Privacy Policy
This policy explains what personal data is collected on idippa.org, why it is collected, and the rights you have over it.
Who we are
This website is operated by IDIPPA — the International Digital Product Passport Alliance, an international association of Digital Product Passport service providers. IDIPPA is the data controller for the personal data described in this policy. For any question about this policy or your data, contact us at info@idippa.org.
What data we collect
Membership application form: company name, country, contact person, title or role, e-mail address, phone number, website, and a description of the DPP services you provide.
Newsletter subscription: your e-mail address.
Correspondence: if you write to us directly, we process the contact details and content of your message.
Why we process it, and on what legal basis
Membership applications are processed to evaluate your application and manage the membership relationship — Article 6(1)(b) of the GDPR (steps prior to entering into an agreement).
Newsletter subscriptions are processed on the basis of your consent — Article 6(1)(a) of the GDPR. You can withdraw consent at any time using the unsubscribe link in every e-mail.
Correspondence is processed on the basis of our legitimate interest in responding to you — Article 6(1)(f) of the GDPR.
We do not collect special category data (such as political or philosophical beliefs, racial or ethnic origin) through this website, and we do not sell personal data.
Where your data is stored
Application and subscription data is stored in the alliance's database and is accessible only to authorised persons. Our service providers are: Vercel (website hosting), MongoDB Atlas (database) and Brevo (e-mail delivery). These providers process data on our behalf under their own data-processing agreements.
How long we keep it
Membership application data is kept for the duration of the evaluation and, if the application is successful, for the duration of the membership relationship. Newsletter data is kept until you unsubscribe. You can request deletion of your data at any time.
Cookies
idippa.org does not use advertising or third-party analytics cookies. Only technically necessary cookies and settings — such as your language preference — may be stored by the site.
Your rights
Under Articles 15–21 of the GDPR you have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, to receive it in a portable format, and — where processing is based on consent — to withdraw that consent at any time.
To exercise any of these rights, write to info@idippa.org with enough information for us to identify you and your request. We aim to respond within one month.
You also have the right to lodge a complaint with a data protection supervisory authority.
Changes to this policy
Any changes to this Privacy Policy will be posted on this page, so that you always know what information we collect and how we use it.