Privacy Policy
European Craniosacral Association (ECSA)
Last updated: 9-26
The European Craniosacral Association (ECSA) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal information in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable European data protection laws.
1. Who is responsible for data processing?
Data Controller
European Craniosacral Association (ECSA)
Address:
Raiffeisenstr. 31a, 85296 Rohrbach/Ilm
Email: info@cranio-ecsa.eu
Website: www.cranio-ecsa.eu
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.
2. How do we collect your data?
We collect personal data in two ways:
Information you provide to us
You may provide personal data when you:
• complete a contact form;
• apply for membership;
• register for courses, conferences, or events;
• subscribe to newsletters;
• communicate with us by email or other means;
• submit inquiries or requests.
The personal data collected may include your name, address, email address, telephone number, professional information, membership details, payment information, and any other information you voluntarily provide.
Information collected automatically
When you visit our website, certain technical information is collected automatically by our IT systems. This may include:
• IP address;
• browser type and version;
• operating system;
• referring website;
• pages visited;
• date and time of access;
• device information;
• other technical usage data.
Such information is collected automatically when you access our website.
3. Why do we process your personal data?
We process your personal data for the following purposes:
• providing and maintaining our website;
• responding to your inquiries;
• managing memberships;
• administering courses, meetings, and events;
• sending newsletters and association information (where you have consented);
• improving our website and user experience;
• complying with legal obligations;
• protecting the security and integrity of our systems.
4. Legal basis for processing
We process your personal data on one or more of the following legal bases:
• Article 6(1)(a) GDPR – your consent;
• Article 6(1)(b) GDPR – performance of a contract or steps before entering into a contract;
• Article 6(1)(c) GDPR – compliance with legal obligations;
• Article 6(1)(f) GDPR – legitimate interests, including the secure and efficient operation of our website and association activities.
Where consent has been obtained, you may withdraw it at any time with effect for the future.
5. What rights do you have?
Under the GDPR you have the right to:
• obtain information about your personal data;
• access your personal data;
• request correction of inaccurate data;
• request deletion of your personal data (“right to be forgotten”);
• request restriction of processing;
• object to the processing of your data where applicable;
• receive your personal data in a portable format where legally applicable;
• withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with the competent supervisory data protection authority if you believe that the processing of your personal data violates applicable law.
6. Website Hosting
Our website is hosted by an external hosting provider.
The hosting provider processes personal data on our behalf to provide the website and related services.
This may include:• IP addresses;
• contact requests;
• communication data;
• metadata;
• website access logs;
• names;
• contact details;
• contractual information;
• other data generated through use of the website.
External hosting is carried out for the purpose of fulfilling contractual obligations (Article 6(1)(b) GDPR) and in our legitimate interest in providing a secure, reliable, and efficient online service (Article 6(1)(f) GDPR).
Where consent is required—for example for cookies or similar technologies—processing is based on Article 6(1)(a) GDPR. Consent may be withdrawn at any time.
Our hosting provider processes personal data only to the extent necessary to fulfil its contractual obligations and in accordance with our documented instructions.
Hosting Provider
Name: Ionos SE
Address: Elgendorfer Str. 57 56410 Montabaur
Privacy Policy: https://www.ionos.de/datenschutzerklaerung/en
7. Cookies
Our website may use cookies and similar technologies.
Some cookies are technically necessary for the operation of the website. Other cookies help us analyse website usage or improve our services.
Where required by law, non-essential cookies are only stored after obtaining your consent. You may withdraw your consent or change your cookie preferences at any time.
8. Contact Forms
If you contact us using a contact form or email, the information you provide will be stored for the purpose of processing your request and any follow-up correspondence.
We will not share this information without your consent unless legally required.
9. Membership Administration
If you become a member of ECSA, we process your personal data for purposes including:
• membership administration;
• communication regarding association activities;
• invoicing and accounting;
• event registration;
• maintaining membership records;
• fulfilling our statutory obligations.
Personal data is processed only for as long as necessary to fulfil these purposes or to comply with applicable legal retention periods.
10. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected or as required by applicable law. Once retention is no longer required, the data will be securely deleted or anonymised.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
12. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be implemented in accordance with Chapter V of the GDPR.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or organisational changes.
The latest version will always be available on our website.
14. Social Media
The European Craniosacral Association (ECSA) maintains publicly accessible profiles on social media platforms to communicate with members, professionals, and the general public.
Our social media pages may include:
• Facebook
• Instagram
• LinkedIn
When you visit one of our social media pages, your personal data may be processed both by us and by the respective platform operator. This processing may include your IP address, device information, interactions (such as likes, comments, shares), messages, and other information associated with your account.
Please note that the operators of these platforms may process your personal data for their own purposes, including advertising, profiling, market research, and the creation of user statistics. We have no influence over these processing activities.
The legal basis for operating our social media pages is our legitimate interest in maintaining effective communication with members and interested persons in accordance with Article 6(1)(f) GDPR.
Further information regarding the processing of personal data can be found in the privacy policies of the respective providers:
• Meta (Facebook and Instagram): https://privacycenter.instagram.com/policy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
If you contact us through social media, the information you provide may be processed in order to respond to your enquiry and maintain correspondence.
15. Google Fonts
Our website may use Google Fonts to ensure a consistent and visually appealing presentation of text.
Where Google Fonts are loaded from Google servers, your browser may establish a connection to Google’s servers. As a result,
Google may receive information such as your IP address and browser details.
Whenever technically possible, we use locally hosted Google Fonts to minimise the transfer of personal data.
The legal basis for processing is our legitimate interest in providing a consistent and user-friendly website pursuant to Article 6(1)(f) GDPR. Where consent is legally required, processing is based on Article 6(1)(a) GDPR.
Further information is available at:
https://policies.google.com/privacy
16. Google Maps
Our website may integrate Google Maps to display interactive maps and directions.
When you access a page containing Google Maps, your browser establishes a connection with Google’s servers. Personal data such as your IP address, browser information, and location data (where permitted by your device settings) may be transmitted to Google.
Google Maps is only activated where required by applicable law after obtaining your consent.
The legal basis is Article 6(1)(a) GDPR (consent) or, where applicable, Article 6(1)(f) GDPR.
Further information can be found in Google’s Privacy Policy:
https://policies.google.com/privacy
17. Embedded Videos (Vimeo and YouTube)
Our website may contain embedded videos hosted by Vimeo or YouTube.
When you visit a page containing an embedded video, your browser connects directly with the servers of the respective provider. Personal data such as your IP address, browser information, and information about your visit to our website may therefore be transmitted to the provider.
If you are logged into your Vimeo or Google/YouTube account while visiting our website, the provider may associate your visit with your user account.
Where legally required, embedded videos are only activated after obtaining your consent through our cookie consent management system.
The legal basis for processing is Article 6(1)(a) GDPR (consent).
For further information please refer to:
YouTube (Google):
https://policies.google.com/privacy
Vimeo:
https://vimeo.com/privacy
18. Changes to Third-Party Services
We reserve the right to add, remove, or replace third-party services used on our website where necessary for technical, organisational, or legal reasons.
This Privacy Policy will be updated accordingly whenever significant changes occur.
