Privacy Policy

Who we are

We are ECSB, the European Council for Small Business and Entrepreneurship. Our registered address is University of Turku, School of Economics, 20014 University of Turku, FINLAND.

You can contact us at info@ecsb.org .

The ECSB Executive Secretary, is ECSB’s data protection representative. To contact the secretary, please email info@ecsb.org.

The purpose of our data processing.

We process personal data for the following purposes:

  • To store and manage your data if you book a place on one of our events
  • To send you material and information related to our events such as abstracts and papers of our conferences and manage review processes
  • To store your data so we can send you ECSB-specific emails
  • To store your data so we can send you information on our co-branded and partner organisations’ events
  • To store your data when you become a member of ECSB
  • To process payments for events and membership
  • To build surveys that we invite you to complete

We only share your data with our international organisation ICSB (International Council for Small Business) and our data partners (Mailchimp for sending you our newsletters; SoftConf and EAISM Conference systems for managing submissions and conference registrations; Zoom for ECSB online webinars; WordPress for membership registrations on the ECSB website; PayPal and Ålandsbanken for processing payments; and Webropol for feedback surveys, ECSB elections, etc), so we can manage your relationship with ECSB; we do not share your data with any other third parties.

For more information on ICSB and ICSB data policy see the ICSB website at www.icsb.org.

The lawful basis for ECSB’s data processing.

We process personal data by consent.

Consent means offering individuals real choice and control. Anyone whose data we store and process must have given clear and specific notification to us that they wish to ‘opt in’ to use our services.

We keep consent under review, and refresh it if anything changes.

Transfer of personal data to any third countries or international organisations.

Some of our partners, like Mailchimp and our international organisation ICSB, are located in the United States. This means that it is possible that ECSB data might reside on servers based in the United States, and accessed by ECSB remotely.

Retention periods for personal data.

We retain your data until you tell us that you would like us to remove it from our records or until your ECSB membership expires.

Your rights regarding your data and ECSB

Your right of access to your personal information

You have the right to request confirmation that your data is being processed and access to your personal data that we hold.

You can request this information from us by emailing us at info@ecsb.org.

There is no charge for the supply of this information. However, we reserve the right to charge a reasonable fee when a request is manifestly unfounded or excessive, particularly if it is repetitive. We may also charge a reasonable fee to comply with requests for further copies of the same information. The fee is based on the administrative cost of providing the information.

Once requested, we will verify the identity of the person making the request using reasonable means, and information will be provided without delay and at the latest within one month of receipt. Where requests are complex or numerous, we may extend this period of compliance by a further two months. If this is the case, we will inform you within one month of the receipt of the request and explain why the extension is necessary.

You can also access your own information by clicking ‘Update subscription preferences’ on any of our Mailchimp mailings.

Your right to rectification

You have the right to have inaccurate personal data rectified, or completed if it is incomplete.

You can update your own information by clicking ‘Update subscription preferences’ on any of our Mailchimp mailings.

Or you can email us at info@ecsb.org and we will respond within one calendar month to your request. Where requests are complex or numerous, we may extend this period of compliance by a further two months. If this is the case, we will inform you within one month of the receipt of the request and explain why the extension is necessary.

There is no charge for data rectification. However, if the request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee for the administrative costs of complying with the request.

Your right to erasure

You have the right to have the personal data that ECSB hold erased from our records. This is also known as ‘the right to be forgotten’.

If you would like us to erase all your personal data from our records, you can email us at info@ecsb.org and we will respond within one calendar month to your request. Where requests are complex or numerous, we may extend this period of compliance by a further two months. If this is the case, we will inform you within one month of the receipt of the request and explain why the extension is necessary.

There is no charge for data erasure. However, if the request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee for the administrative costs of complying with the request.

Your right to restrict our processing of your personal data

You have the right to request the restriction or suppression of the personal data that we store. This may be because you have issues with the content of the information that we hold or how we have processed your data. In most cases, this does not require us to restrict your personal data indefinitely, but does mean that we will need to have the restriction in place for a certain period of time.

This is not an absolute right and only applies in certain circumstances. When processing is restricted, this means that ECSB is permitted to store your personal data, but not use it.

If you would like us to restrict the processing of your personal data, you can email us at info@ecsb.org and we will respond within one calendar month to your request. Where requests are complex or numerous, we may extend this period of compliance by a further two months. If this is the case, we will inform you within one month of the receipt of the request and explain why the extension is necessary.

There is no charge for data restriction. However, if the request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee for the administrative costs of complying with the request.

Your right to data portability

The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.

If you would like us to provide your data in a structured, commonly used and machine-readable form, you can email us at info@ecsb.org and we will respond within one calendar month to your request. Where requests are complex or numerous, we may extend this period of compliance by a further two months. If this is the case, we will inform you within one month of the receipt of the request and explain why the extension is necessary.

There is no charge for data portability exports. However, if the request is manifestly unfounded or excessive, we reserve the right to charge a ‘reasonable fee’ for the administrative costs of complying with the request.

Further Support

If you have any concerns about the way that ECSB stores and manages your data, please do not hesitate to get in touch with us at info@ecsb.org .