Energy lines dot 6 Energy lines dot 5

Privacy policy

1. Introduction

This Privacy Policy (“Policy”) and our Cookie Policy here set out how WBA, (defined below) uses your Personal Data when you visit this website, are one of our partners or subscribe to our newsletter.

This website [evaplatform.co] (the “Website”) is administered and operated by Stichting World Benchmarking Alliance Foundation [worldbenchmarkingalliance.org] (hereinafter: “WBA”, “we”, “our” or “us”). WBA acts as “the data controller” with respect to your Personal Data that is processed through this Website. This means that WBA is responsible for how Personal Data is dealt with.

Personal Data will be processed in compliance with applicable data protection legislation (including the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”). “Personal data” and “Controller” have the meanings given in the applicable data protection laws.

2. Personal Data we collect

General categories of Personal Data WBA collects the following types of Personal Data when you visit and use the Website:

  • Information you provide to WBA directly. We collect Personal Data that you choose to provide to WBA when filling out enquiry forms or the assessment tool on this website, when subscribing to e-mail notifications (including newsletters), when downloading publications or other documents from our websites or when otherwise corresponding with WBA on this Website. Such Personal Data includes: your first name and surname, email address, place of residence, telephone number and information about your preferences and interests (such as upcoming WBA or other events and services)

  • Information automatically collected by WBA. Whenever you visit or interact with this Website, our newsletters, and services, we automatically collect Personal Data about you, your visit and interactions about how you use our Website and services and your interactions with us and others, including information we collect automatically (e.g., using cookies and pixel tags), as well as information we derive about you and your use of the Website. Such information includes:

    • Device and browser information: we use cookies, log files, pixel tags and other technologies to automatically collect information when you access or use our Website and services, such as your IP address and other unique identifiers for the computer, mobile or other device you use to access this Website and any referring website. The date, time and duration of your visit, your browser type, device type, device ID, internet service provider, referring and exiting URLs, your operating system and whether you clicked on certain links on our website and/or newsletters, domain name, language, clickstream data, and similar device and usage information. We may also collect or derive location information about you, such as through your IP address.

For more information on the use of cookies see our Cookie Policy here.

3. What is the lawful basis for the processing of Personal data?

In general, we use, disclose, and process Personal Data for purposes described below. Where GDPR or other similar laws apply, we have also set forth the lawful basis for such processing below. WBA processes your Personal Data when visiting this website based on one of the following Lawful Bases:

Lawful Basis:

Your consent, as permitted by applicable law.

Purposes:

When you sign up to our marketing communications through this website or otherwise expressly consent to the use of your Personal Data.

You may revoke your consent for receiving marketing communications at any time, free of charge by following the instructions in any marketing communication.

Lawful Basis:

Necessary for the purposes of a legitimate interest of WBA or other third parties

Purposes:

Providing services to our eva customers; for event planning and management, including registration, attendance, connecting you with other event attendees, and contacting you about relevant events and services; information technology and related infrastructure provisions; email distribution; list processing and analytics; marketing and customer relationship management; to receive and handle complaints and requests; where necessary to the establishment, exercise or defense of legal claims; to analyze visits to and use of this website; to improve and develop our services and give you a better user experience; to administer this website; for internal operations and customer support, such as troubleshooting; to understand and measure the effectiveness of advertisements; to deliver relevant advertising, data analysis, statistical and survey purposes; to ensure the security of our services and website; to prevent fraud, hacking and spamming.

Lawful Basis:

Compliance with law and legal obligations

Purposes:

We may process your personal data if required under applicable law or due to a legal obligation.

4. How we disclose your Personal Data

In general, we may disclose and make available Personal Data to third parties as described in this section:

  • WBA Entities: WBA is a (global) organisation. As such, we may disclose personal data to the WBA entities as part of our business operations and administration of our Websites and Services;
  • Processors and service providers: We may disclose Personal Data to third-party processors (including contractors and service providers) who perform services on our behalf. For example, we use third-party processors to provide us with technical support, host our data, and to perform analytics and other work that we may need to outsource.
  • Vendors and business partners: We may also disclose Personal Data to other companies, vendors and business partners that perform certain functions for us.
  • Marketing, advertising and analytics providers: We may disclose certain information that includes Personal Data to third-party ad network providers, sponsors and/or traffic measurement services, who may use this data to improve and measure the effectiveness of our ads and those of third parties. For more information, see our Cookie Policy. We may also engage third party analytics companies to collect information about Website usage in order to help us to understand how users access and use the Website, to improve our Website and services and other products and offerings, and for other research and analytical purposes;
  • In support of our legal and compliance obligations: We may disclose your Personal Data to others where such disclosure is necessary for compliance with a legal obligation to which we are subject insofar as reasonably necessary for these purposes and as permitted by law, whether in court proceedings or in an administrative or out-of-court procedure.
  • In connection with a business transaction: We may disclose your Personal Data in connection with a merger, acquisition, restructuring, or transfer of assets or similar business transfer, to buyers, their lawyers or professional advisors, where needed to affect the sale or transfer of assets (such as a merger or acquisition) including related to due diligence conducted prior to such event, where permitted by law.
  • Security and protection of rights: We may disclose Personal Data where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our terms of use and other agreements, to respond to claims asserted against us, or as evidence in litigation in which we are involved. We may also share Personal Data where necessary in order to protect your vital interests or the vital interests of another natural person, or where we believe necessary to protect the Website and our services, as well as our operations and our rights, such as to prevent and detect fraud, unauthorized activities and access, and other misuse.

5. How we protect Personal Data

We have implemented technical and organizational measures designed to protect your Personal Data against unauthorized, accidental or unlawful destruction, loss, alteration, misuse, disclosure or access and against all other unlawful forms of processing. However, no environment or security procedures or protocols are ever guaranteed to be 100% secure or error-free.

6. Transfers outside the European Economic Area

The Personal Data transferred within or outside WBA may also be processed in a country outside the European Economic Area (the “EEA”), which for purposes of this Policy covers the EU Member States, Iceland, Liechtenstein and Norway. Non-EEA countries may not offer the same level of Personal Data protection as EEA countries.

If your Personal Data is transferred outside the EEA, we will put suitable safeguards in place to ensure that such transfers are carried out in compliance with the applicable data protection rules, including through appropriate written data processing terms and/or data transfer agreements and/or other legally acceptable mechanisms according to applicable local laws. If you are in the EEA, you may request additional information in this respect and obtain a copy of the relevant safeguard by sending an email to [insert email address].

7. Do Not Track (DNT).

Our Websites currently do not respond to Do Not Track signals. You may, however, disable certain tracking mechanisms in the cookie preference settings of your web browser and opt out of certain third-party ad cookies on our Websites.

8. How long do we keep and store your data?

WBA aims to keep your Personal Data up-to-date and to delete unnecessary data as appropriate. In general, the data inserted in the self-assessment tool will be de-identified or deleted after a maximum of two years after your last contact with WBA. Generally, we will only retain Personal Data for as long as necessary to fulfil the purpose for which it was collected (as described in this Policy or otherwise notified to you), unless otherwise permitted or required by applicable law, such as where necessary to or to comply with legal, regulatory or internal policy requirements, or to establish, exercise or defend our legal rights (including to respond to actual or potential legal claims).

9. What Rights and Choices do you have?

Depending on the jurisdiction you reside in, you may have certain privacy rights with regard to the Personal Data that WBA Processes about you. Subject to applicable law, you have the following rights:

  • The right to access: subject to exceptions, you have the right to request access to the Personal Data we hold about you;
  • The right to rectification: if the Personal Data we hold is inaccurate you are entitled to have it updated or rectified;
  • The right to deletion: subject to exceptions, you can ask us to delete your Personal Data. Please note that if you ask us not to contact you by email at a certain email address, we will retain a copy of that email address on our “master do not send” list in order to comply with your no-contact request;
  • The right to object: under certain circumstances, you have the right to ask us to stop processing your Personal Data. For example, you may object to processing for direct marketing activities (for example, by clicking on the unsubscribe link in our emails) and where we are relying on ours or a third party’s legitimate interests to process the Personal Data (unless we can demonstrate compelling legitimate grounds to continue processing your Personal Data);
  • The right to withdraw consent: where we rely on your consent to process Personal Data, you have the right to withdraw consent at any time. You may revoke your consent for receiving marketing communications at any time, free of charge by following the instructions in any marketing communication (e.g., clicking the unsubscribe link);
  • The right to restriction of processing: under certain circumstances you have the right to restrict the processing of your Personal Data such as if you believe (i) the Personal Data we have about you is accurate; (ii) the Personal Data is not being processed lawfully, but instead of deleting the Personal Data, you would prefer us to restrict processing instead; or (iii) we no longer need your Personal Data for the purposes we collected it, but you require the data in order to establish, exercise or defend legal claims;
  • The right to data portability: under certain circumstances you have the right to obtain Personal Data you’ve provided us with (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice; and
  • The right to lodge a complaint with a supervisory authority: you also have the right to file a complaint to the data protection authority in the country where you usually live or where the alleged infringement of applicable data protection laws has taken place. In the Netherlands the relevant authority is the Autoriteit Persoonsgegevens.

You can exercise the above-mentioned rights by sending an email to [Insert relevant email address]. Subject to applicable law, you also have the right to lodge a complaint with your local supervisory authority.

WBA will honour any of the above requests, withdrawal or objections as required under the applicable data protection rules, but these rights are not absolute; they do not always apply, and exemptions may apply. We may, in response to a request, ask you to verify your identity and/or provide information that helps us to understand your request better. Whenever reasonably possible and required under applicable laws, we will strive to grant these rights within one month. If we do not comply with your request, we will explain why.

10. Children

Our Website is not designed for, or directed at, children under the age of 16 and we do not knowingly collect Personal Data from individuals in this age group. If you believe we have inadvertently collected Personal Data about a child, please contact us and we will take steps to delete this data.

11. Updates to this Policy

This Policy is current as of the Effective Date set forth above. WBA reserves the right to update this Policy at any time. We will post any changes to this Notice on our Website. If we make any changes to this Notice that materially affect our practices with regard to the Personal Data we have previously collected from you, we will inform you in advance of such change by highlighting the change on our Website or notifying you electronically. Where required by law, we will obtain your consent to such changes.

12. Contact us

If you have questions about this Policy or our data practices, you can send an email to [insert email address].