Source: https://www.courage-institute.com/data-privacy-statement/
Timestamp: 2020-08-15 12:50:12
Document Index: 192250479

Matched Legal Cases: ['Art. 46', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 45', 'Art. 28', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 45']

Data Privacy Statement - Courage Institute
MBS / Destination
Please find below our statement on the processing of personal data by our company in accordance with the legal requirements, especially with the EU General Data Protection Regulation.
Personal data: Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
IP Addresses and Automatic Information: We may collect IP addresses and/or Automatic Information for purposes of system administration and to report aggregate information to our advertisers and sponsors. Our computers identify your computer by its IP address. When you request Web pages from Courage, our computers log your IP address. Automatic Information we collect may include, without limitation, such information as the page served, the time, the source of the request, the type of browser making the request, the preceding page view and other such information. When analysed, this data helps us determine how visitors arrive at Courage, what type of content is most popular, and what type of visitors (in the aggregate) are interested in particular kinds of content and advertising. We may also use Automatic Information to provide you with a more personalized user experience. Registration: In order to take advantage of certain features Courage may choose to offer, you may be asked to complete a registration form which will provide us with personally identifiable information. You may also be asked to choose a user ID and password in order to identify yourself during future visits to Courage. Newsletters and Site Emails: We may offer newsletters and other email communications to share information with you about news and information available on Courage, about certain features Courage may choose to offer or about our affiliates, subsidiaries, business partners, advertisers and sponsors. You may receive newsletters and other email communications by either registering for a particular newsletter or in conjunction with a special feature or membership offering for which you have registered on Courage. You may cancel your email subscription by following the instructions provided on Courage or, in some instances, in the designated area of certain newsletters or emails. Transaction Information: If you purchase a product from us or subscribe to any of the services offered on our Site, we will ask you to complete an order form that will require certain information from you, including credit card number and expiration date, billing address and shipping information, if applicable. We will use this information to complete the transaction that you have requested, i.e., to deliver the products or other services that you ordered, and, if necessary, to invoice you.
– our website www.courage-institute.com and/or www.courage.sg
Courage International Pte Ltd
1 North Bridge Road, High Street Center #08-08, 179094 Singapore, Singapore
Tel.: +65/6550 6342 / email: privacy@courage.sg
Our data protection officer can be contacted under the data given in I. 3. for data privacy concerns or via privacy@courage.sg. Please highlight Privacy Protection in the subject of the email.
Alternatively or additionally, safeguards under Art. 46 subs. 2 c) GDPR through the conclusion of the EU standard data protection clauses adopted by the European Commission with the receiving body provide appropriate safeguards and an adequate level of data protection. Copies of the standard EU data protection clauses are available on the website of the European Commission.
Our data processing work is carried out to a large extent with the involvement of hosting service providers who provide us with storage space and processing capacities at their data centres and who also process personal data on our behalf according to our instructions. It may be the case that personal data are transmitted to hosting service providers in respect of all of the functions listed below. Our service providers process data in Singapore and Europe and follow PDPA regulations and standard EU data protection clauses as well as Swiss privacy laws.
The end-to-end-encrypted Microsoft Azure data centers used by our service provider are audited for ISO27001:2005, SSAE 16, and several other certifications. These data centers are located in Ireland and the Netherlands. They are constantly guarded to prevent unauthorized access and constructed to protect against environmental threats. All data in these data centers are handled under Swiss privacy laws.
The category names listed below may be used for specific types of data in the following sections:
Intended purposes: Establishing connection, presenting contents of the service, detecting attacks on our site due to unusual activities, fault diagnosis
Legal basis: Art. 6, subs. 1 f), GDPR
Legitimate interest, where applicable: Proper functioning of services, security of data and business processes, prevention of misuse, prevention of damage through interference in information systems
Recipient category: External content providers who provide content which is needed to display the service (e.g., images, videos, embedded postings from social networks, banner ads, fonts, update information)
Data concerned: Access data
Legal basis: Art. 6, subs. 1 f), GDPR; in case of transmission to the USA also Art. 45 GDPR in conjunction with the Commission Implementing Decision (EU) 2016/1250 of 12.07.2016 on the “EU-US Privacy Shield”
Legitimate interests, where applicable: Proper functioning of services, (accelerated) display of content
Legitimate interests, where applicable: Prevention of attacks through exploitation of security gaps / vulnerabilities
Data category: Email address
Intended purposes: Verification of the application (double opt-in procedure), sending of the newsletter
Legal basis: Art. 6, subs. 1 b), c) GDPR, in case of transmission to the USA also Art. 45 GDPR in conjunction with the Commission Implementing Decision (EU) 2016/1250 of 12.07.2016 on the “EU-US Privacy Shield”
Legitimate interest, where applicable:
Intended purposes: Personalisation of newsletter
Data category: Login data
Intended purposes: Traceability of newsletter registration / confirmation / deregistration
Legitimate interest, where applicable: Proof of successful newsletter registration / confirmation / deregistration
Recipient category: Newsletter distribution service providers
Data concerned: All data listed in 1.G.
Legal Basis: Processing on behalf of a controller (Art. 28 GDPR)
Data transfer to third country?: Yes, Singapore
Adequacy decision, where applicable (Art. 45 GDPR): Commission Decision (EU) 2016/1250 of 12.07.2016 on the so-called “EU-US Data Protection Shield” (“Privacy Shield”)
4. Application for Courage Institute conferences and Courage Institute account
The tables below set out how your personal data are processed in connection with an application process for your participation for one of our Courage conferences.
Data category: Account data, personal master data, address data, contact data, login data, purchase order data, press mailing list usage data, newsletter user profile data, access data, application text. We only store information that is inputted by you or accepted by you.
Intended purposes: provided data is used by Courage to make decisions on a requested invitation to a Courage conferences
Legal basis: Art. 6, subs. 1 b), GDPR
Legitimate interests, where period of storage applicable: 7 years
Data category: contact data (email and name), personal data (gender, city, country, company, job title), application text
Intended purposes: provided data is used to run account and enable ticketing for owner of the account
5. Participation in Courage conferences
The tables below set out how your personal data are processed in connection with your participation in one of our Courage conferences.
Data category: (a) pictures (conference (mood) pictures (b) contact data (c) personal data
Intended purpose: Participant registration, access control to conference venue, picture coverage of conference, basic statistics, speaker presentation
Legal basis: a)-c)Art. 6, subs. 1 b) and 1f) GDPR
Legitimate interest, where applicable: marketing purpose, documentation purpose
Data category: In case of participation as a speaker: name, biography (as provided by you), photo, appearance at conference (video/audio)
Intended purpose: marketing and documentation of Courage conferences
Legal basis: Art. 6 subs. 1 b), f) GDPR
Legitimate interest, where applicable: marketing purpose
Recipient category: (a) Payment and ticketing service provider
Data concerned: (b) ticket category, personal data (name, company, title), contact data (email address)
Legal basis: (c) Data Processing (Art. 28 GDPR)
Please note that this “opt-out” request, i.e., denial of consent to processing, is usually stored via cookies. If you use our services on a new end device or in a different browser, or if you have deleted the cookies set by your browser, you will need to reconfirm the refusal of consent.
Name of Mode of service operation:
Our services use Google Analytics, a web analysis service of Google LLC (“Google”). Google Analytics uses cookies that enable an analysis of your use of the website.
We use Google Analytics including the functions of Universal Analytics. Universal Analytics allows us to analyse the activities on our services across devices (e.g. for access via laptop and later via a tablet). This is made possible by the pseudonymous assignment of a user ID.
Option of preventing processing (opt out):
Data transfer to third country? Yes, USA & Singapore
Appropriate guarantees, where applicable (Art. 45 GDPR):
The right to object may be exercised free of charge.
You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed and, where that is the case, receive information of the personal data and the other information processed.
Personal Data Protection Commission, 10 Pasir Panjang Road, #03-01 Mapletree Business City, Singapore 117438
Or contact us directly under: privacy@courage.sg
© 2020 Courage Institute.