationssicherheit
in Baden-Württemberg

PO box 10 29 32
D-70025 Stuttgart
GERMANY
Phone: +49 (711) 6 15 54 10
Email: poststelle@lfdi.bwl.de


7. Terms used in our privacy policy

EU GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

Personal data: According to Art. 4 point 1 EU GDPR, any information relating to an identified or identifiable natural person is considered to be identifiable if it can be directly or indirectly identified, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

Newsletter: Newsletter or status e-mails as well as advertising for own similar products and services or surveys for the purpose of own market research.

Non-member country: A country outside the EU.

Cookies: Small files that enable us to collect information specific to you, the user, on your terminal device. You can prevent cookies from being saved via your browser settings.


Date: August 9, 2018