PRIVACY STATEMENT

Why is this privacy statement important?

This statement is important because it tells you what data we collect when you visit www.eaad.net, why we collect it, and how you can access and alter the personal information we hold.

This website is maintained by the European Alliance Against Depression (EAAD). You can reach us by email at contact@eaad.net, via telephone at +49(0)341 223874 70 or by post under the following address.

European Alliance Against Depression e.V.
Goerdelerring 9
04109 Leipzig
Germany

What data will be collected?

Your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form or the newsletter subscription form.

How can I access, change or erase these data?

You have the right to access your personal data that we hold. In accordance with regulations, you can request these data by email at contact@eaad.net or by post (European Alliance Against Depression e.V., Goerdelerring 9, 04109 Leipzig, Germany) and we will send them to you within 40 calendar days. Proof of identification will be required.

You have the right to change or erase the data that we hold on you. Such requests may also be addressed to us by email (contact@eaad.net) or by post (European Alliance Against Depression e.V., Goerdelerring 9, 04109 Leipzig, Germany). We will process your request within 40 calendar days.

Who will have access to my data?

Anonymised data may be shared among EAAD partners for research purposes only.

If the www.eaad.net website is ever sold or transferred to another organisation, your data may then transfer to the buyer.

If there is any legal obligation to share the data obtained, data may be shared with third parties.

Anonymised excerpts of feedback comments entered may be used in the process of disseminating information about the acceptability of the www.eaad.net website.

Cookies

For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.

When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data processing agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:

• Your consent status or the withdrawal of consent
• Your anonymised IP address
• Information about your Browser
• Information about your Device
• The date and time you have visited our website
• The webpage url where you saved or updated your consent preferences
• The approximate location of the user that saved their consent preference
• A universally unique identifier (UUID) of the website visitor that clicked the cookie banner

Mailchimp

We use Mailchimp from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA (Mailchimp) to send our newsletter. This allows us to contact subscribers directly. In addition, we analyze your usage behavior in order to optimize our offer.

For this purpose, we share the following personal data with Mailchimp:

• Email address

Our email sends include a link that allows you to update the following personal information and thus share it with Mailchimp:

• First name
• Last Name
• Phone number

Mailchimp is a recipient of your personal data and acts as a processor for us as far as the dispatch of our newsletter is concerned. The processing of the data provided under this section is neither legally nor contractually required. Without your consent and the transmission of your personal data, we cannot send out a newsletter to you.

In addition, Mailchimp collects the following personal data using cookies and other tracking methods: Information about your terminal device (IP address, device information, operating system, browser ID, information about the application you use to read your emails and other information about hardware and internet connection. In addition, usage data is collected such as date and time, when you opened the email / campaign and browser activity (e.g. which emails / web pages were opened). Mailchimp needs this data to ensure the security and reliability of the systems, compliance with the terms of use and the prevention of abuse. This corresponds to the legitimate interest of Mailchimp (according to Art. 6 para. 1 lit. f DSGVO) and serves the execution of the contract (according to Art. 6 para. 1 lit. b DSGVO). Furthermore, Mailchimp evaluates performance data, such as the delivery statistics of emails and other communication data. This information is used to create usage and performance statistics of the services.

Mailchimp additionally collects information about you from other sources. In an unspecified period and scope, personal data is collected via social media and other third-party data providers. We have no control over this process. Some of this data is collected by the Mailchimp service embedded in our website via the domains

• cdn-images.mailchimp.com
• downloads.mailchimp.com
• chimpstatic.com

This is necessary in order to provide you with the specified form for the newsletter subscription on our website.

For more information on objection and removal options vis-à-vis Mailchimp, please visit: https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts.

The legal basis for these processing operations is your consent pursuant to Art. 6 (1) lit. a DSGVO. You can revoke your consent to the processing of your personal data at any time. A corresponding link can be found in all mailings. In addition, the revocation can be made via the specified contact options. By declaring the revocation, the lawfulness of the processing carried out so far is not affected.

Your data will be processed as long as a corresponding consent is available. Apart from this, they will be deleted after the termination of the contract between us and Mailchimp, unless legal requirements make further storage necessary.

Mailchimp has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://mailchimp.com/legal/data-processing-addendum/.

Data security

Data generated by use of the www.eaad.net website is stored at the premises of an internet service provider in Germany and will be analysed by members of the EAAD. All reasonable physical and technical measures will be taken to ensure the security of the data at all points in this process. All participating project centres are subject to similar data protection laws Irelandand will process all data with greatest diligence.

Changes to this Privacy Statement

If we make changes to what data we collect and how we use that data, we will revise the site’s Privacy Statement to clearly state these changes.