GDPR Compliance Policy

Introduction: CARAVANE-Climate Art Fusion is committed to protecting the personal data of its participants, staff, and collaborators in accordance with the General Data Protection Regulation (GDPR) adopted by the European Union. This policy outlines the principles and responsibilities necessary to ensure compliance with the most updated GDPR requirements.

Scope: This policy applies to all personal data processed by CARAVANE-Climate Art Fusion, including data collected through our website, during project activities, and through any other interactions involving the collection of personal data within the EU and beyond, as applicable.

Data Protection Principles: CARAVANE-Climate Art Fusion adheres to the following GDPR principles:

  1. Lawfulness, Fairness, and Transparency: Data processing will be lawful, fair, and transparent to the data subject.
  2. Purpose Limitation: Data will be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
  3. Data Minimization: The collection of data will be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
  4. Accuracy: Personal data will be accurate and, where necessary, kept up to date.
  5. Storage Limitation: Personal data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  6. Integrity and Confidentiality: Data will be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Rights of Data Subjects: Data subjects have the following rights under GDPR:

  • The right to access their personal data
  • The right to be informed about how their data is being used
  • The right to rectification if their data is inaccurate or incomplete
  • The right to erasure (to be forgotten) in certain circumstances
  • The right to restrict processing
  • The right to data portability
  • The right to object to processing
  • The right not to be subject to automated decision-making including profiling

Data Collection and Consent: Personal data will only be collected with the explicit consent of the data subject, except where another legal basis for processing is applicable. Consent will be obtained in a clear and accessible form, outlining the purpose for data collection and processing.

Data Security and Breach Notification: CARAVANE-Climate Art Fusion employs robust security measures to protect personal data. In the event of a data breach, CARAVANE will promptly notify the appropriate data protection authorities and, if the breach poses a high risk to the rights and freedoms of individuals, the affected data subjects will also be informed.

Data Protection Officer (DPO): CARAVANE has appointed a Data Protection Officer (DPO) to oversee compliance with this policy and GDPR regulations. The DPO can be contacted for all matters related to personal data protection and compliance.

Training and Awareness: All staff and volunteers involved in data processing are required to undertake training to understand GDPR requirements and ensure the policy is upheld across all activities.

Review and Updates: This policy will be reviewed annually and updated as necessary to ensure ongoing compliance with GDPR and any changes in EU data protection laws.

Contact Information: For any inquiries related to this policy or personal data protection, please contact our Data Protection Officer at [DPO’s Contact Information].

This GDPR Compliance Policy ensures that CARAVANE-Climate Art Fusion remains committed to protecting personal data and upholding the rights of all individuals in accordance with EU regulations.