Framework

This Privacy Policy governs the processing of the personal data of Users and Members (hereinafter both referred to as “User” or “Users”), collected in connection with the use of this esdipath.org (hereinafter “Website”), being its owner “ESDIP – European Society of Digital and Integrative Pathology” (hereinafter “ESDIP”).

ESDIP aims to develop progress in the digital and integrative pathology area, its main objectives:

• To promote the advancement of digital and integrative pathology and related sciences and new techniques;
• Disseminate the need for and the benefits of digital and integrative pathology;
• Promotion of research, dissemination and exchange of scientific and technical information in the field of digital and integrative pathology;
• Promoting the association of individuals and legal entities whose field of activity falls within the scope of digital and integrative pathology;
• Organization of seminars and congresses, national and international, on digital pathology;
• Promotion and edition of scientific, technical and divulgation publications;
• Promoting, before public and private organizations, the organization and standardization of norms and requirements necessary for the correct application of solutions in the area of digital and integrative pathology;
• Offering a membership program that provides access to various advantages in the area of Digital and Integrative Pathology.

The Privacy Policy applies exclusively to the processing of personal data carried out by ESDIP in the context of the purposes set out herein, in which personal data is considered information relating to a natural person, of any kind and regardless of their support, which identifies or allows the identification of that person.

Data Controller

ESDIP act as data controller, regarding all data processing activities of the Website, under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation (GDPR).

Data Controller: ESDIP– European Society of Digital and Integrative Pathology
Type of legal entity: Non-profit scientific association
Portuguese taxpayer number: 516453530

Data subjects’ rights

Users may at any time request the exercise of their rights such as access, rectification, right to be forgotten, right to restriction of processing, portability, and right to object, where applicable under GDPR upon request through admin@esdipath.org.

For the purposes of exercising your rights, you may also submit them in writing to the following address:

Rua da Constituição, n.º 668, 1.º Esq./Traseiras
4200-194 Porto
PORTUGAL

Purposes and Legal Grounds of Data Processing

The User can access, browse, and use this Website without providing any personal information. The use of certain tools on the Website, however, may result in the processing of your personal data.

ESDIP may also process Users' personal data when Users request information by filling in the forms available on the Website. In general, personal data will be processed to allow the use of the Website, to become a Membership, to participate in activities and international events promoted by the ESDIP as well as to receive electronic communications, such as newsletters.

Within the scope of the purposes mentioned above, personal data is processed based on the i. user’s consent and ii. on the execution of a contract relationship – to provide services related to Membership and Events.

ESDIP also recommend you consult the Cookie Policy (https://www.esdipath.org/cookie-policy/) and Website’s Terms and Conditions (https://www.esdipath.org/terms-and-conditions/).

Categories of Personal Data

In the context of the purposes stated, ESDIP processes only the data that is strictly necessary for the pursuit of these purposes, namely:

ESDIP does not process sensitive data categories revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data to uniquely identify a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.

Personal Data’s Retention

The data are stored and used for the period strictly necessary for the purposes for which they were collected, unless another retention period derives from direct application of the applicable legislation, namely:

• For the management of contacts and complaints through the Website;
• For the management of the contractual relationship with the members. Please have in mind that ESDIP may keep personal data for periods longer than the execution of the contractual relationship (its Services or Membership), to ensure rights or duties related to the services, to comply with legal obligations and/or for defence in legal proceedings.

At the end of the legal retention, your personal data will be deleted or irreversibly anonymized.

Sharing Personal Data

ESDIP may transfer your data to third entities to process personal data on its behalf, under the terms of the contracts concluded with them (“data processors”).

ESDIP represents and warrants that had celebrated a written contract with these entities and that they may only process your personal data for the established purposes and are not authorized to process it, directly or indirectly, for any other purpose, for their own benefit or for the benefit of a third party.

In compliance with legal and/or contractual obligations, your personal data may also be transmitted to third parties for their own purposes, namely banks and insurance companies, judicial, administrative, supervisory, or regulatory authorities and also entities that lawfully carry out data compilation, fraud prevention and combat actions, market or statistical studies.

Transfers of Personal Data

Your personal data are not transferred or communicated by ESDIP to third countries or located outside the European Economic Area (EEA).

Exceptionally, ESDIP may need to use tools and/or service providers located outside the European Union. In such cases, ESDIP will ensure that your personal data enjoy a high level of protection under applicable personal data legislation, by promoting the transfer under an adequacy decision of the European Commission or by the application of the standard data contractual clauses of data protection (or similar), approved by the European Commission.

Security Measures

ESDIP developed its best efforts to protect the personal data of Users against unauthorized access. To this end, it uses security systems, rules, and other procedures to ensure the protection of personal data, as well as to prevent unauthorized access to data, improper use, disclosure, loss, or destruction.

Among others, we highlight the following security measures applied by ESDIP:

• Restricted access to your personal data;
• Secure storage and transmission of your personal data;
• Protection of information systems through devices that prevent unauthorized access to your personal data;
• Implementation of mechanisms that guarantee the safeguarding of the integrity and quality of your personal data;
• Permanent monitoring of information systems, with the aim of preventing, detecting, and preventing the misuse of your personal data. 
• Protection of storage, processing, and communication equipment for personal data, to avoid loss of availability.

It is, however, the responsibility of Users to guarantee and ensure that the devices and equipment used to access this website are adequately protected against harmful software, computer viruses and worms.

Links to Other Websites

ESDIP may provide hyperlinks to other websites of interest and are not responsible for the privacy policy or conditions of use of such websites. We recommend that when accessing other websites, you consult all the information and conditions mentioned above.

Updates to the Privacy Policy

ESDIP reserves the right to update this Privacy Policy at any time. Such updates will be duly publicized on the website.

Date of last update: 21 May 2023