RemoteByDefault.eu

Last updated: 18 August 2026

Privacy Policy

At remotebydefault.eu, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, apply to become an organiser, or otherwise interact with our campaign for a European Citizens' Initiative (ECI) on remote work.

We process all personal data in strict compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

There is not yet a registered NGO or legal entity for this campaign. Once one is established, this policy will be updated to reflect the new controller details.

2. The Data We Collect

A. When you browse the website

Technical data: we automatically collect your IP address, browser type (for notification functionality), and approximate location (for automatic localisation), and first-party cookies strictly necessary to ensure website functionality and security. We do not use third-party cookies.

B. When you submit the organiser application form

  • Identity data: first name, last name
  • Contact data: email address, phone number
  • Demographic data: nationality (EU) and country of residence (EU)
  • Collaboration text: your free-text answer about how you would like to contribute (optional)

3. Why We Process Your Data

  • Campaign coordination: to identify, verify, and coordinate volunteers and organisers across EU Member States, as required to establish the official ECI organising committee.
  • Communication: to send you updates and mobilisation alerts regarding the progress of the Remote by Default ECI, if you specifically consented.
  • Legal compliance: to fulfil the administrative and verification requirements established by the European Commission for registered ECIs.

4. Legal Basis for Processing

  • Explicit consent (Art. 6(1)(a) GDPR): you provide explicit, unambiguous consent when you check the consent box on the organiser form.
  • Legal obligation (Art. 6(1)(c) GDPR): we will process your data when the law requires it.
  • Legitimate interests (Art. 6(1)(f) GDPR): for network and information security purposes, to the extent strictly necessary and proportionate.
  • Special category data (Art. 9(2)(a) GDPR): because indicating support for a labour-reform campaign may reveal political opinions or trade-union-adjacent interests, we process this data only with your explicit, documented consent, which you may withdraw at any time.

5. How We Store and Protect Your Data

  • All personal data is hosted on secure, GDPR-compliant servers located within the European Union.
  • We use industry-standard SSL/TLS encryption to protect data in transit.
  • Only authorised members of the organising team have access to your data.
  • We will never sell, rent, or share your personal data with third parties for marketing or commercial purposes.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes of organising and executing the Remote by Default European Citizens' Initiative.

  • If you apply as an organiser, your data will be kept for the duration of the ECI campaign cycle and its subsequent evaluation by the European Commission.
  • If you withdraw your consent, we will delete your personal data within 30 days, unless further processing is necessary for the establishment, exercise, or defence of legal claims, or to comply with a legal obligation.

7. Your Rights

Under the GDPR, you have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: ask us to correct inaccurate or incomplete data.
  • Erasure: request deletion of your personal data within 30 days, subject to legal exceptions.
  • Withdraw consent: withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
  • Restriction: request restriction of processing in certain circumstances.
  • Portability: request that we transfer your data to another organisation.

To exercise any of these rights, email privacy@remotebydefault.eu.

8. Lodging a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the data protection supervisory authority in the EU country where you live, work, or where you believe the infringement occurred (Art. 77 GDPR).

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the campaign, its administrative structure, or applicable law. Any updates will be posted on this page with an updated “Last updated” date.

← Back to home