Privacy Policy

This Privacy Policy was last updated on February 5, 2021.

Our Privacy Policy governs the privacy terms of our Website, located at https://sustainability-canvas.com, sub-domains, and any associated web-based and mobile applications (collectively, “Website”), as owned and operated by Collective Futures Ltd.

We have implemented a robust data protection compliance program, which includes the adoption of the high-standard data protection principles of the GDPR at a global level, such as inter alia the adoption of internal policies and procedures to ensure compliance with applicable data protection laws and regulations; and implementation of appropriate technical and organizational measures to implement the data protection principles.

We receive information about You from various sources, including: (i) if You register for the Website and the Services (as defined under the general Terms of Service), through your user account on the Services (your “Account“); and (ii) Your use of the Services generally.

When You use the Services on the Website, You are consenting to this Privacy Policy and to the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, transfer, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction and other uses and processing of Your Personal Information (as defined below), as further detailed under this Privacy Policy and in accordance with its terms, for the purposes of providing You with the Services on the Website and for the other purposes as may be defined under this Privacy Policy.

No processing whatsoever of our personal information shall intervene without our prior written consent and such processing shall intervene in all events in accordance with applicable data protection legislations and regulations. We reserve as well in this regard all our rights and protections as consecrated by applicable data protection legislation and regulations.

We have developed this Policy in order for you to understand how we collect, use, communicate and disclose and make use of personal information. We use your Personal Information only for providing and improving the website. By using the website, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Service, accessible at https://sustainability-canvas.com. The following outlines our privacy policy.

  • Before or at the time of collecting personal information, we will identify the purposes for which information is being collected.
  • We will collect and use personal information solely with the objective of fulfilling those purposes specified by us and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law.
  • We will only retain personal information as long as necessary for the fulfilment of those purposes.
  • We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
  • Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.
  • We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification.
  • We will make readily available to customers information about our policies and practices relating to the management of personal information.

Your Privacy

Collective Futures Ltd. follows all legal requirements to protect your privacy. Our Privacy Policy is a legal statement that explains how we may collect information from you, how we may share your information, and how you can limit our sharing of your information. We utilize the Personal Data you offer in a way that is consistent with this Personal privacy Policy. If you provide Personal Data for a particular reason, we could make use of the Personal Data in connection with the reason for which it was provided. For example, registration info sent when developing your account, might be used to suggest products to you based on past acquisitions. We might use your Personal Data to offer access to services on the Website and monitor your use of such services. Collective Futures Ltd. may also utilize your Personal Data and various other personally non-identifiable info gathered through the Website to assist us with improving the material and functionality of the Website, to much better comprehend our users, and to improve our services. You will see terms in our Privacy Policy that are capitalized. These terms have meanings as described in the Definitions section below.

Definitions

“Non Personal Information” is information that is not personally identifiable to you and that we automatically collect when you access our Website with a web browser. It may also include publicly available information that is shared between you and others.

“Personally Identifiable Information” is non-public information that is personally identifiable to you and obtained in order for us to provide you our Website. Personally Identifiable Information may include information such as your name, email address, and other related information that you provide to us or that we obtain about you.

“Stripe” means:

  1. for any Customer principally located in Europe, Middle East or Africa – Stripe Payments Europe, Ltd., a private company organized under the laws of Ireland with offices at The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland and Stripe Payments UK, Ltd., an English company with offices at 211 Old Street, The Warehouse, 7th Floor, London EC1V 9NR;
  2. for any Customer located principally in the United States – Stripe Inc., a Delaware corporation with offices at 185 Beery Street, San Francisco, CA 94107;
  3. for any Customer located principally in Canada – Stripe Payments Canada, Ltd; and
  4. for any other Customer – Stripe Payments Australia Pty Ltd A.C.N. 160 180 343.

 

Scope of Privacy Policy

This Privacy Policy covers the treatment of personally identifiable information (“Personal Information”) gathered while You are using or accessing the Services on the Website. We may further share Personal Information with Our affiliates for the purposes of providing You with the Services in accordance with the safeguards foreseen in this Privacy Policy.

We value the privacy of Your Personal Information, and we have accordingly addressed, as applicable, the GDPR which grants individuals under its scope of application including individuals in the European Union more control over how their data is used, and it places certain obligations on businesses that process Personal Information of those individuals. We have addressed as well, in an effort to protect the privacy of Your Personal Information, local applicable data privacy laws.

We process the below described Personal Information, in relation to You as the case may be, for as long as necessary for the provision of the Services and for the sole purposes of such provision of the Services.

Information We Collect

Generally, you control the amount and type of information you provide to us when using our Website.

As a Visitor, you can browse our website to find out more about our website. You are not required to provide us with any Personally Identifiable Information as a Visitor.

The information we gather enables us to personalize, improve and continue to operate and provide You the Services. In connection with certain aspects of the Services, we may request, collect and/or display some of Your Personal Information. We collect the following types of information from our users:

Account Information

We collect Personal Information, such as your email address, name, address, when you create an Account to use the Services on the Website. You acknowledge that this information may be personal to You, and by creating an account on the Services and providing Personal Information to us, You allow us to identify You.

Important Notice: When submitting any personal data, including multimedia content (photographs, videos or such other content as Collective Futures Ltd., at its sole discretion, may [reasonably] specify) please ensure it is accurate and do not transmit any content which is not expressly requested through a questionnaire or any other collection method (such as commercial information, advertising, personal creations, ideas, or concepts).

User content

Some features of the Services allow You to provide content to the Services, such as written comments. We may retain all content submitted by You to the Services indefinitely, even after You terminate your Account, unless the content contains Personal Information, in which case we can retain the content for as long as necessary for the provision of the Services or You can request that the content be provided to You and/or be deleted.

Computer Information Collected

When you use our Website, we automatically collect certain computer information by the interaction of your mobile phone or web browser with our Website. Such information is typically considered Non Personal Information. We also collect the following:

    • Cookies
      Our Website uses “Cookies” to identify the areas of our Website that you have visited. A Cookie is a small piece of data stored on your computer or mobile device by your web browser. We use Cookies to personalize the Content that you see on our Website. Most web browsers can be set to disable the use of Cookies. However, if you disable Cookies, you may not be able to access functionality on our Website correctly or at all. We never place Personally Identifiable Information in Cookies. For further information about cookies, please refer to https://www.aboutcookies.org/page/2/.
    • Geographical Information

When you use the mobile application, we may use GPS technology (or other similar technology) to determine your current location in order to determine the city you are located in and display information with relevant data or advertisements. We will not share your current location with other users or partners. If you do not want us to use your location for the purposes set forth above, you should turn off the location services for the mobile application located in your account settings or in your mobile phone settings and/or within the mobile application.

    • Automatic Information

We automatically receive information from your web browser or mobile device. This information includes the name of the website from which you entered our Website, if any, as well as the name of the website to which you’re headed when you leave our website. This information also includes the IP address of your computer/proxy server that you use to access the Internet, your Internet Website provider name, web browser type, type of mobile device, and computer operating system. We use all of this information to analyze trends among our Users to help improve our Website.

    • Log Data

Like many Website operators, we collect information that your browser sends whenever you visit our Website (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Website that you visit, the time and date of your visit, the time spent on those pages and other statistics.

Under the Child’s Online Privacy Security Act, no Website operator can require, as a condition to involvement in an activity, that a child younger than 13 years of age divulge more details than is reasonably required. Collective Futures Ltd. abides by this demand. Collective Futures Ltd. just collects information willingly offered; no information is gathered passively. Children under 13 can submit only their email address when sending us an email in our “Contact Us” area. Collective Futures Ltd. makes use of the email address to respond to a one-time demand from a child under 13 and afterwards deletes the email address. In case Collective Futures Ltd. collects and maintains personal information relating to a child under 13, the parent may send out an email to us to review, alter and/or erase such info as well as to decline to enable any additional collection or use of the child’s information.

Information Disclosure

When You access or use the Services, we collect, use, share, and otherwise process Your Personal Information as described in this Privacy Policy. When You use the Services on the Website, You are consenting to the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, transfer, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction and other uses and processing of your Personal Information, as further detailed under this Privacy Policy and in accordance with its terms. We process Your Personal Information when necessary inter alia.

Some of Your activity on and through the Services is public by default. This may include, but is not limited to, content You have posted publicly on the Website or otherwise through the Services, such as on message boards, in reviews and discussion areas, and within Your public profile page. Thus, such content becomes publicly available and can be collected and used by others.

We do not use Your email address or other Personal Information to send marketing messages unless You’ve opted in to receive such messages. We may, however, use Your email address without further consent for non-marketing or administrative purposes (such as alerting You to messages from other members of the Services, or for customer service purposes).

We shall not disclose Personal Information about You to other individuals or entities without your consent, except as necessary to provide products or Services requested by You including our Services in relation to the requested orders and our Services of conveying those received requested orders, and the preceding shall apply notwithstanding any clause to the contrary contained herein.

We will transfer information about You if we are acquired by or merged with another company. In such instance, We (i) will notify You by email or by putting a prominent notice on the Website before information about You is transferred and becomes subject to a different privacy policy; (ii) reserve the right, in any of these circumstances, to transfer or assign the information already collected from our users as part of such merger, acquisition, sale, or other change of control. However, in the unlikely event of our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may not be able to control how Your Personal Information is treated, transferred, or used.

How We Use Your Information

We use the information we receive from you as follows:

  • Customizing Our Website We may use the Personally Identifiable information you provide to us along with any computer information we receive to customize our Website.
  • Sharing Information with Affiliates and Other Third Parties

We do not sell, rent, or otherwise provide your Personally Identifiable Information to third parties for marketing purposes. We may provide your Personally Identifiable Information to affiliates that provide services to us with regards to our Website (i.e. payment processors, Website hosting companies, etc.); such affiliates will only receive information necessary to provide the respective services and will be bound by confidentiality agreements limiting the use of such information.

  • Data Aggregation

We retain the right to collect and use any Non Personal Information collected from your use of our Website and aggregate such data for internal analytics that improve our Website and Service as well as for use or resale to others. At no time is your Personally Identifiable Information included in such data aggregations.

  • Legally Required Releases of Information

We may be legally required to disclose your Personally Identifiable Information, if such disclosure is (a) required by subpoena, law, or other legal process; (b) necessary to assist law enforcement officials or government enforcement agencies; (c) necessary to investigate violations of or otherwise enforce our Legal Terms; (d) necessary to protect us from legal action or claims from third parties including you and/or other Members; and/or (e) necessary to protect the legal rights, personal/real property, or personal safety of Collective Futures Ltd., our Users, employees, and affiliates.

Information Sharing

We may contract with various third parties who help us provide and maintain the Website or the Services (our “Agents”). In this respect, we may need to share Personal Information with our Agents in order for us to provide products or Services to You. Unless we inform You otherwise, our Agents do not have any right to use Personal Information or other information and we solely share with them what is necessary to assist us. Where such Agents are appointed, we shall bind them to contractual provisions providing data protection obligations identical to those contained herein including providing sufficient guarantees to implement appropriate technical and organizational security measures. You hereby consent to our sharing of Personal Information with our Agents for the above purposes. We will use commercially reasonable efforts to prevent such third parties from disclosing Your Personal Information.

Subject to the other terms of this Privacy Policy, we limit access to Personal Information about You to Our personnel on a strict need-to-know basis for purposes of providing products or Services to You and for them to properly execute their scope of work. You hereby consent to our sharing of Personal Information with our employees for the above purposes. In the event Your data is transmitted to any data processor acting on behalf of Us in the management of the Website, We shall use only processors providing sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing will meet the requirements of the GDPR and ensure the protection of Your rights.

Stripe

Our payment provider, Stripe, is a technical services provider [and may offer the services as an agent of one or more financial institutions in the United Kingdom (each, a “Financial Services Provider”)]. The processing and settlement of Transactions (as defined below) (“Payment Processing”) is carried out by Stripe [and any of the Financial Services Providers] under [a separate Stripe Connected Account Agreement, including] the Stripe Services Agreement [- Hungary] [and the applicable Financial Services Terms, and to the extent you use a payment method that is subject to additional terms, the Payment Terms] ([collectively, ]the “Stripe Terms”). By consenting to this Privacy Policy, you are also accepting and agreeing to be bound by the Stripe Terms, which is the legal agreement between you and Stripe.

Collective Futures Ltd. is not a party to the Stripe Terms and is not liable to you in respect thereof. By consenting to this Privacy Policy and the Stripe Terms you are agreeing to the creation of an account with Stripe for Payment Processing (the “Stripe Account”). We reserve the right to replace Stripe with a new payment provider in our sole discretion, subject to the terms of our agreement with Stripe. In the event of any inconsistency between this Privacy Policy and the Stripe Terms, this Privacy Policy shall prevail, except in the event of any inconsistency between this Privacy Policy and the Stripe Terms concerning Payment Processing or the Stripe Account, in which case the Stripe Terms shall prevail.

Stripe’s role is to accept and process credit card, debit card and other types of payments (collectively “Cards”) with respect to our provision of the Services (“[Card Not Present ]Transactions”[ or “CNP Transactions”]). [If applicable, POS Equipment permits transmission of data to Stripe from in-person, point-of-sale transactions (“Card Present Transactions” or “CP Transactions”), as well as manually entered transactions (“Keyed Transactions”). CNP Transactions, CP Transactions and Keyed Transactions shall be referred to herein, collectively, as “Transactions”.]

Links to Other Websites

Our Website may contain links to other websites that are not under our direct control. These websites may have their own policies regarding privacy. We have no control of or responsibility for linked websites and provide these links solely for the convenience and information of our visitors. You access such linked Websites at your own risk. These websites are not subject to this Privacy Policy. You should check the privacy policies, if any, of those individual websites to see how the operators of those third-party websites will utilize your personal information. In addition, these websites may contain a link to Websites of our affiliates. The websites of our affiliates are not subject to this Privacy Policy, and you should check their individual privacy policies to see how the operators of such websites will utilize your personal information.

Security

Your Account information is password-protected and thus You need to prevent unauthorized access to Your Account and Personal Information by selecting and protecting Your password appropriately and limiting access to Your device and browser by signing off after You have finished accessing your Account.

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100 per cent secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. We utilize practical protection measures to safeguard against the loss, abuse, and modification of the individual Data under our control. Personal Data is kept in a secured database and always sent out by means of an encrypted SSL method when supported by your web browser. No Web or email transmission is ever totally protected or mistake cost-free. For example, email sent out to or from the Website may not be protected. You must take unique care in deciding what info you send to us by means of email.

Exercise of Rights

A right of access and information: You have the right to be informed in a concise, transparent, intelligible and easily accessible form of the way in which Your Personal Information is processed including of the identity and the contact details of the data controller as applicable and, where applicable, of the controller’s representative; the contact details of the data protection officer, where applicable; the purposes of the processing for which Your personal data are intended as well as the legal basis for the processing;  the recipients or categories of recipients of the Personal Information, if any; where applicable, the fact that We or the Data Controller as defined under the GDPR intends to transfer Personal Information to a third country; and the period for which the Personal Information will be stored, or if that is not possible, the criteria used to determine that period. You also have the right to obtain (i) confirmation as to whether or not Personal Information concerning You are being processed, and, where that is the case, the purposes of such processing, the object of the processing and its nature, the categories of Personal Information concerned, the categories of recipients of the data or of those who have access to the data, and the period for which the data is stored. Typically Your Personal Information will be stored as long as Your Account exists on the Website, and as long as necessary for the purposes of providing You with the Services; and (ii) to access such Personal Information and obtain a copy thereof.

A right to rectification: You have the right to obtain the rectification of Your Personal Information without undue delay and in all events in accordance with the timeframes as set by the applicable laws. You also have the right to have incomplete Personal Information completed. Accordingly, You agree that it is Your responsibility to notify Us of this fact at the below indicated mean of communication to supply Us with the accurate or complete information to enable Us to address Your concerns accordingly.

A right to erasure: You have the right to obtain the erasure of Your Personal Information including whereby, in accordance with the GDPR, the Personal Information are no longer necessary in relation to the purposes for which it was collected or otherwise processed, You withdraw Your consent on which the processing is based and where there is no other legal ground for the processing; You object to the processing in accordance with the GDPR and there are no overriding legitimate grounds for the processing; Your Personal Information has been unlawfully processed; the Personal Information have to be erased for compliance with a legal obligation. Where applicable, in accordance with the relevant jurisdiction, You shall have the right to obtain the erasure of Your Personal Information whereby the information becomes obsolete or is incompatible with the purposes of the processing or is prohibited to be processed, collected, used, stored or transferred. However, the right to erasure is not an absolute right and may have legal or legitimate grounds for keeping such Personal Information in accordance with the GDPR and applicable Laws.

A right to restriction of processing: In accordance with the GDPR, You shall have the right to obtain restriction of processing including where the accuracy of Your Personal Information is contested by You, for a period enabling Us to verify the accuracy of the Personal Information; and where the processing is unlawful and You oppose the erasure of the Personal Information and requests the restriction of its use instead.

A right to data portability: You have the right to receive Your Personal Information which You have provided, in a structured, commonly used and machine-readable format, and You have the right to transmit those data to another controller without hindrance. This right, under the terms of the GDPR, only applies when the processing of Your Personal Information is based on Your consent or on a contract and such processing is carried out by automated means.

A right to object to processing: In accordance with the terms of the GDPR, You have the right to object to processing of Your Personal Information which is based on the legitimate interests pursued by us or by a third party or which is necessary for the performance of a task carried out in the public interest. We may, however, invoke compelling legitimate grounds for continued processing. You also have the right to object at any time to the processing of Your Personal Information for marketing purposes. Where applicable, in accordance with any relevant Law as applicable, the right to object is not absolute, and You may not exercise Your right to object whereby the We are compelled by law to collect the Personal Information and whereby You have consented to the processing of Your Personal Information.

A right to withdraw Your consent:  In accordance with the GDPR, where applicable, You shall have the right to withdraw Your consent to processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on Your consent before its withdrawal.

To exercise the above rights please contact us as indicated below and communicate the following information: name, surname, e-mail or any other information necessary to confirm your identity in order for us to process the request (such as your postal address).

You can delete your Account at any time. Please note in this respect that (i) Your identification and contact information may however remain in Our records for a period oftwo years; (ii) any association between Your Account and information we store will no longer be accessible through Your Account; and (iii) any public activity on your Account prior to deletion may remain stored on our servers and may remain accessible to the public unless removed pursuant to Your request.

Finally, You have the right to lodge a complaint with the competent supervisory authority in case of breach of the GDPR, as applicable to You. 

Opt-Out

We offer you the chance to “opt-out” from having your personally identifiable information used for particular functions, when we ask you for this detail. When you register for the website, you can show your preference on opting-out if you do not want to receive any additional material or notifications from us by identifying that at the registration form.

Privacy Policy Updates

We reserve the right to modify this Privacy Policy at any time. You should review this Privacy Policy frequently. If we make material changes to this policy, we may notify you on our Website, by a blog post, by email, or by any method we determine. The method we chose is at our sole discretion. We will also change the “Last Updated” date at the beginning of this Privacy Policy. Any changes we make to our Privacy Policy are effective as of this Last Updated date and replace any prior Privacy Policies.

Third Party Privacy Policies

Our third party payment partner asks us to make you aware of their privacy policy. Such policy is available at https://stripe.com/gb/privacy. 

Contact Us

We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained. If you have any questions about our Privacy Practices or this Policy, please contact us by filling out the contact us form at our website



The 4D Sustainability Canvas and Framework is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.

imagem_2021-02-03_114635
en_GBEnglish