This privacy notice explains how We, Efficient Buildings Europe ASBL (“Efficient Buildings Europe” or “We“, “us”, “our”), are committed to complying with EU Privacy Law. This privacy notice (the “Notice“) describes how We, as a controller of Personal Data, process the personal information of certain categories of Data Subjects that are not associated to us. 

In carrying out our activities, We process Personal Data relating to consultants, contractors, suppliers, individuals registering for our publications and/or attending events and conferences, officials of the European institutions and EU agencies, EU Member State officials, journalists, and other stakeholders (“You“) in the policy areas that We are involved in. 

We are a data controller. This means that We are responsible for deciding how We collect and use (process) Personal Data about You. We are required under GDPR to notify You of the information contained in this Notice. 


What Personal Data do We hold about You?

Depending on who You are, We collect different Personal Data from You, for specified purposes and based on a specific legal ground.

EU and national government officials and policy stakeholders, including journalists, industry associations, and NGOs involved in the policy areas that the association is active in

  • Personal Data Collected: Name, job title, email address, name of the organisation, address, phone number, your political party. If you work in an EU institution or agency, your picture and date of birth
  • Purposes: Conducting our advocacy activities in the policy fields We are involved in, including contacting You with regard to projects We are involved in and asking You information about the policy areas We are involved in 
  • Sources: Public websites, business cards, public lists, stakeholders mapping 
  • Legal Basis: Legitimate interest – We believe that, as an EU association active in the efficient buildings industry, We have the legitimate interest to conduct our advocacy activities

Third party contractors and suppliers

  • Personal Data Collected: Name, job title, email address, name of the organisation, bank account details, phone number 
  • Purposes: Preparing, executing and terminating a contract We have with You 
  • Sources: Contracts, invoices, quotes 
  • Legal Basis: Performance of a contract 

Individuals invited to attend conferences, events and webinars 

  • Personal Data Collected: Name, job title, email address, organisation You work in, your area of expertise 
  • Purposes: To invite you to our events that relate to your areas of interest 
  • Sources: Business cards, email you send us, oral exchanges, public databases, events databases 
  • Legal Basis: Legitimate interest – We believe that, as an EU association active in the efficient buildings industry We have the legitimate interest to conduct our advocacy activities. 
    We rely on your consent and provide you with a specific privacy notice in order to run the registration process and for any following communication with you. 

Recipients of our newsletter 

  • Personal Data Collected: Name, job title, email address, organisation You work in
  • Purposes: To inform You about our activities, send You our newsletter, send You our reports, send You regulatory updates and policy 
  • Sources: Subscription page on our website, written forms, emails, oral exchanges during events We both attended, business cards 
  • Legal Basis: Consent / Legitimate interest 

Representatives and contact persons of the companies that become members of Efficient Buildings Europe

  • Personal Data Collected: Name, job title, email address, information on the organisation You work in
  • Purposes: To inform You about our activities, send You our newsletter, send You our reports, send You regulatory updates and policy 
  • Sources: Information sent by You when asked participate in activities of Efficient Buildings Europe
  • Legal Basis: Consent. If Personal Data are provided by the organisation You belong, we do so under the assumption that specific measures have been put in place by such organisations to lawfully provide us with your Personal Data 

We also collect information about You or your device each time You visit our website or when We send You an email. This information may be considered to be Personal Data either in itself or when combined with other information about You. This includes technical information, including the Internet protocol (IP) address used to connect your device to the Internet and browser type and version, as well as information about your visit, including the dates and times You use our website, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), etc. or information on whether You open an email, dates and time You do that, etc. 

We use cookies and other tracking technologies to do so. You can learn more about such technologies by reading the Cookies Notice available below.


1.1 Cookie Notice

What is a cookie?

A cookie is a text file containing small amounts of information, which is downloaded to your device when you (first) visit a website. That cookie is then sent back to the website of origin on each subsequent visit, or to another website which recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device, and they provide you with a more efficient and personalised website experience.

What cookies are used on our website(s)?

  • Technical cookies are essential for the website(s) to function properly. These cookies enable you to navigate between the various sections of our website(s) and to use specific functionalities, for example to subscribe to our newsletters or register for an event.
  • Session cookie: this cookie remembers the information you have been looking for on our website(s). For example, it allows you to use the “back to previous page” button. It is a temporary cookie which is deleted as soon as you close your browser.
  • Performance cookies (Google Analytics): they collect anonymous and aggregated information about your online behaviour (such as your browser type, the operating system used, date and time of visits, etc.) for statistical purposes and to help us improve our website(s) and a user’s experience.

The cookies we use do not collect data that reveal your personal identity and therefore do not make it possible for us to identify you. Our website(s) may contain links to other websites not owned or managed by Efficient Buildings Europe. We are not responsible for the privacy and/or cookie practices of these third-party websites.

How to give your consent?

When visiting our website(s) for the first time, a cookie banner will appear. By continuing your visit on our website(s), you consent to our use of cookies as specified in this cookie policy.

How to reject our cookies? You may withdraw your consent at any time by deleting cookies in the settings/preferences of your browser. Please note that turning off cookies might restrict your use of our website(s).


2. Change of purpose

We will only use your Personal Data for the purposes for which We collected it, unless We reasonably consider that We need to use it for another reason and that reason is compatible with the original purpose. If We need to use your Personal Data for an unrelated purpose, We will notify You and We will explain the legal basis which allows us to do so. 


3. Which third-parties process your Personal Data? Do We Share, Disclose or Transfer Personal Data?

In order to conduct our activities, We may have to share or disclose your Personal Data with third parties, including third-party service providers. 

We share your Personal Data with: 

a) IT experts who provide services to Efficient Buildings Europe (e.g., data storage or website administration); 

b) Event management and marketing platforms, as well as meeting venues only for our event organising purposes; 

c) Survey platforms; 

d) Service providers and cooperation partners We work with, for the purpose of co-organising events; and 

e) Other external parties We may cooperate with to run specific projects; (e.g. other industry associations and consultants).  We do not use other third-parties to process your Personal Data or otherwise transfer Personal Data outside of the EEA and/or disclose your Personal Data to other recipients than those identified in this Notice. If We were to do so, We will comply with EU Privacy Law. Version No. 7 January 2022


4. Data security 

Your Personal Data are treated as confidential. 

We never pass on your contact details to third-parties for commercial purposes. 

In order to safeguard your Personal Data from unauthorised access, collection use, disclosure copying, modification, disposal, or similar risks, We have put in place appropriate administrative, physical and technical measures. We update and test our security technology on an ongoing basis. We restrict access to your Personal Data to those employees and staff who need to know that information to provide benefits or services to You. In addition, We train our staff about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our staff’s privacy responsibilities.


5. How long will We retain your Personal Data?

We keep your data for as long as your relationship with Efficient Buildings Europe persists (e.g. if you are a member, a contractual party or a newsletter subscriber). This is without prejudice to specific limitation periods foreseen by law allowing to conserve personal data for longer periods of time.


6. Your rights in connection with Personal Data

Under certain circumstances, under EU Privacy Law, You have the right to: 

(a) Request access to your Personal Data. This enables You to receive a copy of the Personal Data We hold about You and to check that We are lawfully Processing it. 

(b) Request correction of the Personal Data that We hold about You. This enables You to have any incomplete or inaccurate information We hold about You corrected. 

(c) Request erasure of your Personal Data. This enables You to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where You have exercised your right to object to Processing (see below). 

(d) Request the restriction of Processing of your Personal Data. This enables You to ask us to suspend the Processing of Personal Data about You, for example if You want us to establish its accuracy or the reason for Processing it. Version No. 7 January 2022

(e) Request the transfer of your Personal Data to another party (right to data portability). 

To exercise your rights as Data Subject, make queries or complaints, please contact info@efficientbuildings.eu.

When You provided your consent to the collection, Processing and transfer of your Personal Data for a specific purpose, You have the right to withdraw your consent for that specific Processing at any time. 

When We process your Personal Data based on our legitimate interest (or those of a third party), You have the right to object to such Processing. To withdraw your consent or object to the Processing, please contact info@efficientbuildings.eu. If You are dissatisfied with any aspect of our handling of your Personal Data, You have the right to make a complaint at any time to the relevant Supervisory Authority. 


7. Changes to Notice

We may revise this privacy Notice from time to time and any revisions will be made available to You via our website.


8. Our contact details

Efficient Buildings Europe ASBL
Rond-point Schuman 6, 8ième étage
1040 Brussels – Belgium
T:
+32 (0)2 639 10 10
E: info@efficientbuildings.eu


9. Glossary

In this Notice: 

“EU Privacy Law” means the General Data Protection Regulation 2016/679 (“GDPR“) and the Belgian national privacy laws, as amended from time to time. 

Data Subject” means an identified or identifiable individual. 

Personal Data” means any information relating to an identified or identifiable natural person. 

Processing” means any operation performed on Personal Data, manually or by automated means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. 

Supervisory Authority” means the Belgian Data Protection Authority or the relevant data protection authority of the data subjects’ habitual residence or place of work.