This Privacy Policy has been approved by the ECRA Board held on the 22 April 2021
When you contact us, visit our website or trust us with your information, this Privacy Policy is meant to help you understand what information we collect, why we collect it and what we do with it. It is important and we hope that you will take time to read it carefully.
This ECRA Privacy Policy
This ECRA Privacy Policy explains:
- What information we collect and why we collect it;
- How we use that information;
- The choices you have and your rights, including how to access and update information.
Changes to the data protection law
The law in relation to data protection was changed on the 25th May 2018 when the General Data Protection Regulation (GDPR) came into force in European countries.
We will notify you through the ECRA channels of any significant changes to this Privacy Policy. We may change this notice by updating this page and you should check from time to time to ensure that you are happy with any changes.
Who we are and how you can contact us
This Privacy Policy is issued by the European Cave Rescue Association (ECRA), officially registered in 2012 in
Croatia under Croatian law, Registration number: 21009757, 94.12 Activities of professional membership organisations (NKD 2007).
The ECRA therefore is under supervision of the National Commission for Data Protection of Croatia (Agencijа za zaštitu osobnih podataka) https://azop.hr/.
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to the ECRA Privacy Policy. If you have any questions in relation to the Privacy Policy, including any request to exercise your rights, please contact the DPO at dpo@caverescue.eu.
This Privacy Policy is fully applicable to all the commissions and working groups of the ECRA.
When we refer to our website, we mean: https://www.caverescue.eu.
When we collect your personal information from
We collect, store and transfer personal information about you that you give to us in the following ways:
- When you send us contact information about your cave rescue organisation or its members. We will assume that the cave rescue organisation has asked permission of those involved to provide his or her personal information. The contact information of our members is published on the ECRA website under the section Members.
- When you are officially appointed as a delegate to the GA of ECRA by your organisation, your personal information can also be provided to the ECRA by your organisation.
- When you email us or send us letters for any reason.
- When you engage with us on social media (ECRA or commissions).
- When personal information is published in official reports of ECRA.
- When you send us photographs and images of yourself or when photographs or images of yourself are published in the official reports of ECRA.
Data we collect about you
We may collect, use, store and transfer different kinds of personal information about you which we have grouped together as follows:
Identity data – name, username, photographs or images.
Contact data – home address, email address, telephone numbers and social media addresses.
We do not collect any special categories of personal information about you. This includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political beliefs and practices, information about your health, genetic and biometric data, memberships at organisations different from speleological (rescue) organisations.
How we use your personal information
We are only allowed to use personal information about you if the law allows us to. We have set out in the table below the personal information which we collect from you, how we use it and the legal basis on which we rely when we use the personal information.
Most commonly, we will use your personal information in the following circumstances:
- Where it is necessary to have access to contact persons of member organisations. This in the capacity as a contact person of your organisation as long as you are officially appointed as a contact person by your organisation. This information is published in the page of your organisation of the ECRA site under the Members section. The website and the email addresses in the mailing lists are kept at our provider “SuperHosting” – https://www.superhosting.bg/. This information is also kept by the ECRA Board and by the Chairpersons of ECRA commissions, and in the ECRA cloud service provided by pCloud – https://www.pcloud.com/
- Where it is necessary to communicate concerning the ECRA or one of its commissions or working groups. The email addresses are kept in the mailing lists established at our provider “SuperHosting”.
- Where we are required to comply with a legal or regulatory obligation (for example, we pass on details of people involved in fraud or other criminal activity affecting us to law enforcement agencies).
- Where we can collect and process your data with your explicit consent (for example when you give us your email address to receive information from ECRA).
Table of purpose, activity, type of data and lawful basis or legitimate interest of personal information
| Purpose and activity | Type of data | Our lawful basis or legitimate interest |
| Details of interactions with the ECRA through writing, email or social media, including relevant information of members. Handling this information, you sent enables the ECRA to respond. The ECRA also keeps record of information you sent to inform members. | Full name, address, telephone numbers and email address of contact persons and copies of your communication with us. | We do this on the basis of our legitimate obligation to you as a contact person of the ECRA and our legitimate interest in providing you the best way of our service. |
| Web news (including social media), newsletters and other (non-)regular information to keep you informed about relevant ECRA and rescue information. | Email address or social media username. | This will be subject to your prior consent. If we do not have this information, then we would not be able to contact you. You can of course let us know at any time when you do not want to receive this information. |
| Details of participants of ECRA meetings that enables the ECRA to interact in case of questions. | Full name, email address and phone number. | This will be subject to prior consent the participant gives to the ECRA when registered online for the meeting. |
| Contact data of contact persons of ECRA members | Full name, email address and phone number. | This will be subject to prior consent of member organisation. If we do not have this information published on our website, in case of emergency, it will be difficult to get in touch with your rescue organisation. |
| External contacts: Interested parties, Candidates, Cooperation Partners (like UIS, ICAR) | Names, email address, phone number. | We do this on this basis of our legitimate obligation to you as a contact person of your organisation. |
We will only use your personal information for the purposes for which we collect it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. We do not share information with third-parties other than the parties mentioned above who support our websites, mailing lists or cloud service.
We will only retain your personal information for as long as necessary to fulfil the purposes for which we collect that information.
Cookies, Analytics and Links to other sites
Cookies Policy
We use cookies and similar tracking technologies to track the activity on our website and hold certain information.
What are cookies
Cookies are small pieces of information sent to your web browser by a website you visit. A cookie file is stored in your web browser and allows the us to recognise you and make your next visit easier and our site more useful to you.
Cookies can be “persistent” or “session” cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.
What are your choices regarding cookies?
If you would like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser.
Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.
- For the Chrome web browser, please visit this page from Google: https://support.google.com/accounts/answer/32050
- For the Internet Explorer web browser, please visit this page from Microsoft: http://support.microsoft.com/kb/278835
- For the Firefox web browser, please visit this page from Mozilla: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
- For the Safari web browser, please visit this page from Apple: https://support.apple.com/kb/PH21411?locale=en_US
- For any other web browser, please visit your web browser’s official web pages.
Where can you find more information about cookies
You can learn more about cookies and the following third-party websites:
All About Cookies: http://www.allaboutcookies.org/
Network Advertising Initiative: http://www.networkadvertising.org/
You can find guides on removing cookies from your browser at https://www.aboutcookies.org
Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics from sharing information about visits activity.
For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: https://policies.google.com/privacy?hl=en
Links to other sites
Our website may include links to third-party websites. You leave our website by clicking on those links and we encourage you to read the privacy notice or policy of every website you visit. The ECRA does not control these third-party websites and is not responsible for their privacy statements.
Your rights
You have rights under GDPR in relation to your personal information as follows:
Request to access to your personal information (commonly known as a “data subject request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction of your personal information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us to keep it. You have the right to ask to delete or remove your e-mail address from one of our subscriber e-mail lists. Note, however, that we may not be able to remove your personal information as long as you are a delegated member of your country as these are kept for a specific purpose as mentioned before.
Making a complaint
Please let us know if you are unhappy with how we have used your personal information by contacting the DPO of the ECRA at dpo@caverescue.eu.
You also have the right to complain at the National Commission for Data Protection of Croatia (Agencijа za zaštitu osobnih podataka) https://azop.hr/. We would be grateful for the chance to deal with your concerns before you approach the National Commission for Data Protection in Croatia, so please contact us in the first instance.