This document applies to platform.fashionkic.eu.
Scope
This Privacy Policy applies to the FashionKIC digital platform at platform.fashionkic.eu, including account registration, professional profiles, community discussion, member communication, collaboration and file-sharing features.
The main FashionKIC project website has a separate privacy notice covering its own activities.
Joint Data Controllers and contact
INFOLYSIS P.C. (Technical Partner and Platform Operator) and Envolve Entrepreneurship (Project Coordinator) jointly determine the purposes and essential means of processing personal data for the digital platform.
Summary of the joint controllers' agreed responsibilities
- Envolve coordinates privacy information, incoming data-subject requests and communications with requesters.
- INFOLYSIS manages the platform's technical operations, infrastructure, security, access controls, backups and verified technical deletion or export actions.
- Both organisations approve key decisions concerning purposes, lawful bases, access policies and appropriate safeguards, and coordinate the handling of data-protection incidents and GDPR obligations.
This summary describes the essence of their joint-controller arrangement under Article 26 GDPR. It does not limit a person's right to contact or exercise rights against either controller.
Personal data processed
Depending on how you use the platform, the following categories of data may be processed:
- Account information: name, email address, account identifier, password in protected form, registration and verification status.
- Professional profile information: organisation, role, country, professional interests, profile images and information voluntarily added to your profile.
- Community and collaboration content: posts, comments, messages, shared files and participation in projects or discussions.
- Technical and security information: login/session identifiers, IP addresses, access times and technical records necessary to operate and protect the service.
- Communication details: email address and information needed to deliver account-related notifications and respond to enquiries.
Required registration fields are needed to establish and use an account. Other profile information is provided at the user's choice, subject to the fields available in the platform.
Purposes and legal bases
| Purpose | Legal basis under the GDPR |
|---|---|
| Registration, authentication, profiles, and providing member and collaboration functions | Article 6(1)(b): processing necessary to provide the agreed platform service |
| Maintaining security, preventing misuse and protecting platform and community integrity | Article 6(1)(f): legitimate interests in operating a secure and reliable service |
| Handling GDPR requests and complying with binding legal obligations | Article 6(1)(c): compliance with legal obligations |
Where processing relies on legitimate interests, those interests are balanced against the rights and freedoms of individuals. Where any additional processing requires consent, that consent will be requested separately.
Who can see your information
Platform member features are restricted to authenticated users. This means information shared within the community is not intended to be publicly accessible to signed-out visitors.
Other signed-in members may see content you make available through profiles, forum posts or comments, depending on the relevant feature and its permissions. Shared project materials and messages are accessed according to the permissions of the relevant feature. Do not upload confidential information or personal data about others unless you are permitted to share it.
Authorised platform personnel may access information where reasonably necessary for technical support, security, moderation or lawful data-subject requests.
Account life cycle and deletion
Account and profile data is retained for as long as the account remains active and its processing is necessary for the platform's purposes.
You can delete your account yourself from your profile page. When an account is deleted, the platform erases or anonymises associated personal data as applicable. Some records may need to remain for a limited period where required by law, necessary for platform security, or where other users' legitimate interests must be considered.
Where content is retained in anonymous form, it must no longer identify the former account holder. The joint controllers can provide additional information about the criteria applying to a particular record upon request.
Protecting personal data
INFOLYSIS operates the platform infrastructure in Greece. The joint controllers apply technical and organisational safeguards appropriate to the risks, including account authentication and access management. No internet-connected service can guarantee absolute security.
If you suspect unauthorised access involving your account, contact privacy@fashionkic.eu.
Your rights
Subject to the conditions set out in the GDPR, you can request access to your personal data, correction, deletion, restriction of processing or portability, and object to processing based on legitimate interests. Where consent is used, you may withdraw it at any time without affecting earlier lawful processing.
To exercise a right, email privacy@fashionkic.eu. The controllers may ask for information needed to verify the requester's identity. Requests are generally answered within one month, subject to extensions permitted by law.
You may lodge a complaint with a competent supervisory authority, including the Hellenic Data Protection Authority.
Changes and contact
We may update this notice if the platform's services, data-processing practices or legal obligations change. The revision date displayed above indicates when this text was last updated.
Questions about this notice and requests under data-protection law can be sent to privacy@fashionkic.eu.