Legal

Privacy Policy

01

Who we are

fairCT B.V., Gustav Mahlerplein 2, 1082 MA Amsterdam, Netherlands, is the controller of personal data collected through this website. Our KVK number is 96375388 and our VAT number is NL867583964B01.

For privacy questions or to exercise your rights, email gdpr@fairct.org.

Personal data we collect

We collect the information you choose to provide when you use this website:

  • Contact form: name, email address, company or institution, phone number and message. Name, email address and message are required.
  • Newsletter form: email address and a record that consent was given.
  • Both forms include a hidden botcheck field used to filter spam.
  • Visitor IP address in hosting and security provider server logs.

This website sets no cookies and uses no analytics, advertising, tracking pixels or browser storage. Because we set no cookies, no cookie consent banner is required. Our hosting and security provider processes visitor IP addresses in server logs to keep the site available and secure; the legal basis is our legitimate interests under Article 6(1)(f) GDPR. Our fonts are served from this website and are not requested from Google Fonts.

How we use your data

We use contact-form details and other business correspondence to answer and manage your enquiry. Our legal basis is our legitimate interests in communicating about fairCT and responding to enquiries, under Article 6(1)(f) GDPR.

We use your email address to send the newsletter only where you have consented through the explicit tick-box at the point of signup, under Article 6(1)(a) GDPR. You can withdraw consent at any time by emailing us.

How form data is sent

When you submit either form, your browser sends the information to fairCT's own website endpoint. That endpoint sends the notification to a fairCT mailbox through an email provider that processes data within the European Union. Your browser does not send form data directly to a third party.

Recipients and international transfers

We use processors to provide operational, technology and website services. These include Ediphy, our parent group, which provides operational and technology services; cloud hosting and infrastructure providers, including Google; and an email provider that sends website form notifications to our mailbox. Our processors act only on our documented instructions under contracts meeting Article 28 GDPR requirements.

Some processors may process personal data outside the European Economic Area. Where they do, we use appropriate safeguards, such as a European Commission adequacy decision or Standard Contractual Clauses.

How long we keep your data

We keep enquiry correspondence for no longer than necessary to deal with the enquiry and any resulting business relationship. For website enquiries, our normal outer limit is 24 months after resolution, unless a longer period is necessary for a resulting business relationship or legal claim. We keep newsletter data until you withdraw consent.

Your rights

Subject to the conditions in the GDPR, you have the right to:

  • access, rectify or erase your personal data;
  • restrict or object to its processing;
  • receive data you have provided in a portable format;
  • withdraw consent at any time where processing is based on consent.

To exercise these rights, email gdpr@fairct.org.

Complaints

You may lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority, at autoriteitpersoonsgegevens.nl, or with the supervisory authority in your habitual residence, place of work or place of the alleged infringement.