Data Controller:

EWF is an international non-profit association with scientific and technical objective.
EWF
Av. Prof. Cavaco Silva, 33
TAGUSPARK – Oeiras
2740-120 Porto Salvo – Portugal

What is Personal Data?

"Personal data" means any information that can identify you directly or indirectly, such as name, e-mail address, contact details, financial information. It may also include identifiers such as the IP address of your computer and other mobile devices, as well as cookies.

What data we collect and how we handle it:

EWF may have access to your data through the Manufacturing Certificates Platform (MCP) and its website. The data collected are those strictly necessary for the pursuit of the purposes for which they are intended, namely:

  • For contractual purposes, when we provide you with the service of issuing digital documents. MCP is accessible only through a login and a password. These elements are exclusively for administrative and IT use in the strict scope of the services requested/contracted by the user (Name, contacts and in specific cases information);
  • When the contact form is used, the only purpose of the data collected here is to respond to the information requested by the Customer, manage their requests and control the quality of the services provided (name, e-mail, telephone number, organisation to which they belong);
  • Enforce applicable terms of use, establish or safeguard the right or legal defence to prevent fraud or other illegal activities, including attacks on EWF information systems;

Thus, we can state that we only process your personal data in the following cases:

  • When you have given us your consent;
  • When the organisation responsible for entering personal data into MCP ensures that it has the consent of the persons concerned;
  • In the execution of a contract - for example to issue a digital document;
  • It is in the legitimate interest of EWF - ie for the protection of our tools, ensuring that they are protected and secure;
  • In cases where the processing is mandatory by law.
Data Transfer:

As a general rule, EWF does not transfer your personal data, but only in cases where this is necessary for one or more of the options set out below, always and in such a way as to ensure identical protection of your data:

  • If we have your consent to do so;
  • If we are permitted to do so under the law;
  • Where legally permissible, EWF may also transfer your personal data to courts, law enforcement authorities, regulators or lawyers if this is necessary to comply with the law or for the initiation, exercise or defence of legal action.

At no time do we sell your data!

Retention Period:

Unless otherwise stated or for legal reasons, the data collected is only kept for the period strictly necessary for the purposes of the processing.

Creation of Profiles:

Computer profiling techniques may be used. Profiling is the use of your collected data to automatically assess certain personal aspects of each individual in order to predict personal preferences, interests or location, and to adapt and customise our offer accordingly.

You are guaranteed the right to object at any time to the use of your data for profiling. For more information see the section "YOUR RIGHTS".

Cookies:

EWF may use cookies as you navigate our website. All information related to the collection and use of cookies by EWF as well as the respective options can be found in our Cookie Policy.

Your Rights:
  • Right to request access to and rectification of your personal data;
  • Right to limitation of processing;
  • Right to data portability;
  • Right to erasure and/or to be forgotten;
  • Right to oppose processing;
  • Right to withdraw consent.

What does the right of access consist of?
The right of access enables you to find out whether your data is being processed or not and, if so, to provide information such as the purposes of processing, the categories of data which are processed, the recipients to whom the data have been or will be disclosed, the estimated period for which the personal data will be stored, or, if this is not possible, the criteria used to determine this period.

The EWF undertakes to provide you with any information concerning your request within a period of one month, which may be extended depending on the complexity of the request. In cases where requests prove to be excessive or manifestly unfounded, EWF reserves the right to charge administrative costs for processing your request.

You can exercise your right through the EWF contacts listed below.

What about the right to rectification?
The right to rectify your personal data is characterised by requesting the correction and/or updating of your data when they are incorrect and/or out of date.

You can exercise your right through the EWF contacts listed below.

What does the right to limitation of treatment consist of?
The right to restriction of processing allows you to request that the processing of your personal data is restricted. In this case the Controller may proceed with the storage of the data, but may not use them. This right can only be exercised in certain situations, listed exhaustively in the General Data Protection Regulation, namely:

  1. When you have challenged the accuracy of your personal data, during the time period that allows EWF to verify the accuracy of your personal data;
  2. When you have opposed the processing, for the period of time necessary to ascertain whether the legitimate grounds of EWF prevail over your own;
  3. When it considers that the processing is unlawful and EWF has objected to the erasure of the personal data and requests, alternatively, the limitation of the processing;
  4. When EWF no longer needs the personal data for the purposes of the processing, but for you they are necessary for the exercise or defence of claims and/or the exercise of other rights.

You can exercise your right through the EWF contacts listed below.

What does the right to portability consist of?
The right to portability allows you to request EWF to have your personal data transferred to you or to another controller. This right is dependent on three conditions:

  • May occur only where data has been collected on the basis of consent or for the performance of a contract;
  • Only where the processing is carried out by automated means;
  • In cases where you request the transmission of the data to another controller, provided that the IT systems are compatible.

You can exercise your right through the EWF contacts listed below.

What does the right to erasure consist of?
The right to erasure, or right to be forgotten, allows you, in certain situations, to demand that your data be deleted. This is not an absolute right and can only be exercised in cases where the retention of personal data infringes the Regulation:

  • When the data is no longer necessary for the purpose;
  • When consent is withdrawn and the processing is not based on another lawful source;
  • When the data subject exercises the right to object;
  • When the processing of the data is unlawful.

The right of erasure cannot take place in cases where the exercise of the right to freedom of expression and information is at stake, as well as in cases where it is necessary for the fulfilment of a legal obligation, or for the purposes of scientific or historical research or statistical purposes, or for the exercise of the right of defence and the lodging of complaints with the competent authorities.

You can exercise your right through the EWF contacts listed below.

What does the right of opposition consist of?
You may exercise the right to object to processing for marketing purposes, except in cases where we consider that there are compelling legitimate grounds for the processing to override your interests, rights and freedoms. You can exercise this right by using the "remove" option referred to in all our communications.

This right can also be exercised in cases where you wish to object to the creation of profiles – profiling.

You can exercise your right through the EWF contacts listed below.

What does the right to withdraw consent consist of?
Where you have given your consent to the processing of data by EWF, you may at any time revoke the consent previously given. Notwithstanding the withdrawal of consent, any processing carried out prior to the revocation of consent shall be considered lawful, and the revocation shall produce future effects only.

You can exercise your right through the EWF contacts listed below.

Exercise of Rights:

All the rights stated above may be exercised free of charge by e-mail to ewf@ewf.be or by letter addressed to Av. Prof. Dr. Cavaco Silva, 33, Taguspark-Oeiras, 2740-120 Porto Salvo, as well as exercising your right of complaint before the supervisory authority.

We also inform you that you have the right to lodge a complaint with the competent supervisory authority, especially when, with the controller, you have not obtained satisfaction in the exercise of your rights.

Confidentiality:

EWF guarantees that all information you provide to us is considered confidential. EWF does not sell, distribute, or do any type of business with the information and personal data provided by you.