Privacy Policy

Last updated: Feb. 9th 2023

This Privacy Notice explains who we are and how we collect, share and use your personal data when you use the website ilsconf.org in accordance with the General Data Protection Regulation (EU) 679/2016. We also give you information on which privacy rights you hold as a data subject and how you may exercise your rights.

1. Name and address of the controller

The controller of the personal data file is:

International Lipidomics Society ry
Irisviksvägen 31D
02230 Esbo
Finland
Website: https://lipidomicssociety.org

References in this notice to “Lipidomics”, “we”, “us” or “our” are references to International Lipidomics Society ry.

Contact person for data protection related matters:
Kim Ekroos
Phone: +358 40 744 8997
Email: contact@lipidomicssociety.org

Please be in contact with the contact person if you have any questions related to data protection at the ilsconf.org website.

2. Personal data processed by ILSCONF

Your personal data is processed by the ILSCONF website when you access the website, register for as a user on the website, register as a conference participant, use the blog function and subscribe to newsletters.

We process the following personal data about you:

• Information about your system, including: the type of your web browser, your operating system, the referrer website, sub-websites, date and time of access, your IP address, your internet service provider, and other similar information.
• Your contact information: your first and last name, e-mail address, telephone number, street address, the organisation you are affiliated with, and your username.
• Your payment information: details concerning your payment method.
• Your subscription information: information concerning your subscription to our newsletter.
• Your activity information: information concerning your activity in the blog section of our website, including your comments and the time and date of their submission, information on whether you have opened the newsletter, when you have opened it and what links of the newsletter have you accessed.

Information about your system and your activity is collected automatically when you access our website/newsletter and, e.g., when you submit a comment on our blog. All other personal data is provided to us by the data subject – you.

The are no other sources of personal data processed in connection with the use of our website.

3. Purposes of and lawful bases for processing

Where the processing is based on an agreement between you and International Lipidomics Society ry, it is not possible to use the services concerned without the provision of the requested personal data.

4. Cookies

The website of the ILSCONF uses cookies. Cookies are text files that are stored in a computer system via an Internet browser. Through the use of cookies, the International Lipidomics Society ry can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

The cookies are stored in your browser based on your consent. You can revoke your consent at any time in your browser settings. Should you choose not to consent to the use of cookies, not all functions of our website may be entirely usable.

Some of our cookies are associated with the analytics service provided by Google. These cookies are used to collect information about how visitors use our website and helps us improve our website. It is not possible to identify specific visitors by the information collected by cookies. For additional information concerning Google Analytics cookies, see https://support.google.com/analytics/answer/6004245.

Please see our Cookie Policy for an overview of the cookies that we use on our website.

5. Retention of personal data

Your personal data is stored only as long as it is necessary for the purposes described above and as long as it is required in order to comply with statutory requirements.

Should you require additional information concerning the retention periods related to personal data, please do not hesitate to contact us at the telephone number or the e-mail address mentioned above.

6. Automated decision-making and profiling

We do not use automatic decision-making or profiling in the processing of personal data.

7. The recipients of personal data

Our website is hosted on the servers of Cloud City Oy, which acts as a processor for all of personal data processed in connection with the use of our website. For the purpose of membership payments, we use Stripe as our payment service provider. For this reason, Stripe receives your contact and payment information when you make a membership payment through our website. We have data processing agreements in place with our contractual partners who process personal data on our behalf to ensure the safe transfer and disclosure of personal data.

Our site has integrated social plugins from Twitter and LinkedIn. If you are logged into Twitter or LinkedIn, some of your personal information will be transferred to these companies (e.g., the information concerning you visiting our website), and the content of the plugins will be customised personally for you. This privacy notice does not cover how Twitter and LinkedIn process your personal data. You can find additional information concerning your privacy in these services below:

• Twitter: https://twitter.com/en/privacy
• Linkedin: https://www.linkedin.com/legal/privacy-policy

To handle the conference registration and payment process, we use ConfTool Pro.

8. Transfers outside the EU/EEA

When submitting your payment information, this information may be transferred by Stripe to the United States based on the EU-US Privacy Shield Framework. You can find more information on the Privacy shield framework here: https://www.privacyshield.gov/welcome.

There are no other transfers of personal data outside the EU/EEA.

9. Rights of the data subject

Under the General Data Protection Regulation, you are granted the rights listed below. The rights granted to you in each specific case depend on the legal basis used for each of the processing activities.

Should you wish to use your rights as a data subject, please be in contact with us and we are happy to assist you further. We may have to request some additional information in order to confirm your identity and fulfil your rights.

1. Right to be informed about the processing – you have a right to be informed about how we store and use your personal data.
2. Right to access personal data – you have a right to obtain information about whether we are processing your personal data. If your personal data is being processed, you have the right to access to your personal data.
3. Right to have inaccurate personal data rectified – should any of your personal data be inaccurate or incomplete, you have a right to have it rectified. If your data has been shared with third parties, we will take reasonable steps to inform them of the rectification, where possible.
4. Right to withdraw data protection consent – you may, at any time, withdraw your consent to processing of your personal data.
5. Right to have personal data erased (the right to be forgotten) – in certain cases, you have a right to request that some of your personal data processed by us is erased.
6. Right to object to processing of personal data –in certain cases, you have a right to object to processing of your personal data being carried out by us (for instance, if we are processing personal data based on legitimate interests).
7. Right to restrict processing of personal data in certain circumstances – in certain cases, you have a right to block the processing of your personal data (for instance, if you are contesting the accuracy of the personal data that is being processed).
8. Right to data portability – in certain cases where you have provided us with your personal data, you can request to receive a copy of your personal data in a commonly used electronic format.
9. Right to lodge a complaint with a supervisory authority – you have  a right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the EU General Data Protection Regulation.