At HESA Group we collect different types of information about our users for five main reasons:
To fulfill contracted services. To keep customers up-to-date about the products and services they have purchased or subscribed to. If we have permission from the user, to market products and services to them. To provide personalized services unique to individual users. To help us to monitor and improve the services we offer.
- About us
The protection of your privacy and personal information is important to us. We make sure that not only do we have appropriate security measures in place, but that any other organization we work with to provide a service also meets the same standard as us.
We will respect your privacy. You should receive marketing emails only from us and, if you agree, from other organizations we have carefully chosen. We will make sure that the boxes you need to tick if you are happy to receive marketing are presented clearly and at an appropriate time.
We will make it clear at the point when we request your information, what we are collecting it for, and how we are going to use it.
We will collect and use your personal information only if we have your permission or if we have sensible business reasons for doing so, such as collecting enough information to manage your subscriptions or process your event registration.
We will minimize the amount of information we collect from you to what we need to deliver the product and services you have requested.
We will be clear in our dealings with you as to what information about you we will collect and how we will use it.
We will use personal information only for the purposes for which it was originally collected and we will make sure we delete it securely.
Our websites are accessible via the Internet. Please remember that if you post any comments or links on any of our sites that they can be read and accessed by anyone and everyone.
If we, our service providers, or our commercial partners transfer any information out of the European Economic Area (EEA), it will only be done with the relevant legal instruments or permissions in place.
What information do we collect about you and how do we use it?
We collect information on you:
- when you register for an event (including live streamed events), an awards program or competition when you contact us for information
- when you work with us in a commercial capacity, either as a sponsor or partner
- when you sign up for a newsletter
- when you use the website
- through cookies
- if you choose to reveal information in postings
- if you complete your details on research questionnaires, and
- when you enter sales promotions and competitions.
What legal bases do we use for processing your data?
We use different legal bases depending upon the purpose of collecting your data in the first instance.
For all data collected to sign up for a product and service such as a newsletter or an event we process the data using Legitimate Interest, i.e. you can access an extensive range of information in exchange for supplying your information, and we have a relationship where the balance of benefit is in your favor. You always have a choice in the management of your data in this manner and can opt out of processing under this basis at any time.
Where you provide data in the course of the purchase of a product we process your data under Contract, i.e. your data is necessary for the fulfillment of the service. Any additional contact, i.e. telling you about another product or service closely related to the product or service you have bought is managed under legitimate interest.
Any secondary processing of your data, i.e. sharing with third parties, sending you messages on behalf of third parties, or transfer to third countries, is managed under Consent.
Under the terms of current data protection legislation, we will always make it as easy as possible for you to opt out of unwanted processing, providing it does not restrict our ability to provide you with the service you have requested.
From time to time we may use some elements of the data you supply to target the messages we send you. For example, we may use your location to send you information about an event that is happening in the same country, or we may use your company type to send you a relevant news story.
None of this information is collated by wholly automated means and the rights and freedoms of the data subject is safeguarded by suitable measures.
How long do you hold on to my data?
Because we collect data for a wide range of purposes, we do not have a singularly defined retention period. For each product and service, we define a carefully assessed time frame within which we retain your data.
After this, data is managed to ensure that it is either erased from our system, minimized, and retained for legal reasons or pseudonymous and retained on a global suppression list to ensure that you do not receive unwanted messaging from us.
- Registering as a subscriber or delegate
The minimum information we need from you to register you as either a subscriber or a delegate is your name, job title, company name and address, landline telephone number, and email address. We will ask you more questions about different services, including marketing emails. Unless we say otherwise, you must answer all the registration questions.
We may also ask some other, voluntary questions during registration (for example, general demographic questions about your business) so we can gain a clearer understanding of who you are. This enables us to assess whether you qualify for a free subscription or registration, need to be invited to an event as a VIP, or deliver specific products to you. We may also use these details to create anonymized audience information for our sponsors and partners to facilitate their advertising or commercial decision-making processes.
We will process the data collected to facilitate your registration or subscription based on Legitimate Interests to deliver the service for which you have registered or subscribed. We will also, on this basis, contact you occasionally about other relevant HESA Group products and services which we think will interest you. You always have a choice and can opt out of processing on this basis at any time by contacting our team by email at firstname.lastname@example.org or by telephone at +385 99 602 3082
- Other uses of your data
With your permission, we may also send you emails from trusted partners we think may interest you. At any time you can decide not to receive these emails and will be able to ‘unsubscribe’.
We do not sell your data at any time. We will only share your data with our sponsors and commercial partners with your permission.
- Updating your personal information
Under current data privacy legislation, you have the right to rectify, erase or restrict the processing of your data without undue delay. You may also request access to the data we hold on you.
To do this or to update your personal information at any time please contact our team by email at email@example.com or telephone at +385 99 602 3082
- Who do we share data with
We will not share your personal information with others for marketing purposes unless you have given us your permission. If we have your permission, we will share your information only with other organizations we have chosen carefully.
We can access and release personal information to keep to relevant laws and government requests, to operate our systems properly, and to protect both us and our users.
Any other organizations who access your information in the course of providing services on our behalf will be governed by strict contractual restrictions to make sure that they protect your information and keep to data-protection and privacy laws that apply. We may also independently audit these service providers to make sure that they meet our standards. We may use service providers to help us run these sites (or services available on the sites), some of whom may be based outside the EEA or in countries deemed adequate by the EDPB.
For statistical purposes to track how many users we have and how often they visit our websites. We collect information listing which of our pages are most frequently visited, by which types of users, and from which countries.
We use other organizations to collect anonymous user information, sometimes through cookies and web beacons, (information embedded in images that allow them to analyze how the website is being used and the number of visitors) e.g. Facebook.
You can turn cookies off but if you do this, you may not be able to use all services on our websites and you might see more pop-ups and other advertising. This is because we won’t be able to limit what you see by using cookies. However, you will still be able to see our editorial content.
For more information about cookies and managing them, including how to turn them off, please visit our page on Cookies.
We use Google Analytics on our sites for anonymous reporting of site usage and advertising on the site.
- About our advertising
We may share anonymized behavioral data with advertising partners, including commercial organizations that fund content labeled ‘Supported by’, ‘Paid content/Paid for by’, or ‘Sponsor content/from our sponsors’. This may mean that when you are on other websites, you will be shown advertising based on your behavior on the HESA Group website. We may also show you advertising on our site based on your behavior on other sites.
If you want to opt out of receiving online behavioral advertising, this does not mean that you will no longer receive advertising when you are using our sites. It just means that the advertising you see will not be customized for you.
Advertising on mobile devices may require the collection and sharing of the unique device ID with companies who purchase advertising space on the mobile application.
- Legal information and how to contact us
Under the currently applicable data protection legislation we have to say who the ‘data controller is for HESA Group products and services provided via our websites, our magazines, events, and other products and services. The data controller is the organization responsible for protecting information and, in our case, is HESA Group, Trg Mažuranića 13, 10 000 Zagreb, Croatia, VAT: 66631337112
If you would like access to or a copy of the personal information we hold about you, to request a correction, or have any questions about how we may use it or to make a complaint, please contact our team by email at firstname.lastname@example.org or telephone +385 99 602 3082
Requests will be dealt with by the Manager and will be responded to within a reasonable period, not longer than 30 days.