Breast International Group (BIG)-aisbl also referred to in this Policy as ‘we’ or ‘us’), with its legal address at Boulevard de Waterloo, 76. 1000, Brussels, Belgium, is committed to complying with the General Data Protection Regulation (GDPR) (EU) 2016/679 in relation to the processing of personal data.
BIG values your privacy and the protection of your personal data. When BIG collects your data, we need to be transparent and fair in notifying you about how your data will be managed by BIG and informing you about your rights.
- Website visitors or individuals contacting or supporting BIG through our website or by any other communication channel;
- Service providers or suppliers of BIG Headquarters;
- Potential and existing donors and purchasers of BIG products.
- Individuals participating in BIG studies as study subjects;
- Executive Board members;
- Members of BIG studies’ governing committees;
- Investigators, researchers and staff members of institutions conducting research in the context of BIG studies;
- BIG’s staff.
WHY DOES BIG HOLD YOUR PERSONAL DATA?
We will only process your personal data when we have a lawful reason to do so. The basis for processing your personal data will vary, depending on the activity we collected it for. In some cases, we may have more than one lawful basis for processing.
The information below summarises the different legal bases BIG relies when processing your personal data.
- Contracts: BIG processes personal data that is necessary for the performance of a contract to which you may be a party to, or may want to enter. This includes, but is not limited to, contracts for donations to BIG or contracts related to services provided to BIG.
- Legal Obligations: BIG processes personal data that is necessary to comply with its legal obligations. This includes, but is not limited to, providing personal information to public authorities (i.e. tax authorities regarding donations) or to store personal information if necessary to comply with specific data retention obligations.
- Legitimate Interest: BIG processes personal data in order to meet its legitimate interests as a not-for-profit organisation. This includes, but is not limited to, providing you with information related to BIG activities that we think will be of interest to you to collect funds to support breast cancer research conducted by BIG (e.g., clinical trials).
- Consent: BIG processes personal data when you have provided your consent to do so, such as by subscribing to our publications, e.g., to BIG’s newsletters.
BIG may use your personal data for the following purposes:
- to answer your queries;
- to communicate about BIG’s activities;
- to manage subscriptions to BIG’s newsletters and other publications;
- to finance BIG’s research projects and related activities;
- for fundraising purposes, such as to process your gifts and donations;
- to manage BIG Headquarters’ office;
- for statistical purposes.
WHAT TYPE OF PERSONAL DATA BIG COLLECT ABOUT YOU?
BIG processes personal data for the above reasons and/or purposes. This data may include:
- Name and contact details;
- Gender, location & age (in case of BIG’s website visitors).
- Financial details (in case of donors or purchasers of BIG products)
- If you visit our website, we collect information about the Internet Protocol (IP) address of the device used to access the site.
- Sensitive data, such as unsolicited health details you have provided to us.
WHO MIGHT HAVE ACCESS TO MY PERSONAL DATA?
- BIG Headquarters’ staff;
- Subcontractors and/or third parties that work under contract to carry out specific activities for BIG, for example to provide shipping or publishing services because you have purchased BIG products or you have asked to receive BIG’s publications;
- Public and other authorities if needed to fulfill BIG legal’s obligations;
- Third parties because you have given consent.
HOW LONG WILL MY PERSONAL DATA BE STORED?
We will retain your personal data for as long as it is needed for the relevant purposes/reasons listed in the section ‘Why does BIG hold your personal data?’ above.
We may also retain certain records for a longer period for other legitimate reasons, for example, to resolve any potential disputes and to comply with other legal data retention obligations.
WHAT RIGHTS DO I HAVE REGARDING MY PERSONAL DATA?
You have specific rights regarding the use of your personal data, but in some cases, there may be restrictions to exercising these rights. Your rights include:
- The right to access: You have the right to request access to your personal data, as well as ask us for a copy of the personal data we hold about you.
- The right to rectification: If the data BIG holds about you is inaccurate or not complete, you have the right to ask us to correct it.
- The right to object: You have the right to request that BIG no longer process your personal data.
- The right of restriction: You have the right to ask BIG to restrict how we process your data. This means that we are permitted to store the data but not further process it. We will keep just enough data to make sure we respect your request in the future.
- The right to erasure: You can ask BIG to delete all or part of your personal data.
- The right to data portability: You may ask BIG to obtain your personal data for your own purposes and also to have it transferred to another data controller. To exercise this right, the personal data must be held by BIG because you gave us your consent to do so or because we needed it for the performance of a contract.
- The right to withdraw your consent: If you have given us your consent to process your personal data, but you change your mind later, you have the right to revoke your consent anytime and BIG will stop processing your personal data.
If you want to exercise your rights regarding the protection of your personal data processed by BIG or if you have questions about how BIG uses your personal data, you may contact the BIG Data Protection Officer by writing to the following address:
To the attention of the BIG Data Protection Officer
Breast International Group (BIG)-aisbl
Boulevard de Waterloo, 76
Or by sending an email to firstname.lastname@example.org.
If you consider that your rights regarding the use of your personal data are not respected, you can submit a complaint to a data protection supervisory authority. In Belgium, the complaint may be addressed to the Privacy Commission (www.privacycommission.be).