Privacy Policy

Version 1.0-draft

1. Data controller

The controller of personal data is the ESOSH association (European Society of Occupational Safety & Health), “ESOSH”, “we”. Contact for privacy requests: office@esosh.net.

2. Data we process

Depending on how you use the site, we may process:

identity and contact details (name, email, phone, organisation, role);
messages submitted via the contact form;
membership / enrolment application data and supporting files;
technical data (IP, browser type, cookies as described in the Cookie Policy);
communications data via third-party widgets (e.g. Binotel) if you consent;
data from the third-party YouTube player on training pages if you consent to the Marketing category.

3. Purposes and legal bases

We process data to operate the website; respond to enquiries; review membership applications; maintain the member register; pursue the association’s statutory aims; and protect security. Legal bases may include consent, performance of a contract / membership relationship, legitimate interests, and legal obligations under Ukrainian law (and, where applicable, the GDPR for individuals in the EEA).

4. Recipients and international transfers

Infrastructure providers may include Vercel, Neon and Vercel Blob. Email notifications may use a provider such as Brevo. Contact form submissions may be forwarded via a configured webhook. Binotel widgets load only after consent to the Communications category. The YouTube player on training pages loads only after Marketing consent. Processor agreements (DPAs) are concluded separately. Transfers outside Ukraine / the EEA rely on the safeguards offered by those providers.

5. Retention

Contact messages are kept for as long as needed to reply and keep records (indicatively up to 24 months unless law requires longer). Applications and membership data are kept for the review period and membership relationship, then per the association’s archiving policy.

6. Your rights

You may contact office@esosh.net to request access, rectification, erasure, restriction, objection, withdrawal of consent, and data portability where applicable. You may also lodge a complaint with a supervisory authority in your jurisdiction.

7. Children

The site is not directed at children under 16. We do not knowingly collect their data. If you believe a child has submitted data, email office@esosh.net.

8. Cookies

See the Cookie Policy for details.

9. Changes

We may update this policy. The current version is published on this page with an updated version number. Material changes may require renewed consent where needed.