Data Protection Policy
Last updated: 12 April 2022
Protecting and securing your Data is especially important to Care Forward. This Data Protection Policy forms an integral part of the General Conditions of Use and is intended to govern the collection, use of and access to your Data within the framework of use of the Website and/or the Care Forward Service, particularly during the organization, management and participation in online events. All terms in capital are defined in the General Conditions of Use.
Article 1. Legality of processing – Access to the Website and Services
The Data Protection Policy shall apply to any User who accesses the Website and/or Care Forward Services. Each User is responsible to read and understand the Data Protection
Policy, notably each time the Data Protection Policy is modified.
Article 2. Identification of Care Forward
The Data controller of the careforward.org website is: Care Forward GmbH.
- Managing Director: Laura Esnaola
- E-Mail: info@careforward.org
- Internet: careforward.org
- Registered: Amtsgericht Berlin Charlottenburg
- HRB: 218674
- VAT Reg. No.: DE 33 1876 723
- Responsible with regards to contents: Laura Esnaola
Article 3. Data collected by Care Forward as Data controller about the Administrators and Managers
Purpose | Data Collected | Legal basis | Duration of storage | |
1 | Creation and management of your Care Forward Account. |
|
The need to enforce our contract with you to access and use an Account on our website and our application. (article 6.1.b GDPR). | 3 years after signing up for the Care Forward Service |
2 | Improvement of the services offered by Care Forward and measurement of audiences. |
|
Our legitimate interest in analyzing our services to offer you the best user experience possible. (article 6.1.f GDPR). | 1 year |
3 | Response to the demands of the administrative and legal authorities. |
|
The legal obligation of stakeholders (article 6.1.c GDPR). | 1 year |
4 | Proposal of new services adapted to your needs and commercial prospects. |
|
Your consent. (article 6.1.a GDPR) | 6 months |
5 | Chat on the website. |
|
Your consent. (article 6.1.a GDPR) | 6 months |
6 | Analytics measures of your use of the website. |
|
Your consent. (article 6.1.a GDPR) | 6 months |
7 | Customization of the website. |
|
Your consent. (article 6.1.a GDPR) | 6 months |
Article 4. Data collected by Care Forward as Data processor about the Participants
Purpose | Data Collected | Legal basis | |
8 | Rendering services of online event to the Participants |
|
Performance of the agreement between us and the client of Care Forward (Data controller) (article 6.1.b GDPR) |
NB: the webinar created via the Care Forward Service (videos from the webinars, comments, polls, etc.) can be downloaded by the Client (Administrator of the webinar).
Article 5. Processors / sub-processors of Care Forward
Care Forward uses third-party solutions for marketing, statistical and functional purposes. All of our service providers comply with applicable data protection regulations in accordance with personal data protection agreements that we have signed with them.
We use processors for these purposes:
- Error logs tracking;
- Analytics;
- Localization;
- Cloud;
- Email analysis;
- Support;
- Automatization of tasks;
- Payments;
- Emails;
- Sound and video.
Care Forward may transfer Data to service providers located outside the European Union. In these cases, Care Forward ensures that this transfer is performed in compliance with the applicable regulations and guarantees a sufficient level of protection to the privacy and fundamental rights of persons (in particular via the standard contractual clauses of the European Commission and data processing agreements).
Article 6. Rights of the User concerning their Data
- Right to access: you have the right to obtain confirmation that your Data are processed and to obtain a copy of it as well as certain information related to its processing;
- Right to rectify: you can request the rectification of your Data which are inaccurate, and also add to it. You can also change your personal information in your Account at any time; >
- Right to delete: you can always have your Data deleted;
- Right to object: you can object, for reasons relating to your particular situation, to the processing of your Data. For instance, you have the right to object to commercial prospection;
- Right to limit the processing: in certain circumstances, you have the right to limit the processing of your Data;
- Right to portability: you can always ask to receive your Data which you have provided to us in a structured, commonly used and machine-readable format, or, when this is possible, that we communicate your Data on your behalf directly to another data controller;
- Right to withdraw your consent: for processing requiring your consent, you have the right to withdraw your consent at any time. Exercising this right does not affect the lawfulness of the processing based on the consent given before the withdrawal of the latter;
- Right to define the instructions relating to the use of your personal data post mortem: you have the right to define instructions relating to the retention, deletion and communication of your Data after your death;
- Right to lodge complaint to the CNIL: you have the right to lodge a complaint with the responsible monitoring authority (CNIL) or to obtain remedies from the competent courts if you think that we have not respected your rights.
You can modify, delete and access your Data directly by sending an email to support@careforward.org. Any deletion carried out via email request will lead to your Data being deleted generally within one month. Should Care Forward not be able to delete your Data within one month, Care Forward shall alert you and delete your Data within a maximum of two (2) more months. To exercise any of the aforementioned rights or for any question you may have, you may contact Care Forward.
In accordance with the applicable legislation, requests to exercise rights must provide sufficient information so that Care Forward can check the identity of the persons concerned, to ensure that the ones making the requests are the persons concerned or those who are authorized by them. Upon receipt of a request Care Forward shall determine its admissibility in accordance with the applicable regulations.
Article 7. Security and confidentiality of Data
The Data collected by Care Forward are stored in a secure environment. To ensure security of the Data, Care Forward particularly makes use of the following measures:
- Access management – authorized person;
- Access management – person concerned;
- Network surveillance software;
- IT backup;
- Digital certificate development;
- Login/password;
- Firewalls.