1. Introduction
COSH cares about your privacy and treats your personal data as confidentially as possible.
The protection of your privacy and your personal data is an extremely serious matter for us. We collect, store and use your personal data only in accordance with the contents of this privacy statement (“Privacy Statement”) and the applicable regulations on data protection, in particular the provisions of the General Data Protection Regulation (“GDPR”) and the national data protection provisions.
This Privacy Statement explains what personal data is collected and processed, for what purposes, how long we keep personal data, what your rights are in this regard and how you can contact us.
This Privacy Statement applies, inter alia, to (i) our websites: cosh.eco; screenmystore.cosh.eco; screenmybrand.cosh.eco; and associated dashboards (hereinafter our “Website(s)”) and the COSH! Digital Wardrobe application (hereinafter our “COSH App”), and the services and activities associated with it and (ii) all relationships through any other means of communication between you and us. The Website(s) and the COSH App are collectively referred to as our “Platform(s)”.
2. General information applicable to all our personal data processing activities
COCREATE GOOD LIFE BV, a private limited company, with registered office at Bergjesbos 19, 8310 Bruges, Belgium and registered in the Belgian Crossroads Bank for Enterprises under the number 0697.686.059 (hereinafter “COSH”, “we” or “us”), is responsible for processing your data as described in this Privacy Statement.
Please note that COSH is a data controller, which means that we have a direct responsibility to you in relation to the processing of your personal data. This Privacy Statement relates solely to our relationship with you as a data controller.
Personal data is data that can be used to directly or indirectly identify natural person. We may collect and process personal data in various ways, e.g. when:
- you contact or have contacted us (e.g. via the contact form on one of our Platform(s), via e‑mail, etc.);
- we provide or have provided any of our services to you;
- you wish to apply for a job at COSH;
- when you as a user create an account on the cosh.eco website and/or via our COSH App;
- when you as a person complete surveys or enter our giveaways;
- etc.
Usually, you give us your personal data yourself. Sometimes we receive your contact details through third parties, e.g:
- purchase data provided by retailers with whom you have interacted, where you have given your explicit consent to share this data with COSH in the app.
We may also find, update, supplement and improve your data through public sources (e.g. Crossroads Bank for Enterprises, etc.) and social networks.
In principle, we use your personal data only for providing the services you request. If we use external service providers to provide these services, these service providers also have access to your personal data exclusively within the scope of their services. We have implemented necessary technical and organizational measures to ensure compliance with data protection regulations and also require external service providers to adhere to these provisions. We have entered into data processing agreements with relevant third parties, which include necessary safeguards regarding the confidentiality and privacy compliance of your personal data.
Notwithstanding the foregoing, it is possible that COSH may disclose your personal data to competent authorities (i) if COSH is required to do so by law or legal process and/or (ii) to protect and defend our rights.
In principle, we aim to store your personal data on IT systems in the European Economic Area (“EEA”).
If personal data are transferred to countries or organizations outside the EEA, appropriate safeguards will always be provided. Any transfer of personal data outside the EEA to a recipient in a country not covered by a decision of the European Commission to provide an adequate level of protection, will be subject to the provisions of a data transfer agreement, which will include (i) the standard contractual clauses issued by the European Commission, or (ii) any other mechanism in accordance with the GDPR, or any other regulation relating to the processing of personal data such as the EU‑U.S. Data Privacy Framework for transfers to the U.S. If you have any questions regarding these safeguards or their accessibility, please contact us by e‑mail or post using the details below (under title 2.5).
You have several rights:
- You have a right to access your personal data. This allows you to check what personal data we process about you;
- You have a right to correct your personal data. This allows you to correct or supplement any incorrect or incomplete personal data we process about you;
- You have a right to erasure of your personal data. This allows you to permanently erase personal data that we process about you. We are not always obliged to erase your personal data at your request – this right only applies in the cases and to the extent provided by law;
- You have a right to restrict the processing of your personal data. This allows you to freeze our use of your personal data without erasing it. We are not always obliged to restrict your personal data at your request – this right applies only in the cases and to the extent provided for by law;
- You have the right to object to the processing of your personal data. This allows you to object to the further processing of your personal data. We are not always obliged to honor your objection – this right only applies when we process your personal data based on our legitimate interests;
- You always have the right to withdraw your consent when the processing of your personal data is based on your consent;
- You always have the right to object the processing of your personal data for direct marketing purposes;
- You have the right to data portability. This allows you to transfer, copy or forward personal data smoothly from one controller to another. This right can only be exercised if the processing is based on your consent or on an agreement with you.
If you wish to exercise any of the rights listed above, please contact us by e‑mail or post using the details below (under title 2.5).
When you make a request to exercise your rights, we will first verify your identity through the appropriate and least privacy-intrusive means. We do this to prevent your data from falling into the wrong hands.
The exercise of your rights is in principle free of charge. If your request is manifestly unfounded or excessive, we may charge you a reasonable fee in light of the administrative costs incurred by us. In such cases, however, we may also choose not to comply with your request. You will be notified of the reasons for this, if applicable.
In any case, we will always inform you of the outcome of your request no later than within one month. For complex or multiple requests, this period may be extended by two months, but we will also inform you of this necessary extension within the initial month.
For the exercise of your rights, for any questions or complaints related to the processing of personal data, you can always contact us:
|
You can also file a complaint with the supervisory authority in the location where you reside. For Belgium, this is the Data Protection Authority:
|
For more information regarding complaints and remedies, we invite you to consult the Data Protection Authority’s website: gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen.
3. Specific processing activities that may apply to you
Under what circumstances COSH collects, uses or otherwise processes different categories of personal data from you, for what purpose, on what legal basis, for what period and with whom it is shared, is described below.
COSH provides, with the COSH App, a smart wardrobe platform that gives you a complete overview of your clothing items, helps you make smarter shopping and rental decisions, offers daily outfit suggestions from your personal smart stylist, and tracks what you wear to help reduce your cost per wear.
COSH may collect and process one or more of the following personal data:
- account data: e‑mail address, password, first name, last name, date of birth (optional), gender (optional), profile picture (optional), country, city (optional), preferred language (optional), style and wardrobe challenges and goals (optional), how you would like COSH to assist you in achieving these goals (optional), and your satisfaction level regarding your wardrobe (optional);
- contact and contract information: e.g. name, first name, e‑mail address;
- mobile phone number (optional);
- profile-building data (optional): e.g. preferences gathered via style quizzes, preferred fashion styles, body type data (e.g. cup size, height, weight, body shape, waist), shopping profile and habits (e.g. preferences, frequency), and colour preferences;
- wardrobe data: e.g. photos of your clothing items and wardrobe content;
- shopping activity data: e.g. store visit information based on ‘my routes’ (i.e. stores you visit or plan to shop at);
- correspondence and communication data: including messages, e‑mails, and any other forms of communication with COSH;
- purchase data (optional): details of your purchases at online and physical retailers (e.g. what was purchased, from which retailer, the location of the purchase, the price, etc.);
- your electronic identification data: e.g. connection times, etc. following a visit to our Cosh App that uses cookies or similar techniques.
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purposes:
- to provide you with more information about our services and products at your request or at our initiative, if deemed necessary to accurately perform our services for you;
- to provide you with the services as agreed with you;
- to handle any complaint and/or feedback;
- to maintain a business relationship with you as a customer;
- to personalize your user experience, including outfit recommendations, wardrobe suggestions, and shopping advice tailored to your style preferences and profile;
- to improve our services, functionalities, and user interface based on usage data and feedback;
- to send you relevant service messages or updates regarding your profile, wardrobe activity, or COSH’s features based on the settings you select in the app;
- (regarding purchase data) to automatically update your digital wardrobe and provide COSH with better aggregated insights into brand popularity, purchasing behaviour, and product longevity to support sustainable fashion research;
- to allow you to join the COSH community (e.g. via WhatsApp group updates) where you can join a group of COSH! Digital wardrobe enthusiasts that help test new features and notify us of bugs and suggest features for improving the app;
- for placing and reading cookies. More information on our use of cookies can be found in our Cookie Statement.
COSH processes the personal data listed above on the following legal grounds:
- the processing is necessary for the performance of an agreement to which you are a party or to take steps at your request prior to the conclusion of an agreement (purposes I to III above);
- the processing is necessary for the purposes of the legitimate interests pursued by COSH or a third party (purposes IV to VI and X above). Our legitimate interests are:
- to serve you as a customer even better by keeping you informed about our activities, services and products (purpose IV above);
- to offer you a more relevant and engaging experience through personalized content, recommendations, and styling advice that match your preferences and profile (purpose V above);
- to optimize and enhance the quality, efficiency, and usability of the COSH App based on insights gained from usage patterns, feedback, and user interactions (purpose VI above);
- for strictly necessary cookies, which are cookies that ensure functionalities without which you would not be able to use our COSH App as intended, we rely on the legal basis of legitimate interest. These cookies are required purely for technical reasons to be able to use the App. Given the technical necessity, there is only an obligation to provide information, and we place these cookies as soon as you access the App (purpose X above);
- the customer has given consent to the processing of his/her personal data (purposes VII to X above). Regarding cookies, we request your consent for categories of cookies other than strictly necessary cookies (e.g., preference cookies, analytical cookies, etc.), insofar as our App uses them. For more information, we refer you to our Cookie Statement;
If you delete the COSH App from your device but do not delete your account, your personal data will continue to be stored in accordance with this Privacy Statement, and you can re-activate your account at any time.
If you delete your account, COSH will retain your personal data for a period of 3 months after the account deletion to handle any post-deletion inquiries, complaints, or administrative follow-ups. After this period, your personal data will be permanently deleted or anonymized.
In certain cases, we may retain your personal data for a longer period, including but not limited to the following situations:
- if applicable laws require us to retain specific data, we will retain the data for the duration of the legally required period;
- data necessary to establish, exercise, or defend legal claims will be retained for the duration of the applicable statutory limitation period.
In pursuit of these purposes, we may disclose your personal data to:
- subcontractors who process personal data on our behalf (processors), e.g. in relation to hosting, mailing, marketing initiatives, etc.. They only process your personal data under our written instructions and in accordance with an agreed processing agreement;
- judicial, police or administrative authorities, if required by law or court proceedings;
- governments and companies, but only in relation to wardrobe data and shopping activity/location data, and under the following conditions:
(i) in a pseudonymized form, for the purpose of generating aggregated insights and statistics to support sustainability and circular fashion reporting, as well as research into the lifespan of garments, repair trends, and sustainable consumption practices. This processing is based on COSH’s legitimate interest in contributing to evidence-based sustainability transitions and promoting a more circular, transparent, and socially responsible fashion ecosystem;
(ii) in a non-pseudonymized form, but only where you have given your explicit and informed consent e.g. to participate in a predefined university research which is available in your settings.
When you create an account on the COSH Website (cosh.eco), we collect and process certain personal data to create and manage your account, offer tailored content, and provide you with the services and functionalities available on the Website.
COSH may collect and process one or more of the following personal data:
- account data: e‑mail address, password, first name, last name;
- profile and preference data: your favourite shops and brands, as well as shopping routes created by you (optional);
- correspondence and other forms of communication: e‑mails and other (forms of) communication;
- your electronic identification data: e.g. your IP address, connection times, etc. following a visit to our Website that uses cookies or similar techniques.
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purposes:
- to create and manage your account on the COSH Website;
- to provide you with the services as agreed with you;
- to handle any complaint and/or feedback;
- to maintain a business relationship with you; to keep you informed about, among other things, COSH activities, products and services;
- for placing and reading cookies. More information on our use of cookies can be found in our Cookie Statement.
COSH processes the personal data listed above on the following legal grounds:
- the processing is necessary for the performance of an agreement to which you are a party or to take steps at your request prior to the conclusion of an agreement (purposes I to III above);
- the processing is necessary for the protection of the legitimate interests of COSH or a third party (purposes IV and V above). Our legitimate interests are:
- to serve you as a registered user even better by keeping you informed about our activities, services and products (purpose IV above);
- for strictly necessary cookies, which are cookies that ensure functionalities without which you would not be able to use our Website as intended, we rely on the legal basis of legitimate interest. These cookies are required purely for technical reasons to be able to use the Website. Given the technical necessity, there is only an obligation to provide information, and we place these cookies as soon as you access the Website (purpose V above);
- the registered user has given consent for the processing of his/her personal data (purpose V above). Regarding cookies, we request your consent for categories of cookies other than strictly necessary cookies (e.g., preference cookies, analytical cookies, etc.), insofar as our Website uses them. For more information, we refer you to our Cookie Statement;
COSH will not retain your personal data for longer than necessary for the purposes for which they were collected. The following retention periods apply:
- 12 months after deletion of your account, unless COSH is legally required to retain the data for a longer period;
- COSH will retain your personal data until you withdraw your consent to the use of your data. You may withdraw your consent at any time using the procedure described under titles 2.4 and 2.5 of this Privacy Statement (purpose V above);
- the retention period for cookies varies depending on the type of cookie. More information on our use of cookies can be found in our Cookie Statement (purpose V above).
In pursuit of these purposes, we may disclose your personal data to:
- subcontractors processing personal data on our behalf (processors);
- judicial, police or administrative authorities, if required by law or court proceedings;
the third parties listed in the Cookie Statement;
If you are a professional B2B COSH member – such as a retailer, store, or other business or a public organization (e.g. cities, municipalities) – whether or not you are a paying member, COSH may collect and process your personal data in the context of our collaboration, communication, service provision, or your use of COSH’s B2B tools and platforms (e.g. screenmystore.cosh.eco, screenmycity.cosh.eco and other associated dashboards).
COSH may collect and process one or more of the following personal data:
- contact and account data: name, first name, job title and/or role, phone number, mobile number, e‑mail address, address details, and other contact information; data needed to create and manage your B2B account(s);
- correspondence and communication data: including letters, emails, and other forms of communication with COSH;
- billing and administrative data: such as bank account numbers and all other information related to payments.
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purposes:
- to provide you with more information about our services and products, either at your request or at our initiative, when necessary to accurately provide our services to you;
- to deliver the agreed B2B services to you;
- to handle any complaints and/or feedback you may submit;
- to process or receive payments;
- to maintain a professional business relationship with you as a B2B COSH member;
COSH processes the personal data listed above on the following legal grounds:
- the processing is necessary for the performance of an agreement to which you are a party or to take steps at your request prior to the conclusion of an agreement (purposes I to IV above);
- the processing is necessary for the protection of the legitimate interests of COSH or a third party (purpose V above). Our legitimate interest is to serve you as a B2B customer even better by keeping you informed about our activities, services and products;
COSH will retain your personal data for a period of 12 months after the completion of the service or termination of the agreement. This retention period allows us to handle any post-service inquiries, complaints, or administrative follow-ups.
In certain cases, we may retain your personal data for a longer period, including but not limited to the following situations:
- if applicable laws require us to retain specific data, we will retain the data for the duration of the legally required period;
- data necessary to establish, exercise, or defend legal claims will be retained for the duration of the applicable statutory limitation period.
In pursuit of these purposes, we may disclose your personal data to:
- subcontractors who process personal data on our behalf (processors), e.g. in relation to hosting, mailing, marketing initiatives, etc.. They only process your personal data under our written instructions and in accordance with an agreed processing agreement;
- judicial, police or administrative authorities, if required by law or court proceedings;
- other B2B COSH members: your data may be disclosed to other B2B COSH members only in the context of our matchmaking service (only applicable to paying B2B COSH members), and only where there is a confirmed professional match. The purpose of this disclosure is to connect compatible businesses as part of COSH’s B2B service offering. The legal basis for this processing is that it is necessary for the performance of a contract to which you are a party.
COSH may collect and process one or more of the following personal data:
- contact information: name, title, function, telephone and mobile number, e‑mail address, office address and other contact and/or company information;
- correspondence and other forms of communication: letters, e‑mails and other (forms of) communication; and
- information on the delivery of the product/service and any information on our engagement with the supplier/subcontractor, bank account numbers and any other information on payments.
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purpose:
- to buy goods or services.
COSH processes the personal data listed above on the following legal basis:
- the processing is necessary for the performance of an agreement to which the supplier/subcontractor is a party or to take steps at the request of the supplier/subcontractor prior to the conclusion of a contract (purpose I above).
We keep your personal data for 7 year after completion of the service, unless COSH is required by law to keep the data longer.
In pursuit of this purpose, we may disclose your personal data to:
- subcontractors processing personal data on our behalf (processors);
- judicial, police or administrative authorities, if required by law or court proceedings;
COSH may collect and process one or more of the following personal data:
- contact information: e.g. name, first name, e‑mail address, company name, role in your company, address;
- correspondence and other forms of communication: e‑mails and other (forms of) communication;
- your electronic identification data: e.g. your IP address, connection times, etc. following a visit to our Website that uses cookies or similar techniques.
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purposes:
- to answer your question or request for information, or to schedule an exploratory meeting;
- for direct marketing, to keep you informed about, among other things, COSH activities, products and services;
- for placing and reading cookies. More information on our use of cookies can be found in our Cookie Statement.
COSH processes the personal data listed above on the following legal grounds:
- the processing is necessary to take pre-contractual measures at your request (purpose I above);
- the subscriber/visitor has given consent for the processing of his/her personal data (purposes II and III above). Regarding cookies, we request your consent for categories of cookies other than strictly necessary cookies (e.g., preference cookies, analytical cookies, etc.), insofar as our Platform uses them. For more information, we refer you to our Cookie Statement;
- the processing is necessary for the protection of the legitimate interests of COSH or a third party (purpose III above). For strictly necessary cookies, which are cookies that ensure functionalities without which you would not be able to use our Platform as intended, we rely on the legal basis of legitimate interest. These cookies are required purely for technical reasons to be able to use the Platform. Given the technical necessity, there is only an obligation to provide information, and we place these cookies as soon as you access the Platform.
COSH will not retain your personal data for longer than necessary for the purposes for which they were collected. The following retention periods apply:
- COSH will retain your personal data for up to 10 years after the last contact you had with us as a prospect (purpose I above);
- COSH will retain your personal data until you withdraw your consent to the use of your data. You may withdraw your consent at any time using the procedure described under titles 2.4 and 2.5 of this Privacy Statement (purposes II and III above);
- the retention period for cookies varies depending on the type of cookie. More information on our use of cookies can be found in our Cookie Statement (purpose III above).
In pursuit of these purposes, we may disclose your personal data to:
- subcontractors processing personal data on our behalf (processors);
- judicial, police or administrative authorities, if required by law or court proceedings;
the third parties listed in the Cookie Statement.
COSH may collect and process one or more of the following personal data:
- contact information: name, first name, function, telephone and mobile number, home address, e‑mail address, and other contact information;
- correspondence and other forms of communication: letters, e‑mails and other (forms of) communication; and
- other recruitment-related information: gender, date of birth, photograph, application form, CV, interview notes, and other employment history information.
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purposes:
- to assess the suitability of the (potential) applicant and to start an application process and for the evaluation of the application;
- to keep applicants informed of our job openings; and
- to invite applicants to our COSH activities and have them participate in our activities.
COSH processes the personal data listed above on the following legal grounds:
- the processing is necessary to take steps at the applicant’s request prior to the conclusion of an agreement to which the applicant becomes a party (purpose I above);
- the applicant has given consent to the processing of his/her personal data (purposes II and III above).
COSH will delete applicants’ personal data no later than 4 weeks after the end of the application process unless the applicant has given his/her express consent to keep his/her data for a longer period. In that case, COSH will keep the personal data for a period of 1 year, after which the applicant will be asked whether he/she wishes to renew his/her consent.
In pursuit of these purposes, we may disclose your personal data to:
- subcontractors processing personal data on our behalf (processors);
- judicial, police or administrative authorities, if required by law or court proceedings;
COSH may collect and process one or more of the following personal data:
- contact information: name, first name, company name, function, address, telephone and mobile number, e‑mail address, payment details (in case of paid activity);
- correspondence and other forms of communication: including questions asked via chat function at webinars;
- in case of events: business cards, dietary restrictions, photos, videos, etc.
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purposes:
- organizing the COSH activity;
- conducting surveys;
- direct marketing: to invite participants to our COSH activities and engage them in our activities; and
- marketing: posting photos and videos on COSH’s Website(s) and social media (e.g. LinkedIn, etc.) to promote our services and activities.
COSH processes the personal data listed above on the following legal grounds:
- the processing is necessary for the performance of an agreement to which you are a party or to take steps at your request prior to the conclusion of an agreement (purpose I above);
- the processing is necessary for the protection of the legitimate interests of COSH or a third party (purposes II and III above). Our legitimate interests include improving the quality of COSH activities (purpose II) and serving you even better by keeping you informed about other COSH activities (purpose III); and
- the data subject has given consent to the processing of his/her personal data (purpose IV).
COSH will not retain your personal data for longer than necessary for the purposes for which they were collected. The following retention periods apply:
- COSH will retain your personal data for up 5 years after the completion of the activity, unless COSH is legally required to retain the data for a longer period (purposes I to III above);
- COSH will retain your personal data until you withdraw your consent to the use of your data. You may withdraw your consent at any time using the procedure described under titles 2.4 and 2.5 of this Privacy Statement (purpose IV above).
In pursuit of these purposes, we may disclose your personal data to:
- subcontractors processing personal data on our behalf (processors);
- judicial, police or administrative authorities, if required by law or court proceedings;
If you purchase COSH products via our online shop or at our physical points of sale, COSH may collect and process your personal data in order to manage your order and provide after-sales service.
COSH may collect and process one or more of the following personal data:
- contact information: name, first name, phone and/or mobile number, e‑mail address, postal address and other contact details;
- order, shipping and return information: products ordered, delivery/pick-up details;
- billing and payment information: invoice details, company name and form (if applicable), payment status and method;
- correspondence and other forms of communication: letters, e‑mails, calls and other communications relating to your purchase.
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purposes:
- to process and fulfil your order (including delivery/pick-up, returns and refunds);
- to handle any complaint and/or after-sales request;
- to issue invoices and manage payments;
- to maintain a customer relationship with you and keep you informed about similar products and services.
COSH processes the personal data listed above on the following legal grounds:
- the processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract (purposes I – III above);
- the processing is necessary for the purposes of the legitimate interests pursued by COSH or a third party (purpose IV above). Our legitimate interest is to serve you better as a customer by informing you about similar products or services you have already purchased. You can object at any time to such communications (see titles 2.4 and 2.5).
COSH will not retain your personal data for longer than necessary for the purposes for which they were collected. The following retention periods apply:
- order, contact and customer service data: up to 24 months after your last interaction relating to the order (e.g. delivery, return, refund, complaint closure), unless a longer period is needed for warranty or dispute handling;
- invoicing and payment data: up to 7 years to comply with tax and accounting obligations;
- where COSH is required by law to retain specific data, or where data are necessary to establish, exercise or defend legal claims, the retention period will be extended for the duration of the applicable legal retention or limitation period.
In pursuit of these purposes, we may disclose your personal data to:
- subcontractors processing personal data on our behalf (processors), such as e‑commerce platform providers, payment service providers, shipping/postal partners, hosting, mailing and customer support tools. They only process your personal data under our written instructions and in accordance with an agreed processing agreement;
- judicial, police or administrative authorities, if required by law or legal process.
COSH maintains a press list containing the contact details of journalists and other members of the press in order to maintain professional media relations and keep the press informed on topics relevant to COSH’s mission and activities.
COSH may collect and process one or more of the following personal data:
- contact information: name, first name, e‑mail address, media outlet, function, and other publicly available professional contact details;
- correspondence and other forms of communication (e.g. press mailings, replies).
However, we will never collect more personal data from you than is strictly necessary to achieve the purposes for which we have collected your personal data.
COSH processes the above personal data for the following purposes:
- to maintain and manage a press list of relevant journalists and media contacts;
- to send press releases, event invitations and other media communications;
- to manage correspondence with the press.
COSH processes the personal data listed above on the following legal grounds:
- the processing is necessary for the purposes of the legitimate interests pursued by COSH or a third party. COSH has a legitimate interest in communicating with the media to promote its activities and inform the public (purposes I‑III above).
COSH will not retain your personal data for longer than necessary for the purposes for which they were collected.
The following retention periods apply:
- up to 1 year after the moment we detect that the e‑mail address bounces, or immediately after a request for deletion has been received.
In pursuit of these purposes, we may disclose your personal data to:
- subcontractors processing personal data on our behalf (processors), e.g. in relation to mailing or hosting tools;
- judicial, police or administrative authorities, if required by law or court proceedings;
4. Changes to this privacy statement
We may update this Privacy Statement from time to time. Therefore, we encourage you to consult it regularly so that you are aware of any changes.
Last updated at 14 October 2025