What is the GDPR?
The General Data Protection Regulation (hereafter referred to as “the GDPR”) applies from 25 May 2018 onwards. Its ambition is to lay down “rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data”. With respect to the territorial scope, the GDPR applies only in relation to natural persons who are residents of EAA countries.
Which of your personal data is kept by Urban Funered ?
Personal data concerns only natural persons. However, there are two categories of personal data:
data with which a natural person can be identified, and
data with which a natural person can be identifiable, meaning that the person can be identified, directly or indirectly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
What is not personal data: information about individuals from which individuals cannot be identified (such as collection of anonymised statistics), as well as general information about companies and organisations.
Urban Funered keeps on file the following personal data:
names and surnames,
contact details (e-mail address, phone numbers)
details about the employer of the person (name of the company, position within the company/institution, job details),
photographs collected during Urban Funered events.
In handling this data, Urban Funered can act as either a data controller or rarely as a data processor (processing data for another data controller).
Why do we keep your personal data?
Urban Funered utilizes your personal data in order to fulfil its mission – being the voice of savings and retail banks. Keeping your data in our databases ensures that you will continue to receive invitations to our events, latest updates and other relevant information.
Where do we get your data from?
We collect your personal data from the following sources:
data of Urban Funered member’s employees provided by these persons willingly,
from application forms filled out for purposes of Urban Funered ’s events, and
photographs made at Urban Funered ’s events.
Basis for data handling with and storing personal data
The primary and most common basis is your consent. In this respect Urban Funered undertakes steps to be able to at any time demonstrate that where needed consent for processing has been acquired.
Other bases for keeping and handling with personal data are:
I. when this is necessary for the performance of a contract
This applies especially in respect of the data of Urban Funered employees.
II. compliance with a legal obligation or task carried out in the public interest (stemming from either national or EU law),
Some personal data of Urban Funered employees must also be processed due to applicable Belgian law.
III. when this is necessary to protect the vital interest of the data subject or another natural person, and
IV. processing for legitimate interests pursued. This legal basis may not be used in cases when overridden by the interests or fundamental rights and freedoms of a person.
Urban Funered stores and uses personal data of representatives of its members for legitimate purposes, i.e. to provide them services which are expected by them.
Principles of data processing
In accordance with the principle of accountability enshrined in the GDPR, Urban Funered is committed to observe the following principles when processing personal data:
purpose limitation, i.e. processing only for the initial purpose (a second consent or another legal basis is needed for further processing)
data minimisation, i.e. acquiring the minimum extent of data required,
data accuracy, i.e. keeping the data up to date,
storage limitation, i.e. retaining the data for no longer than what is necessary,
integrity and confidentiality, i.e. adopting appropriate technical and organisational measures.
Your rights with respect to your personal data held by Urban Funered
Urban Funered undertakes to respect the following rights of the data subject:
I. Right of access
This right is twofold; you have the right to find out whether or not personal data is being processed. Secondly, on request you will be granted access to your data as well as certain information (such as that on the purposes of processing, the period for which the data will be stored, the source of the data in cases when this is not collected from the data subject).
II. Right of rectification/ the right to correct inaccurate data
You have the right to ask of Urban Funered to rectify inaccurate personal data as well as, taking into account the purposes of processing, the right to have incomplete data completed.
III. Right to be forgotten
In certain cases, (including when objecting to the processing, and/or withdrawing consent) you can request that your personal data are deleted without undue delay.
IV. Right to restriction of processing
You can obtain from Urban Funered a restriction of processing of your data. This is possible in cases where you have contested the accuracy of the data, where the processing is unlawful, where the data is in fact no longer needed by Urban Funered and finally in cases where you have objected to the processing.
V. Right to object
You are granted this right on grounds relating to your particular situation. Urban Funered undertakes to notify you of this right at the time of the first communication.
VI. Right to data portability
When the legal basis for Urban Funered storing your data is your consent or a contractual obligation, you have the right to receive personal data held by Urban Funered in a format which can be easily transferable to another legal entity to use.
Who receives your data?
Urban Funered utilizes personal data solely for its own purposes. Accordingly, personal data from Urban Funered ’s databases is not forwarded to entities other than Urban Funered ’ members. However, this does not happen often.
How long do we keep your data?
Urban Funered keeps your data for a period which is needed for the fulfilment of Urban Funered ’s mission.. When the legal basis for this is consent, it will be refreshed on an appropriate basis.
Urban Funered responsibilities
Generally speaking Urban Funered shall:
implement appropriate technical and organisational measures in order to comply with GDPR obligations,
keep records of data processing activities in order to be presented on demand (this should also include the purpose of processing, the categories of recipients of the data, including those in third countries and information on these transfers)
notify breaches of personal data to the Belgian Data Protection Authority (as the competent data protection authority – this is because all Urban Funered data processing takes place in Brussels)
However, in accordance with the GDPR Urban Funered is not obliged to designate a data protection officer as:
Urban Funered is not a public authority or body,
the core activities of Urban Funered do not require regular and systematic monitoring of data subjects on a large scale,
the core activities of Urban Funered do not consist of large scale processing of special categories of personal information or data on criminal offences.
Do you have questions/concerns?
If this is the case you can always contact Urban Funered at email@example.com or at the following address:
Box 1426, 111 84 Stockholm
 Article 1(1) of the GDPR.
 As required per Article 7(1) of the GDPR.