You will find our privacy down below. One can also download a PDF version here. 

At E.S.K.V. Odin, we value your privacy. This privacy statement is meant to give you the insight into the data processing practices of E.S.K.V. Odin. This includes, but is not limited to, the categories of personal data processed, the purposes of processing and your rights related to the processing. It also stands to show the compliance of personal data processing practices of E.S.K.V. Odin with the General Data Protection Regulation.

What kinds of personal data do we process?

E.S.K.V. Odin processes all personal data required for the purpose of your interaction. The kinds of data vary by different interactions, but never exceeds the data you explicitly provided, such as your name, date of birth, gender, address, e-mail account, phone number, student number, as well as bank account details (wherever applicable).
We also process the pictures made during the events organized by E.S.K.V. Odin based on the ground of legitimate interest as an association by putting them on our website and a selection of them on social media. We undertake our best efforts to delete all the pictures considered shaming or unflattering.

Why do we process your personal data?

We process your personal data only for the purposes required to facilitate your interaction with E.S.K.V. Odin. Examples of such purposes are:

• Registering you as a member of E.S.K.V. Odin
• Facilitating your participation in events provided by E.S.K.V. Odin
• Maintaining contact with you via e-mail
• Providing you with our newsletter
• Fulfilling orders you purchase via our website
• Evaluating the metadata of visitors of our website for purposes of further improvement
• Other purposes which you explicitly consented to.

We reserve the right to send your personal data to third parties where explicitly obliged by law.

How do we process your personal data?

E.S.K.V. Odin processes the personal data you provide us according to the principles of lawfulness, fairness and transparency. To that end, we will always ask for your explicit consent before the processing of your data, as well as in cases of transfer of your personal data to a third party or further processing of your personal data for purposes incompatible with the purposes mentioned above.

What are your rights?

As a data subject, you always have the rights to access your personal data processed by E.S.K.V. Odin, to rectify inaccurate data, as guaranteed by art. 15 and 16 GDPR.
You also have the conditional right to ask for deletion of your personal data processed by E.S.K.V. Odin, or object to its processing should deletion be impossible or undesired, as guaranteed by art. 17 and 18 GDPR. Please check below for the specific requirements. 
E.S.K.V. Odin will ensure timely reaction to your exercise of rights, and shall respond at latest within a month of your request. We reserve the right to ask for your confirmation of identity to prevent unauthorized access to data by, for example, asking you to prove your identity with your ID card at the office of E.S.K.V. Odin.

Right to access
Based on art. 15 GDPR, you always have access to your data and the following information:

• The categories of data concerned;
• The purposes of the data processing;
• The third parties to whom your data have been or will be disclosed (if applicable);
• The period for which your data will be stored;
• The existence of other rights you may exercise, including the right to rectification, erasure and to lodge a complaint with a supervisory authority (Autoriteit Persoonsgegevens)

Upon your request, we will provide you with a digital copy of your personal data processed by us for purposes of checking correctness of data, as well as compliance with data protection regulations.

Right to rectification
Based on art. 16 GDPR, you have the right to obtain rectification of inaccurate data.

Right to withdraw consent
Based on art. 7(3) GDPR, you have the right to withdraw your consent for processing of the data by E.S.K.V. Odin. This right can be exercised at any time. In the event of your consent being the sole legal basis for processing, it will result in erasure of your personal data, and will render it impossible for us to further provide you with our services. It will not, however, affect the processing already carried out by E.S.K.V. Odin.

Right to erasure
Based on art. 17 GDPR, you have the conditional right to obtain erasure of your data. This right can be exercised when:

• Your personal data are no longer necessary in relation to the purposes for which they were collected; or
• When you exercised your right to withdraw consent and there is no other legal basis for the processing; or
• When you exercised your right to object from processing from art. 21(1) and E.S.K.V. Odin found no overriding legitimate grounds for further processing; or
• Your personal data have been unlawfully processed; or
• The personal data have to be erased for compliance with legal obligations of EU or Dutch law.

We reserve the right to refuse deletion if none of above scenarios are applicable. This may involve data processed for purposes of our legitimate interests (e.g., further improvement of events) or compliance with a legal obligation under Union or Dutch law.

Right to obtain restriction
Based on art. 18 GDPR, you have the right to obtain restriction of processing where one of the following applies:

• You contested the accuracy of your personal data processed by us; or
• Your personal data have been unlawfully processed, but you have an interest in further storage of said data; or
• You exercised the right to object from art. 21(1) GDPR and await verification.

Where processing has been restricted your data will only be processed with your consent.

Right to object
Based on art. 21 GDPR, you have the right to object at any time, under grounds relating to your personal situation, to processing of your data carried out by us under the legal basis of legitimate interests (e.g., further improvement of events). Exercise of this right will result in erasure of your personal data, and will render it impossible for us to further provide you with our services, unless we demonstrate compelling legitimate grounds for the processing which override your interests.

Right to complain
Based on art. 77 GDPR, you have the right to complain to the supervisory authority (Autoriteit Persoonsgegevens) if you consider that our processing violated your right to privacy.
We shall communicate any rectification, erasure or restriction of processing to any third party to whom your data have been disclosed, unless this proves impossible or involves disproportionate effort. We shall inform you about those third parties if you request it.

Contact details

Got any questions? Want to exercise your rights from the GDPR? Please send an e-mail to bestuur@eskvodin.nl.

Disclaimer

E.S.K.V. Odin reserves the right to alter the privacy policy at any time without prior notification. This is to ensure that E.S.K.V. Odin is compliant with the relevant privacy legislation to the best of our capabilities, which may or may not require further amendment of this statement. E.S.K.V. Odin will inform all members after any alterations are made.