This Privacy Policy describes how ESNA - Europe Startup Nations Alliance, Associação (“ESNA”) may collect, use, or share personal data, the types of personal data that may be collected, the measures implemented to protect such data, and the choices available to you regarding the use of your personal data.

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the “General Data Protection Regulation” or “GDPR”), ESNA is committed to safeguarding privacy and ensuring that personal data is processed lawfully, fairly, and transparently. To clarify how we process the data collected, as well as the purposes and the data subjects’ rights, we invite you to read this Privacy Policy carefully and periodically.

Acceptance of Terms and Conditions and Privacy Policy

To access ESNA’s website and digital platforms, users must, after reading the Terms and Conditions and this Privacy Policy, accept or reject them.

Such acceptance is a prerequisite for accessing the reserved features of ESNA’s website and digital platforms.

How We Collect Personal Data

ESNA may request personal data through online forms on its website and/or dedicated web platforms managed by ESNA. Data may also be collected through physical means, including service contracts, satisfaction surveys, and other written documents.

On the website, data is collected via online forms available on our website or platforms provided by ESNA, particularly for application purposes, press enquiries, and newsletter subscriptions. Such information is only collected if the user chooses to provide it via the Contact us form.

Purpose of the Data Collected

Data Category: Name, Email, Organisation

Purpose: ESNA may use your identification and contact data for traffic monitoring and management of authorised users’ access.

Legal Basis: Article 6(1)(c), of GDPR, for the management of authorised users’ access, upon acceptance of the Terms and Conditions (in which case, if personal data is not provided, ESNA cannot guarantee access to the website and platforms provided), and Article 6(1)(f), of GDPR, for traffic monitoring.

Data Category: Website performance, targeting and functionality data

Purpose: With your consent, ESNA may collect personal data (cookies) for website performance, targeting and functionality purposes, as further detailed in the Cookie policy.

Data Category: Survey information (topic, message)

Purpose: With your consent, we may share this data to prepare the reports monitoring the implementation of the EU Startup Nations Standards of Excellence (“SNS”). The data will be shared with the project team.

Legal Basis: Article 6(1)(a), of GDPR.

User Profiles

Users with access to the ESNA website are the following:

• Focal Points: Institutional or governmental representatives of Member States

• European Commission: Users affiliated with EU institutions

• Other registered users

Disclosure of Data to Third Parties

The data processed by ESNA may be shared with third parties when required by law or by investigation of competent authorities. In some cases, ESNA may also engage third parties to assist in service delivery. In such cases, the subcontracted entities are required to comply with data protection rules and regulations through the technical and organisational measures available to them (e.g. Mailchimp for newsletters, Magnifinance for invoicing, Executive Search services).

Data processed by ESNA in relation to surveys may be shared with the project team for evaluation and analysis of the SNS, based on informed consent provided by the focal points.

Data Subject Rights

Data subjects are entitled to exercise their rights and freedoms through the contact details provided in this Privacy Policy and via the competent Supervisory Authority. As a data subject, you have the following rights:

• Right of Access: You have the right to request access to the personal data ESNA holds about you;

• Right to Rectification: You have the right to rectify and/or correct any inaccurate or incomplete personal data;

• Right to Erasure: You have the right to request the erasure of your personal data by ESNA under the circumstances provided by the GDPR;

• Right to Restriction of Processing: You have the right to request restriction of the processing of your personal data;

• Right to Object: You have the right to object to the processing of your personal data by ESNA under certain conditions;

• Right to Data Portability: You have the right to request the transfer of the information ESNA holds about you to another entity or directly for your own use, provided that certain conditions are met.

Please note that your right to erasure and the right to restriction are only possible to the extent that our processing is based on your consent or our legitimate interests. If the processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of the processing carried out before withdrawal.

You may also exercise your right to lodge a complaint with the relevant supervisory authority. If you believe our processing does not comply with the GDPR, you may submit a complaint to the Portuguese Data Protection Authority at: www.cnpd.pt.

Data Retention Period

The period during which data is processed varies according to the purpose for which the information is processed and is retained only for the time strictly necessary to achieve the specific purpose.

Once the maximum retention period has been reached, personal data will be irreversibly anonymised (and may be retained in this format) or securely destroyed, unless legal requirements dictate otherwise. In such cases, data will be retained for the legally required period.

In the event of legal disputes, data will also be retained for the duration of the dispute.

Contact

If you have any questions about our Privacy Policy, please do not hesitate to contact us at our Contact us form.