This privacy notice describes how Fashion Alliance for Integrity, Rights & ethics (hereinafter “FAIRe”, “we”, “us”) collects and uses personal data. This privacy notice is intended for any former or current member of FAIRe (hereinafter “Members”) as well as any visitor to the website (collectively referred to as “you”).

1. DATA CONTROLLER

   FAIRe is responsible for the processing of personal data we have obtained from you or about you and making sure it’s processed in accordance with the data protection legislation. In accordance with the applicable regulations on the protection of personal data, FAIRe is the “data controller”.
   Fashion Alliance for Integrity, Rights & ethics
   
VAT: DK33060009
   
Aaboulevarden 52, 3rd floor

   8000 Aarhus C
   
Denmark
   
[email protected]
    
   1.1 Contact
   Should you have any questions or concerns regarding the processing of your personal data, you are more than welcome to contact us at [email protected].  
    
   You are welcome to contact us using one of the following languages: Danish, English, Norwegian, Swedish, or German.
    
   We will respond to your inquiry as quickly as possible. We strive to answer all inquiries as quickly as possible and no later than within 1 month.
    
   We request that, in connection with inquiries regarding your rights as described in section 5, you provide us with sufficient information to process your inquiry, including your full name and email address, so that we can identify you and respond to your inquiry.
    
2. INFORMATION COLLECTED, THE PURPOSE OF DATA PROCESSING AND THE LEGAL BASIS
   We process personal data directly provided by you. Furthermore, we also receive technical data from analytical third-party providers, regarding your visit to our website.
    
   We process personal information about you in a variety of different situations. Please read below for further details on our processing in these various situations.
    
   2.1 Visitors to the website
   When you visit our website, we may process information about your IP address as well as information about your computer, device, and browser. We may also process information about your visit (e.g., information about how you accessed our website, how you navigate it, which pages you visit). This information is collected through cookies, log files, google analytics and other technologies.
    
   We may also process data that you provide to us in connection with your use of the website, such as when you fill out the declaration of acceptance, including your (company/organization) name, email address, title, and any other information you provide to us.
    
   We use the information to make relevant services available to you and to improve the functionality of the website.
    
   Failure to provide the requested information may impact the functionality of our website for you.
    
   You can read more about the use of cookies in our cookie policy[DR1] .
    
   Our legal basis for processing is our legitimate interests, cf. GDPR Article 6.1.f or your consent, cf. GDPR Article 6.1.a.
    
   2.2 Newsletters
   We use personal data for marketing purposes, which includes sending newsletters. Additionally, we process your information for the purpose of creating and managing your subscription to marketing materials.
    
   When you subscribe to our newsletters, we process information such as your name and (work-)email address. We also process information about your use of the marketing materials we send to you.
    
   You will be able to receive newsletters from us if you are an existing Member. However, we only send newsletters to you via email when we have obtained your consent to do so.
    
   When you subscribe to our newsletter, you give us consent to process your personal information, cf. GDPR Article 6.1.a and the Danish Marketing Act § 10, solely for the purpose of receiving newsletters and marketing materials. You can withdraw your consent at any time by unsubscribing from the newsletter, cf. GDPR Article 7.3, which can be done by clicking the “Unsubscribe” link at the bottom of the newsletter. Your information will then be deleted unless we have another legal basis that allows us to continue processing the personal information.
    
   Our legal basis for processing is your consent, cf. GDPR Article 6.1.a and the Danish Marketing Act § 10.
    
   2.3 Members
    When you become a Member by joining the association, we process personal information such as your (company/organization) name, email address, title, and VAT-number where applicable, as well as any other information you provide to us.
    
   We process your information to manage the operations of the association, including handling membership registrations, invoicing and the administration of any potential sanctions.
    
   Additionally, your contact information is processed to allow us to contact you, and your (company/organization) name is publicly displayed on the website so that anyone can see which signatories have joined the association.
    
   Our legal basis for processing is the agreement with you, cf. GDPR Article 6.1.b and/or our legitimate interests, cf. Article 6.1.f.
    
    
   2.4 Other situations
   In connection with FAIRe’s development, the organization structure may change, for example, through a complete or partial transfer of the association. In the event of a partial transfer of assets that include personal data, the legal basis for the associated disclosure of personal data is primarily GDPR Article 6.1.f, as FAIRe has a legitimate interest in transferring parts of its assets and making commercial changes.
    
   Personal data that we have collected for the purposes described in the other points of section 2 may also be processed to comply with laws and regulations to which we are subject in connection with the operation of our association, or to fulfill various reporting or disclosure obligations under applicable laws and regulations, cf. GDPR Article 6.1.c.
    
   For certain data processing activities within FAIRe, there are independent specific privacy notices:
   ·       Privacy notice for FAIRe’s social media profiles.
3. TRANSFER OF DATA
   In certain cases, we may share your personal data with third parties, including:
    
   1.         Internal Third Parties:
   Your personal data may be shared within our organization, including our departments who require access to your data for the purpose of providing our services.
    
    

2.         External Third Parties:
We may also disclose your personal data to external third parties, if required by law or as part of the services we provide to you. This includes authorized third-party service providers who assist in facilitating and delivering our services and need access to your personal data to contact and process transactions with you (e.g., banks and payment processors); service providers acting as processors who provide IT and system administration services; respective authorities and/or professional advisers acting as sub-operators including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services as required.
  
In some cases, we might transfer your personal data to third parties in countries outside the EU/EEA, where necessary. 
 
Transfer of personal data to third countries takes place within the framework of chapter 5 in the General Data Protection Regulation, meaning that such transfers will only happen: 
·       towards third countries, one or more specific sectors within a third country, or international organizations for which the European Commission deems that an adequate level of protection of personal data is in place; or 
·       if the recipient of the data obtained an appropriate certification or adhered to a specific code of conduct ensuring that the processing of personal data is appropriate and equal to those provided under EU law; or 
·       if the recipient implemented appropriate standard contractual clauses, prepared by the European Commission or prepared by the national Data Protection Agency and approved by the European Commission. 
·       in accordance with Article 49.1.b-e.
 

4. STORAGE OF YOUR PERSONAL DATA
    We store your data for the above purposes, securely and in compliance with the provisions of the applicable laws. 
    
   We limit access to your personal data to those individuals and other third parties who have a strict business need to know your data.  
    
   We only store your data for the duration necessary to fulfill the purposes for which it was collected or to comply with the contractual, legal, or reporting obligations and observing the retention periods stated by the applicable laws.  
   Accordingly, we anonymize and/or delete your personal data once it’s no longer necessary to achieve the purpose for which it was collected. 
    
   Personal data related to newsletters and marketing is retained as long as you remain subscribed and/or as long as you are a Member of FAIRe. Upon unsubscribing or termination of your membership, the data will be deleted no later than two (2) years thereafter to document the consent provided. This retention period is based on FAIRe’s legitimate interest in being able to document that direct marketing activities have been conducted in compliance with applicable laws.
    
   Information collected in connection with your membership is retained for as long as you are a Member.
   Upon termination of the membership, the data will be stored for an additional period of one (1) year.
    
   Personal data included in accounting records is retained for five (5) years from the end of the financial year, after which the data is deleted. The retention period is established based on the retention requirements of Section 10 of the Danish Bookkeeping Act and is therefore intended to comply with applicable legislation.
    
    
    
5. YOUR RIGHTS
    According to the General Data Protection Regulation (GDPR), and the relevant data protection law you are entitled to exercise the rights as applicable to the specific processing situation. If you wish to exercise your rights, please contact us.
   Your rights include the following:
   ·       The right to request access to your personal data: You have the right to access the personal data we process about you.
   ·       The right to rectify your personal data: You have the right to have incorrect personal data about you rectified and incomplete personal data completed.
   ·       The right to erasure of your personal data: In certain circumstances, you have the right to have personal data about you deleted before the time we normally delete your information.
   ·       The right to restriction of processing: In certain circumstances, you have the right to restrict the processing of your personal data. If you have the right to restrict processing, we may only process the data – except for storage – with your consent, or for the establishment, exercise, or defense of legal claims, or to protect a person or important public interests.
   ·       The right to data portability: In certain circumstances, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have these personal data transferred from one data controller to another.
   ·       The right to object against the processing of your personal data: In certain circumstances, you have the right to object to our processing of your personal data, and always if the processing is for direct marketing purposes.
    
   If the processing is based on your consent, you have the right to withdraw your consent at any time. This can be done by contacting us at the above email address. Withdrawal of your consent will not have any negative impact. However, it may mean that we can no longer fulfill specific requests from you in the future. Withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal. Furthermore, it will not affect any processing carried out on another legal basis.
   You have the right to file a complaint with the competent supervisory authority, which in Denmark is “The Danish Data Protection Authority” (Datatilsynet) at (+45)33193200 or [email protected]. More information can be found here: www.datatilsynet.dk
6. LINKS TO OTHER WEBSITES AND SOCIAL MEDIA
   On our website, there are links to other websites or to integrated websites. FAIRe is not responsible for the content of other companies’ websites or for their practices regarding the collection of personal information.
   When you visit other websites, you should always read the website’s privacy policy and other relevant policies.
   At the bottom of our website, you will find a link that directly references to FAIRe’s profiles on the respective platforms, specifically Instagram.
   Please be aware that when you use this link, your data, including cookies and search history, may be shared with the respective platform provider. For example, if you use the link for direct access to FAIRe’s Instagram profile, your data will be shared with Meta, the provider of Instagram. Note that these providers are considered independent data controllers. This means that FAIRe does not have authority over the data processed by these providers. If you have questions about how any of these providers handle your personal data as a result of using these links or similar, please refer to the provider’s privacy policy or contact the provider directly.
   You may choose to opt out of tracking at any time. This can be done here.
    
    
7. REVISION OF OUR PRIVACY NOTICE
    We keep our privacy notice under regular review and thus, the notice may be subject to changes from time to time. The date of the latest revision of the privacy notice can be found on the bottom of this page. Any new, modified, or amended privacy notice will apply as per the revision date. Therefore, we encourage you to periodically review this statement to be informed about how we are protecting your information.
    
   Revision date: 08.05.2025
    [DR1]https://faireproject.com/cookie-policy/
    [DR2]https://faireproject.com/privacy-notice-social-media/