INATBA (“we”) is the operator of the website https://www.blockchainconvergence.com/ (the “Website”). We collect and process personal data of individuals (the “User” or “you”) using the Website and the services offered through the Website. The protection and confidentiality of your personal data is of particular importance to us. We treat your personal data as confidential and in accordance with the applicable data protection laws, in particular with the EU General Data Protection Regulation (the “GDPR“).
In the following, we will inform you what data is collected during your visit to our Website, as well as the legal basis for the processing of personal data, the purpose of the data processing, the use, the duration of the storage of data, and your rights.
Name and address of the responsible body
The responsible body (the “Controller”) within the meaning of the GDPR is:
International Association for Trusted Blockchain Applications
Association Internationale sans but lucratif
Avenue de Tervueren 188a/4
If you have any questions relating to data processing and your rights according to the applicable data protection laws, you may contact us by email: firstname.lastname@example.org.
What categories of data do we collect?
Technical data: such as your IP address or your operating system when using the Website (see below for more information).
Behaviour: the manner in which you use/handle our Website or our emails.
Invoicing and payment data, when amounts must be charged.
Your correspondence with us; and if you are (a person of interest) a prospect (e.g. an interesting party for a sponsorship, for a partnership or for participation in an event as a speaker or attendant) for prospection by email (cold mailing) or by phone (cold calling), we may collect your company and personal name, function, work phone and professional email address.
How do we use your personal data?
To communicate with you (e.g. when you ask us a question).
To provide you with (targeted) information on services and products (only if you are customer or (person of interest) a prospect, based on legitimate interest, or if you request it, e.g. by subscribing to our newsletter). In any case, you can always opt-out of receiving any more of these communications.
Provisioning of the Website and creation of log files
The provider of the Website automatically collects and stores information in so-called server log files. Such information is needed to establish a connection to the Website. The processed information includes:
Browser type and browser version.
Operating system used.
The Internet service provider of the User.
The IP address of the User.
Hostname of the accessing computer.
Time of the server inquiry.
Websites from which the User’s system reaches the Website and Websites accessed by the User’s system via our Websites.
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user and is not combined with other data sources.
The legal basis for the processing of the data is Article 6 (1)(f) GDPR. The log files are processed for technical and administrative purposes of establishing and maintaining a connection in order to guarantee the security and functionality of the Website and to be able to prosecute any illegal attacks on it if necessary.
Our legitimate interest in data processing pursuant to Art. 6 (1)(f) GDPR results from the security interest mentioned above and the necessity of operating our Website free of troubles.
Collected and processed data will be stored for one month.
We make use of the following types of cookies:
Strictly necessary cookies. These cookies are necessary for the functioning of our Website. They allow you to log in and use our services.
Analytical/performance cookies. These cookies analyse the way our Website is used, which pages are most frequently visited, which problems occur, etc. This way, we can improve our Website and keep your user experience optimal.
Functionality cookies. These cookies are used to recognize individual users and to remember their preferences. We can, for instance, remember your choice of language and other settings so that they are immediately correct on your next visit.
We do not use targeted or advertising cookies. Such cookies analyse your surfing behaviour (on our and other websites) to show you ads that match your interests and profile. Such cookies generally come from third parties (such as Google or Facebook) that collect such information and also manage the ads based on it.
As a rule, our cookies expire automatically.
Cookies can also be explained on the basis of who issues them. They can be divided into:
First party cookies. These cookies come from us. They control and remember, e.g. the display of the website in your preferred language or remember the contents of a shopping basket.
Third-party cookies. These cookies come from other parties. They are often used to track online behaviour across different websites or to analyse website use (such as Google Analytics).
Most of the cookies we use are so-called session cookies. They will automatically be deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit our Website.
We erase your Personal Data automatically when it is no longer required for the purposes listed above. We also erase your Personal Data according to your request and if further storage is neither required nor permitted by applicable laws.
This Website uses the functions of the web analytics service Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). Google is certified under the EU Privacy Shield and thus guarantees compliance with European data protection laws:
Google will use this information to evaluate your use of our Website, to compile reports on website activity and to provide other services associated with the use of the Website and the Internet. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Information generated by the cookies are automatically deleted by Google after one month or earlier in accordance with the settings of your web browser.
This processing is required to pursue our legitimate interests (Art. 6 paragraph 1 lit. f GDPR) to provide website visitors with a website experience that is tailored to their personal preferences and to provide product recommendations and advertising for our company and our products that are tailored to their interests. The transfer to the United States of America is based on an adequacy decision by the EU Commission (Art. 45 GDPR) due to the recipient’s participation in the “EU-US Privacy Shield”.
A contact form is available on our Website. The data entered in the input mask is stored in a database set up in Google Drive, a service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google LLC is certified under the EU Privacy Shield and thus guarantees compliance with European data protection laws: https://policies.google.com/privacy/frameworks?hl=en&gl=de.
The legal basis for the storage and processing of data is Article 6 (1) (f) GDPR. The processing is necessary for communication with you, of which constitutes a legitimate interest in data processing pursuant to Article 6 (1) (f) GDPR.
We will delete your personal data as soon as the purpose of the storage no longer applies.
Legal basis for the processing of your data
We process your personal data in strict accordance with the applicable privacy legislation and on the basis of the following legal grounds:
Performance of the agreement: we need to process some of your data to deliver our services, to comply with our obligations (in relation to the conference) and to communicate with you prior to entering into a (sponsorship) contract with you and to evaluate the opportunity of such a contract. For example, we need your contact details to be able to contact you and send you information after you register to the event.
Legal obligation: in some cases, we are legally obligated to process certain information about you. For example, when we have to send your invoices, we need your VAT number.
Legitimate interest: if you are a partner, sponsor or more generally in an existing trade relationship with us, we may send you information and newsletters about our activities based on a legitimate interest to do so. Unless you unsubscribe of course. If you are (a person of interest) a “prospect” (e.g. an interesting party for a sponsorship, for a partnership or for participation in an event as a speaker or attendant), we may collect your personal data as described above and contact you by phone and/or email to inform you about our products.
Consent: we may also process your data if we are given express consent, e.g. when you register for a newsletter or for certain (targeted) offers (direct marketing, such as for our events).
- How do we collect your data?
When using our website.
When communicating with us.
When using our services and from public sources. For example, if you are (a person of interest) a “prospect” (e.g. an interesting party for a sponsorship, for a partnership or for participation in an event as a speaker or attendant), we may gather your personal contact details via publicly available sources such as your company website.
- How do we protect your data?
Technical security measures
In terms of access (login requirements, password policy, role division, etc.), storage (encryption, backup, etc.), and protection against outside access (firewall, antiviral software, etc.) from the media on which personal data can be stored.
This includes raising awareness among employees and service providers concerning the importance of privacy, the enforcement of policies, the continuous maintenance of a data register, compliance with a data policy, etc.
If we process your personal data based on grounds of legitimate interest (such as processing for prospection purposes of persons we have no prior relationship with), we will conduct a “legitimate interest assessment” (or “balancing test”) to ensure that additional safeguards are foreseen and applied. This way, we guarantee a proportionate and balanced processing of your data in accordance with the privacy legislation.
Despite the security measures that we take, it is important to know that the transfer of data via an Internet connection is never without risks and you must take the necessary precautions when you are connected with the Internet in order to protect yourself from viruses, malware, etc.
Your rights in connection with the processing of personal data
In the following, we inform you of the rights that you have in connection with the processing of personal data by us and which you may exercise according to the applicable data protection laws, in particular the GDPR.
Right of access
You have the right, at any time, to request information concerning your personal data processed by us. In the event of such processing, you may request the following information from us: (i) the purposes for which the personal data is processed; (ii) the categories of personal data which are processed; (iii) the recipients or categories of recipients to whom your personal data have been or will be disclosed; (iv) the planned duration of the storage of your personal data or, if specific information is not possible, criteria for determining the storage duration; (v) the existence of a right to correct or delete your personal data, a right to restrict the processing by us or a right of objection to such processing; (vi) the existence of a right of appeal to a supervisory authority; (vii) all available information on the origin of the data if the personal data is not collected directly from you; and (viii) the existence of automated decision-making, including profiling in accordance with Article 22 paragraph 1 and 4 GDPR and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing on you.
You have the right to request information on whether your personal data is transferred to a third country or an international organisation. In this context, you may request to be informed on the appropriate guarantees in connection with the transfer of data.
Right to rectification
You have the right to request us to correct and/or complete your personal data if your personal data processed is incorrect or incomplete.
Right to erasure
You may request for your personal data to be deleted if: (i) the personal data concerning you is no longer necessary for the purposes for which they were collected or otherwise processed; (ii) you revoke your consent to the processing and there is no other legal basis for the processing; (iii) you submit an objection to data processing and there are no predominant justifiable reasons for the processing; (iv) your personal data have been processed illegally; or (v) the deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
Right to restriction of processing
You may request to restrict the processing of your personal data if: (i) you deny the accuracy of the personal data for a period of time that enables us to verify the accuracy of the personal data; (ii) the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data; (iii) we no longer need your personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims; or (iv) if you have lodged an objection against the processing and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your grounds.
Right to data portability
You have the right to obtain your personal data in a structured, commonly used and machine-readable format. You have the right to transmit your data to another Controller. Where technically feasible, you have the right to have your data transmitted directly from us to another Controller.
Right to object
On grounds relating to your particular situation, you have the right to object, at any time, to the processing of your personal data which is carried out on the basis of Article 6 (1) (f) GDPR. Such grounds exist, in particular, if they underline your interests and outweigh our interest in the respective data processing. If your personal data is processed in order to carry out direct advertising, you have the right to object at any time to the processing of personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.
Right to revoke the declaration of consent under data protection law
If you give us consent to process your personal data, you have the right to revoke your consent at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Right to lodge a complaint with the supervisory authority
You have the right to address the supervisory authority for any questions or complaints. The supervisory authority is: https://www.dataprotectionauthority.be.
Where do we process your data?
Within the EU as much as possible and outside the EU when an adequate level of protection is guaranteed in compliance with the GDPR.
Which third parties process your data?
For the following processing tasks, we collaborate with other companies that process your data but which are not allowed to use this data themselves:
Hosting of our data, our app, and our Website.
Analysing our Website.
Emailing and other services, such as lead development (e.g. to find interesting parties for sponsorships, for partnerships or for participation to an event as a speaker or attendant).
There are also companies that could process your data for their own purposes via third-party cookies.