- SCOPE AND CONTACT
Under data protection legislation (such as the Regulation (EU) 2016/679 (better known as GDPR)) THE BALKAN LAWYER is the data controller in respect of your personal data and we will securely store and process personal data which you have provided to us.
- WHAT PERSONAL INFORMATION DO WE COLLECT?
You do not have to give us any personal information to browse our websites.
However, if you wish to register on our websites, subscribe to a service, book places at events, request further information, contact us, complete any surveys, enter events and awards, or provide content for inclusion on our websites (e.g. blogs or other online forums) we will collect certain data, including personal data. The data we collect may include:
- title, name, address, business phone number(s), email address and gender;
- employment details, such as your current role and responsibilities, experience, seniority, salary and education;
- information about your organisation and the industry that you work in;
- areas of interest which you have notified us about, as well as what we can infer from your engagement with our products and services;
- your CV;
- your marketing preferences;
- your newsletter preferences;
- your job alert preferences;
- any data recoverable from social networking sites, where permission from you has been obtained; and
- any other information that you submit to us.
We may receive the above information directly from you or from your colleague or corporate contact who registers for a subscription or event on your behalf. Please note that not all of the information we request is mandatory to provide you with the service. You are not required to provide any optional information.
Financial Information: We will keep a record of any financial transaction you make with us. Online payments made through our websites are processed securely through bank transactions in The Netherlands. We do not directly collect or process your debit or credit card information, except in limited circumstances where you provide us with new debit or credit card details over the phone, and we update them.
Device and browsing data: In addition, we may automatically collect information about any website that you came from or are going to. We also collect information about the pages of our websites which you visit, the links you click on, IP addresses, the type of browser you use and the times you access our websites. Some of this information is aggregated and is not used to identify you, but we also use analytics software on our websites which allows us to link information about your use of our websites back to you, where you have logged into your account. We may infer and derive certain information from these observations such as what additional brands, subscriptions and events you or a user like you may be interested in. This information will be used for our own internal and marketing purposes.
- HOW WILL YOUR PERSONAL INFORMATION BE USED AND SHARED?
In accordance with data protection legislation, we will only process your personal data where we have a lawful basis for doing so. These bases are: (i) where it is necessary for the performance of a contract we have with you; (ii) where you have provided your consent; (iii) where it is necessary for us to comply with legal obligation that we are under; or (iv) where it is in our (or a third party’s) legitimate interests and such interests do not prejudice your rights or freedoms.
The personal information we collect allows us to:
- provide the products and services you have ordered or signed-up to (necessary for a contract);
- register you for events and administer those events (including informing the venues where our events are hosted of any dietary or access requirements you may have told us about) (necessary for a contract and necessary to comply with our legal obligations);
- notify you of key information in relation to your subscription or any events you are attending (necessary for a contract and legitimate interests, of our customers, to ensure they are up to date with necessary information);
- verify your identity and details of your payment method or credit card amount (where payments are required) (necessary to comply with our legal obligations);
- administer our websites (such as access controls) and provide customer services (legitimate interests, of us and our customers, to ensure a good quality of service and security);
- aggregate information about you with other users (legitimate interests, of us, to better understand what services our users will be interested in);
- meet legal, regulatory and compliance requirements (necessary to comply with our legal obligations);
- monitor and analyse the use of any account to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime (legitimate interests, of us and our users, for security);
- gather information to form statistical and trend analysis including to monitor user demographic (legitimate interests, of us, so we can better understand those that use our products and services and improve our products, services, events and marketing practices);
- monitor your use of our products and services and attendance at events and to build up customer profiles (including through use of analytics software) (legitimate interests, of us, to help us identify content and marketing materials which will be of interest to you and other customers like you);
- monitor interactions at events including what exhibition stands are visited by attendees during events (legitimate interests, of us, to gain insights into our events and to help us better understand how best to run future events);
- communicate with you including responding to your enquiries (necessary for a contract, or consent);
- investigate any complaints about our websites, products, services or events (legitimate interests, for us and our customers, to ensure that we maintain high service levels);
- personalise your experience of our website, products, services and events, for example, by displaying targeted advertising and content which we believe likely to be relevant and of interest to you (please see below for further details) (legitimate interests, of our advertising partners, so that they can show you the most appropriate adverts); and
- provide you with the prize for competitions you enter and win (necessary for a contract) and to comply with regulatory requirements to disclose a competition winner’s name and county (necessary to comply with our legal obligations);
- send you business- to-business marketing about products, services and events of the brand with whose website or event you have registered, and of other brands within our business which we think may be of interest to you (legitimate interest:, of us, to promote our products and services, and of our customers, to keep them up to date with promotions, events and subscriptions which may be relevant to their professions and job roles). Our customers always have the right to let us know that they no longer want to be contacted for marketing purposes (please see Paragraph 5 for more information);
Group companies: We may share your personal information with our affiliate companies and their brands for the above purposes, including where a brand that you have subscribed to is managed or partly managed by one of our group companies (legitimate interests, of us, for internal efficiencies).
Events (including awards): Where you are attending an event organised by us we may share your name, job title and company with the other attendees of the event (including making this information available via the event app, on social media sites and/or in our event guide). Generally we will ask for your consent to share this information, but for some of our events, such as our awards and round table events (and any other events which we inform you of) we rely on legitimate interests to share this information because it is a fundamental part of such events (for example, for table plans and networking purposes).
If you enter one of our awards and are short-listed, your name and organisation details will be included in the award lists and materials used and distributed in relation to the award (legitimate interests, of us and other entrants and attendees of the awards, to allow other entrants and those attending the awards to see who is in the running).
We will share your registration information with the sponsors of our events who may contact you for marketing purposes (legitimate interests, of us, to attract the most appropriate sponsors for the event and of our sponsors, to facilitate business-to-business communications between them and our registrants before, during and after our events).
We or our sponsors may contact you ahead of our events to enquire whether you’d like to set up a meeting with our sponsors at the relevant event. Where you register to attend certain seminars or presentations at our events hosted by a third party, we may share your registration information with such third party (legitimate interests, of our hosts, so they know who has attended their events and so they can contact attendees about their goods and services).
Where you indicate that you want us to share your details with exhibitors at events (for example, by scanning your event badge at an exhibitor’s stand) we share your information with those exhibitors who may contact you about their goods and services (consent).
Sponsored webinars and whitepapers: Where you sign up for a sponsored webinar or to access sponsored content such as whitepapers , we share your sign-up details with that sponsor who may contact you (legitimate interests, of us, to enable us to offer our uses premium business content free of charge, and of our sponsors, to facilitate business-to-business relationships). If you do not wish for your details to be shared, we usually offer an alternative means of accessing this content.
Job sites: Where you apply for a job via one of our websites we share your application with the recruiter/employer advertising that job (consent). Where you indicate that you are happy for your CV and contact details to be made available to all other recruiters who have signed up to use our job websites, we share that information with them (consent). If you no longer want to make your CV and contact details available to all recruiters you can contact us at email@example.com or edit your account settings, but please note that recruiters who have already being given access to your CV prior to you changing your preferences may still contact you.
Your employer: Where your subscription to our service is a part of a wider corporate subscription (i.e. your employer obtains a subscription for all of its employees) we may share information about your use of the service with your employer (legitimate interests, of your employer, so they can understand how their staff are making use of the resources they have purchased).
Other third-party marketing: In addition to the circumstances set out above, we may share your registration information including name, job title and contact details with other third parties for marketing purposes, where you have provided consent for us to do so.
Service providers: We may employ the services of third-party service providers to help us in certain areas, such as website hosting, maintenance, call centre operation and the operation of events. In some cases, the third party may receive your personal data (legitimate interests, of us, for service efficiency and to benefit from third party expertise, and our customers so they experience a good quality of service). However, always, we will control and be responsible for the use of your personal data and we will endeavour to ensure that our service providers are bound by contractual obligations to only process your personal data in accordance with our instructions.
Aggregate information: As mentioned above, we may use aggregated information, so we can administer and improve our website, analyse trends and gather broad demographic information and detect suspicious or fraudulent transactions. We may pass this information to third parties. In most cases this information will be anonymised, meaning that you will not be able to be identified from it.
Surveys: If you complete a survey, unless we inform you otherwise, your answers will be aggregated and anonymised for research and analysis purposes. However, if you choose to provide any information in your response to a survey which identifies you (e.g. name, job title), we may be able to identify you from this. If you choose to submit your email address to enter into any prize associated with the survey, this will be used to administer the prize only and will not be linked to your survey responses (necessary for a contract). We may share your responses in an aggregated and anonymised form with third parties carrying out research relating to the topics covered in the survey or, if the survey relates to your use of one of our subscription products, and this forms part of a corporate subscription taken out by your employer for you and other employees, we may share information provided in your survey responses about your use of the subscription with your employer (legitimate interests, for research purposes). If you have included information about yourself in your survey responses (e.g. name, job title), third parties or your employee (as appropriate) may be able to identify you from this.
Administration of justice: We may occasionally be required by law, court order or governmental authority to disclose certain types of personal data (necessary to comply with a legal obligation, or for legitimate interests in connection with a legal claim against us). Examples of the type of situation where this would occur would be:
- in the administration of justice; or
- where we must defend ourselves legally.
We process personal data about individuals who feature in our publications, content and products, including information we have researched from publicly available sources (legitimate interests and for journalistic purposes). We also use publicly available sources to research prospective customers to send them marketing information about products and services relevant to them (legitimate interests, to grow our business).
- SALE OF THE BUSINESS
If the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s advisers and will be passed to the new owners of the business (legitimate interests).
- 5. FRAUD PREVENTION AND AUTOMATED DECISION-MAKING
If you provide a credit or debit card, we may also use third parties to check the validity of the sort code, account number and card number you submit to prevent fraud as well as to process any transaction you attempt via our websites. Any decision to deny you services based on the validity of your card details will be made by automated decisions. If you are denied a service because of this automated decision-making, you are entitled to request us to further investigate. It may also be that you will need to contact your bank / payment provider.
If false or inaccurate information is provided and fraud is identified, details may be passed to fraud prevention agencies. Law enforcement agencies may access and use this information. We and other organisations may also access and use this information to prevent fraud and money laundering, for example when:
- checking details in applications for credit and credit related or other facilities;
- managing credit and credit related accounts or facilities;
- recovering debt;
- checking details on proposals and claims for all types of insurance; and
- checking details of job applicants and employees.
- TRANSFER OF YOUR PERSONAL INFORMATION
We may transfer some of your personal information to other countries in case we have affiliates in these jurisdictions. In addition, we and service providers processing personal data on our behalf, transfer personal data to servers outside The Netherlands for storage purposes. These countries may not have equivalent data protection legislation to the Netherlands. However, when we transfer your personal information in this way we will endeavour to ensure that adequate measures are in place to keep your personal data secure, including via standard contractual clauses and Privacy Shield.
- 7. MARKETING COMMUNICATIONS
Where we have told you that we will do so – such as during the registration process to our websites/website services and events (as applicable) – we may from time to time contact you by email, SMS, telephone or post about our products and services (including from all our brands) that may be of interest to you. If at any point, you would like to opt-out of receiving such marketing communications from us, or would like to change the channels that we use to contact you, please click on the unsubscribe link at the bottom of any emails you receive, or email us, stating your preferences, at firstname.lastname@example.org
Our site can contain links to other websites over which we might not have control. We are not responsible for privacy policies or practices of other websites to which you choose to link from this site. We encourage you to review the privacy policies of those other websites, so you can understand how they collect, use and share your personal information.
We have implemented reasonable technical and organisational measures designed to secure your personal information from accidental loss and from unauthorised access, use, alteration or disclosure. However, the Internet is an open system and we cannot guarantee that unauthorised third parties will never be able to defeat those measures or use your personal information for improper purposes.
- YOUR RIGHTS
Under certain circumstances, by law, you have the following rights in relation to your personal data:
- a right of access to your personal data held by us;
- a right to receive your personal data in machine-readable format;
- a right to object to processing of your personal data where we are relying on legitimate interests (or those of a third party) for a purpose and you believe your circumstances mean you are unjustifiably prejudiced by this processing and where we do not have compelling legitimate interests to override such objection;
- a right to ask us not to process your personal data for direct marketing purposes (including profiling for direct marketing) and you can find out more information about how to unsubscribe or adjust your marketing preferences in Paragraph 5 above.
- a right to object to decisions being taken by automated means which significantly affects you (for more information on how to exercise this right see above);
- a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed; and
- a right to complain to your data protection supervisory authority.
To protect you, we reserve the right to verify your identity before processing any such request. If you are unsure about your rights, you should contact your data protection supervisory authority. If you contact us in relation to your rights, we will do our best to accommodate your request or objection. Please note, however, that not all rights are absolute.
- UPDATING YOUR PERSONAL INFORMATION
You may review, correct, update or change your personal information at any time by contacting us at email@example.com. Often, where you have signed up for an online account on one of our websites you can also amend you details via that online account.
- HOW TO CONTACT US
As a reminder, if you have any questions about this statement or your personal information, please contact us at firstname.lastname@example.org