DigitalArt4Climate personal data protection policy
Effective: 07.24.2021
Last Updated: 07.24.2021
1. Introductory information

At DigitalArt4Climate, being incorporating under the laws of Austria, we respect your right to privacy and take personal data protection extremely seriously, as we would like to provide you with the highest level of protection of the personal data that you have trusted us. This Policy is based on applicable relevant legislation on the protection of personal data, in particular the General Data Protection Regulation of the EU.

In this Personal Data Protection Policy (hereinafter referred to as: Policy), we define ways of collecting your personal data, the purposes for which we collect it, the security measures we use to protect it, the persons with whom we share it, and your rights regarding the protection of personal data.

The controller of data processing is DigitalArt4Climate, a legal entity being incorporated under the laws of Austria.

2. Controller of personal data

This Policy applies to all personal data collected and stored by DigitalArt4Climate, to be organised under the laws of Austria (hereinafter referred to as "DigitalArt4Climate", "We", "Us").

As a data controller, DigitalArt4Climate shall be responsible for processing and storing of your personal data. If you have any questions regarding the use of this Policy or with regards to the exercise of your rights arising from this Policy, please contact us on: office@digitalart4climate.space.

3. Policy users

This Policy is for users of our website.

4. Terms and definitions

Here you can find an explanation of the basic concepts that we use in our Policy. Each particular concept defined below has the meaning within this Policy as defined in this section.

Personal data is any information that refers to a specific or identifiable individual (for example, the name, surname, e-mail address, telephone number and identifiers that are specific to the individual's physical, physiological, genetic, economic, mental, cultural or social identity, etc.). Controller is a legal entity that determines the purposes and means of processing of your personal data. Processor is a legal or natural person who processes personal data on behalf of the controller. Processing means collecting, storing, accessing and all other forms of use of personal data. EEA stands for the European Economic Area, which identifies all the Member States of the European Union, Iceland, Norway and Liechtenstein.

5. Processing of personal data

At DigitalArt4Climate, we process your personal data solely on the basis of clearly stated and legitimate purposes, securely and transparently.

We collect your personal data when you provide it to us (for example, using our website, signing up for our newsletter, inquiring by e-mail, telephone or writing to our address or by any other means in which you provide us with your personal data).

Your personal data can also be obtained through your interaction with the website; such information can be obtained by using cookies and a cookie-like technology that allows us to customize and personalize our website to your needs.

5.1. What type of personal data do we collect?

At DigitalArt4Climate we process e-mail address that you provide us when you subscribe to our newsletter. Our newsletter is intended to inform you when our platform will be available for registration and usage. We process this data based on our legitimate interest to provide relevant information when our platform will be available for registration. We will process these data as long as you don't withdraw from receiving this newsletter. You are able to unsubscribe at any time.

5.2. On what legal basis do we collect and process your personal data?

In accordance with the legislation governing the protection of personal data, we may process your personal data on the following legal bases:
- Contract. We process your personal data when such processing is required to complete the contract which you have concluded);
- Consent. We process your personal data when you have given consent for the specific purposes of processing, and you are always entitled to revoke that consent;
- Legitimate interest. We process your personal data when DigitalArt4Climate has a legitimate interest in processing. We will expressly define within this Policy in what events we process the data on a legitimate interest basis. The list of legitimate interests and the processing methods we use is provided further in the document.
- The law. When processing is necessary for the fulfillment of legal obligations.

5.3. Is the provision of personal data mandatory?

The provision of personal data is mandatory in certain cases. In most cases, you provide us with personal data on a voluntary basis. It is obligatory to provide only the personal data that we collect on the basis of the requirements of the legislation.

The provision of personal data that we need to fulfill the contract is voluntary. However, in the event that you do not provide us with all the personal data that we need to execute the contract, we will not be able to provide full services. Granting consent is always voluntary. However, in case of consent revocation or denial of consent, we will not be able to provide certain services (such as advertising adjustments to suit your needs).

5.4. How much time do we keep your personal data?

We keep your personal data in accordance with the relevant legislation. We will keep your personal data: only for as long as it is absolutely necessary to achieve the purposes for which we are processing, for a period prescribed by the law (we note here that the deadlines for the retention of personal data may also be prescribed by other laws, not only in the field of personal data protection, such as 10 years for the issued invoices, in accordance with the tax legislation).

When personal data is obtained on the basis of your consent, we keep it permanently or until you revoke this consent (see how to revoke the consent in Chapter 9 of this Policy). We will delete the information collected on the basis of your consent before your revocation, in case the purpose for which the data was collected has been achieved.

When the retention period for certain personal data expires, we will delete these personal data or anonymize them so that the reconstruction of personal data will no longer be possible.

6. Protection of your personal data

At DigitalArt4Climate we protect your personal data against illegal or unauthorized processing and/or access, and against unintentional loss, destruction or damage. We undertake all measures according to our technological capabilities (including the cost of implementing certain measures) and the impact assessment on your privacy.

In order to ensure that your personal data is safe, we have undertaken the appropriate technical and organizational measures at DigitalArt4Climate, in particular:
- ensuring the regular updating and maintenance of the hardware, software and application equipment that we use for the processing of personal data,
- establishing a restriction on access to personal data,
- regular backup,
- ensuring the education of employees who process personal data at work,
- careful selection of processors that we trust for the processing of personal data;
- supervising both employees and processors and regular audits;
- establishing protocols for preventing or limiting damage in case of potential security incidents.

In the event of a violation of the protection of personal data, we will notify without delay about any such violation the competent supervisory authority. In the event that there is a suspicion of a criminal offense regarding the violation of personal data, DigitalArt4Climate will also report such violations to the police and the competent state prosecutor's office. In the event of a violation of data protection that may cause a high risk to the rights and freedoms of individuals, we will inform you of such an event without undue delay.

7. Transmitting of personal data

Your personal data may be, exclusively in order to achieve the purpose for which it was collected, transmitted, or we may just allow access to them to certain third parties defined below. Such third parties may only process your personal data for the purposes for which they were collected.

Accordingly, any third party to whom we transmit personal data is bound to comply with the applicable law as well as to the provisions of this personal data protection policy. With external processors, however, the protection of personal data is further defined by the contract.

Your personal data may be transmitted to:
- Our external processors who take care of the needs of DigitalArt4Climate (accounting services, law firms, companies that provide marketing services, etc.) and also in order to provide our services.
- When this is required by the law (e.g. tax authorities, courts, etc.).
- In the event of Asset purchase, merger, reorganisation, dissolution or similar event.

We may transmit your personal data to third parties (defined above) outside the European Economic Area (EEA), where personal data processing occurs. In any transmission outside the European Economic Area, we will undertake specific additional measures to ensure the security of your personal data.

Such measures consist mainly of agreements with third parties on the establishment of binding rules in the field of personal data protection, verification that an approved certification mechanism is in place, which meets our standards for the protection of personal data and the conclusion of relevant contractual obligations that regulate the protection of personal data.

8. Access to social networks

On our website we offer you the ability to use social networks which operate in accordance with their terms of use and privacy policy, where the usage of personal data for each social network is also defined.

Privacy policies are available at the links provided below: https://digitalart4climate.space.

We would like to remind you that any use of social networks that is enabled on our website is in the sole responsibility of the individual. In the event of any questions and/or requests, an individual is required to contact a particular social network.
DigitalArt4Climate does not assume any responsibility for the use of social networks.

9. Rights of individuals

You have the following rights regarding the personal data processing:

9.1. Access to personal data: You may request information from DigitalArt4Climate whether we are processing your personal data, and if we do, you can request access to your personal data and information about the processing (which data is processed and from where this data originated).

9.2. Correction of personal data: you may request from DigitalArt4Climate to correct or complete your incomplete or inaccurate data being processed.

9.3. Restriction of the personal data processing: you may request from DigitalArt4Climate a restriction of the processing of your personal data (when, for example, checking accuracy or the completeness of your personal data).

9.4. Deletion of personal data: you may request from DigitalArt4Climate to delete your personal data (we cannot delete those personal data that we keep on the basis of legal requests or contractual relation).

9.5. Printout of personal data: you may request from DigitalArt4Climate to provide you with the personal data that you have provided us with in a structured, widely used and machine-readable form.

9.6. Revocation of consent: you have the right to withdraw consent as to the use of your personal data, which we collect and process on the basis of consent, at any time. The consent may be revoked in any manner specified in Chapter 2 of this Policy. The revocation of the consent has no negative consequences, but it is possible that DigitalArt4Climate will no longer be able to provide you with certain services.

9.7. Objection to the processing of personal data: You have the right to object to the processing of your personal data when processing is for direct marketing purposes or in the event of transmitting your personal information to third parties for the purposes of direct marketing. You can also object processing when your data is used for direct marketing purposes using customized or individual offers ("profiling"). You can make an objection in any manner defined in Chapter 2 of this Policy.

9.8. The right to data transmission: you have the right to request the printout of personal data that you have provided us with. We will provide you with information in a structured, widely used and machine-readable form. You are entitled to provide this data to another controller of your choice. Where technically feasible, you may request that your personal data be transmitted directly to another controller.

Contacts for the exercise of rights:
If you have any questions regarding the use of this Policy or with regards to the exercise of your rights arising from this Policy, please contact us on office@digitalart4climate.space.

You have the right to file a complaint against us with the competent authority for the protection of personal data.

The integrity of personal data processed and regular updating is a priority for DigitalArt4Climate. Please kindly inform us of any change of your personal data to the above contacts. We will take care of the correction or supplementing your personal data in the shortest possible time.

In case of exercising any of the rights, we may require additional personal data (such as name, surname, e-mail address) for identification purposes. We will only need additional information when the information you provide is not sufficient for reliable identification (in this way, we want to prevent your personal data from being transmitted to a third party due to unreliable identification).

10.Final provisions

At DigitalArt4Climate, we can change this Policy at any time. We invite you to check the policy each time you use the website. We shall consider that you agree with the new version of this Policy if, after the new version enters into force, you continue to use our website and other services defined by this Policy.

The current version of this Policy will be available on our website: https://digitalart4climate.space/privacy_policy.