Those are our privacy policies, showing you how we respect your privacy and your data
This website https://www.deficitdao.org/ (“Website”) is operated by the International Society of DAO Deficiency (Madrid, Spain), represented by the President and Board of Directors of the Society, St/Serrano, nº 1 4ª floor, 28001, Madrid (Spain) (“deficitdao.org” or "we"). For the processing of personal data in connection with the use of our Website, we are the controller of your personal data within the meaning of Article 4(7) of the Regulation (EU) 2016/279 (General Data Protection Regulation – “GDPR”). If you visit another website, the respective website operator’s privacy policy applies.

1. Processing of personal data

1.1 Visiting our Website When you visit our WEBSITE, our servers automatically record the following data: name of your internet service provider, your IP address (shortened by the last octet), your location, name and version of your browser, your operating system, your device type, date and time of access, referrer URL (previously visited website), leaving time and URL you visit next, and the pages you visit and the links you click on our Website (“LOG DATA”). Collection and (temporary) storage of the Log Data is technically necessary for your use of the Website. We also process the data to ensure the functioning of our Website and the security of our systems and to optimize our Website. These purposes constitute our legitimate interest. The processing is lawful pursuant to Article 6(1)(f) GDPR. As the last octet of your IP address is automatically masked, you remain anonymous to us. The Log Data is erased from our Website after two years at the latest. It is not merged with other data or used for advertising purposes. 1.2  Personal data you voluntarily provide to us We process personal data when you voluntarily provide it to us on our Website, e.g.,
  • contacting us (via our contact form or by email),
  • participating in a survey,
  • participating in a sweepstake/promotion, or
  • registering for a virtual or physical event.
  • registering for any of our membership areas or for obtaining support.
In our online forms, we may ask you to provide the following information: name, email, address, phone number, position, and company. Mandatory fields are marked as such. 1.2.1 Contacting us When you contact us, we process the personal data submitted to respond to your request (e.g. answer your question or send you the requested material). This purpose constitutes our legitimate interest. The processing is lawful pursuant to Article 6(1)(f) GDPR. We will erase the data from your requests when (i) the respective conversation has ended and the matter has been solved and (ii) legal, statutory, and/or contractual retention periods have expired. 1.2.2 Participating in a survey When you participate in a survey, we process the personal data submitted to analyze your answers and compile the results of the survey in aggregated and anonymous form. The processing is based on your consent (which we obtain separately on our Website) and lawful pursuant to Article 6(1)(a) GDPR. You can withdraw your consent at any time by email to contact[at]deficitdao.org or by using our postal address. The withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal. We will erase your personal data three months after the end of the survey period at the latest unless we are legally obliged or entitled to further processing of the data (especially where you have given consent to such further processing). We will not disclose your personal data to third parties, but only aggregated and anonymous results of the survey. 1.2.3 Participating in a sweepstake/promotion When you participate in a sweepstake/promotion, we process the personal data submitted to carry out the sweepstake/promotion and to notify you in case you win. The processing is lawful pursuant to Article 6(1)(b) GDPR. We will erase your personal data after the 6-year retention period (Section 257 HGB, Section 147 AO) has expired. We will not disclose your personal data to third parties and/or use it for advertising purposes (email advertising, advertising calls) unless you have given your consent to this further processing on our Website (Article 6(1)(a) GDPR). If you have given such consent, you can withdraw it at any time by email to contact[at]deficitdao.org or by using our postal address. The withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal. 1.2.4 Registering for a virtual or physical event When you register for a virtual or physical event, we process the personal data submitted to enable you to participate in the event. We will only disclose it to third parties where necessary for the aforementioned purpose (e.g. to the host of the respective event). The processing is lawful pursuant to Article 6(1)(b) GDPR. We will erase your personal data one month after the event at the latest or, in case it was our own event, after the 6-year retention period (Section 257 HGB, Section 147 AO) has expired. We will not disclose your personal data to third parties and/or use it for advertising purposes unless you have given your consent to this further processing on our Website (Article 6(1)(a) GDPR). If you have given such consent, you can withdraw it at any time by email to contact[at]deficitdao.org or by using our postal address. The withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal. 1.2.5 Further processing of your personal data We may, in the individual case, be required by law to disclose your personal data by order of the competent authority (Article 6(1)(c) GDPR). Further processing of your personal data will only occur with your consent (Article 6(1)(a) GDPR) or in accordance with the applicable data protection laws.  

2. Direct marketing by postal mail

If you have given us your postal address, e.g., when registering for an event on our WEBSITE, we may use it from time to time to send you marketing materials by postal mail if you have not objected to this. Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in direct marketing (Recital 47 GDPR). You may object to the use of your postal address for direct marketing purposes at any time without additional costs, for example by email to contact[at]deficitdao.org or by postal mail to our address mentioned at the beginning of this Privacy Policy.

3. Cookies

On our Website, we only use cookies which collect and store your personal data in pseudonymous form. Cookies are small text files which your browser stores on your device when you visit our website. You can prevent the use of cookies at any time by adjusting the settings of your browser to not accept new cookies, to indicate new cookies, and/or to erase all previously stored cookies. You can also activate the “Do Not Track” function of your browser which our WEBSITE respects. You can find information on how to change your browser settings in the help function of your browser. Further information on this and general information on cookies is available at www.allaboutcookies.org and www.youronlinechoices.com. Disabling cookies will not negatively affect your user experience on our Website. We use cookies for the following purposes: 3.1 Technically necessary cookies Most of the cookies we use are technically necessary for the operation of our website and the services you specifically request thereon (“Session Cookies”). Our legitimate interest is to enable you to use our Website and the services you specifically request thereon. The processing is lawful pursuant to Article 6(1)(f) GDPR. The data stored in Session Cookies will not be merged with other personal data and it will not be used for advertising purposes. Session Cookies you close your browser or after seven days at the latest. 3.2 Web analytics cookies (Google Analytics) We also use cookies to create pseudonymous user profiles for web analytics purposes (“Web Analytics Cookies”). These cookies allow us to recognize returning users, analyze their behavior on our Website, optimize our Website, and measure its reach. These purposes constitute our legitimate interest. The processing is lawful pursuant to Article 6(1)(f) GDPR. The data stored in these cookies will not be merged with other personal data and it will not be used for advertising purposes. Web Analytics Cookies are erased when you object to the processing pursuant to Article 21 GDPR or after twelve months at the latest. Google Analytics For our web analytics, we use Google Analytics, a web analytics service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies which are stored on your computer and allow for an analysis of your use of our Website. Generally, the information generated by the cookie about your use of our Website () is transmitted to a Google server in the USA and stored there. On our Website, we use Google Analytics with the function “_anonymizeIp()” to ensure anonymized collection of IP addresses (“IP masking”): Google will automatically shorten your IP address by the last octet before the data concerning your use of our Website is transmitted to and stored by a Google server in the USA. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there. This transfer of information to a third country outside the EU is based on an adequacy decision of the European Commission (C/2016/4176 of 12 July 2016 – http://data.europa.eu/eli/dec_impl/2016/1250/oj) within the meaning of Article 45 GDPR as Google has self-certified its adherence to the principles of the EU-US Privacy Shield. On behalf of the operator of this Website, to analyze your use of the Website, to compile reports about the activities on the Website, and to provide other services to the Website operator in connection with the website and internet use. Google will not merge the IP address transmitted by your browser in the context of Google Analytics with other Google data. You can prevent these Web Analytics Cookies from being stored by adjusting the cookie settings of your browser accordingly (see above). In addition, you may prevent Google from collecting and processing the data generated by the cookie about your use of the website (including your IP address) on all websites by downloading and installing the opt-out browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en. On our Website, you may also prevent Google from collecting and processing the data generated by the cookie about your use of our Website by clicking on the following link: Opt-out from Analytics tracking An opt-out cookie will be stored on your device preventing Google from collecting your data when visiting our Website. (Please note that this opt-out cookie is erased when you erase all cookies in your browser.) Further information on the Google Analytics Terms of Service and Google’s privacy policy is available at www.google.com/analytics/terms and https://support.google.com/analytics/answer/6004245?hl=en.  

4. Your rights regarding our processing of your personal data

You may, at any time and free of charge, request
  • information about and access to (Article 15 GDPR),
  • rectification of (Article 16 GDPR),
  • erasure of (Article 17 GDPR), and
  • restriction of processing of (Article 18 GDPR)
personal data relating to you which is processed by us. You may also request to receive all personal data that you have provided to us based on consent or a contract in a structured, commonly used, and machine-readable format (Article 20 GDPR). Where our processing of your personal data is based on Article 6(1)(a) GDPR, you may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal. Where our processing of your personal data is based on Article 6(1)(f) GDPR, you may object to such processing at any time (Article 21 GDPR). Please address all requests to contact[at]deficitdao.org or our postal address. For your withdrawal of consent or your objection according to Article 21 GDPR you may also use the technical means provided on our Website (see Clause 3 on Cookies). If you consider that our processing of personal data relating to you infringes the GDPR or other applicable data protection laws, you may lodge a complaint with a supervisory authority in the EU (in particular, in the EU member state where you live, work, or where the alleged infringement took place) (Article 77 GDPR).

5. Your questions regarding our processing of your data

For all questions or requests regarding our processing of your personal data you may also contact us at contact[at]deficitdao.org.

6. Changes to this privacy policy

This privacy policy was last updated on [18.12.2018]. Its current version is always available at https://www.deficitdao.org/privacy-policy/.