GDPR Privacy Notice

Our processing of personal data of people who are in the European Economic Area (EEA) is governed by the General Data Protection Regulation (the “GDPR”), which applies from May 25, 2018. The GDPR requires us to provide certain information to you about your personal data, which we refer to in this notice as your personal information. This Notice is for people who are located in the EEA and supplements our general Wi-Fi Alliance Privacy Policy.

About Wi-Fi Alliance®

The data controller for this website is Wi-Fi Alliance. For our contact information, see the section headed “How to Contact Us”.

Wi-Fi Alliance is the worldwide network of companies that brings you Wi-Fi®. Hundreds of companies from multiple industries collaborate within Wi-Fi Alliance to drive the interoperability, adoption, and evolution of Wi-Fi globally.

Wi-Fi Alliance defines innovative, standards-based Wi-Fi technologies and programs, certifies products that meet quality, performance, security, and capability standards, provides industry thought leadership, and advocates globally for fair spectrum rules. 

Purposes of the Processing

We use your personal information to communicate with you about our activities, disseminate information relating to Wi-Fi, facilitate your collaboration with other Wi-Fi Alliance members, and respond to your inquiries. We also process your personal information via automated technologies (such as cookies) to improve our website and better understand the interests and needs of our users.

Lawful Basis for the Processing

Generally, we process personal data on the basis that the processing is necessary for purposes of our legitimate interest in conducting our day-to-day business as described above in the section “About Wi-Fi Alliance”, having taken into account any risks to your fundamental rights and freedoms (including your right to privacy).

We may also process personal data on other bases permitted by the GDPR and applicable laws, such as when the processing is necessary for us to comply with our legal obligations.

We have appointed IT Governance Europe Limited to act as our EU Representative.  If you wish to exercise your rights under the EU General Data Protection Regulation (EU GDPR), or have any queries in relation to your rights or general privacy matters, please email our Representative at eurep@itgovernance.eu  Please ensure to include our company name in any correspondence you send to our Representative.  

Our Legitimate Interests

We have a legitimate interest in conducting our day-to-day business as described above in the section “About Wi-Fi Alliance”. In order to be effective as an industry association, we need to communicate with our members and other interested individuals, respond to queries, provide relevant information, keep up to date on the topics and technologies that interest our users, and continually improve the way we provide information and respond to users.

Categories of Personal Information

We process the following information when provided voluntarily by our website users: name, business title, name of employer, business email address, postal address and/or country, and business telephone number. We also process automatically-gathered information as described in our Cookies Notice.

Recipients of Your Personal Information

We use various service providers to manage our website and provide services such as event registration. Our service providers change from time to time. Note that our service providers have entered into contracts with us that restrict what they can do with your personal information. If you would like specific information about our service providers who have received your information, please contact us at GDPR@wi-fi.org and we will provide that information to you.

Information Regarding the Transfers of Personal Data Outside of the European Economic Area (EEA)

Wi-Fi Alliance is based in the USA and that’s where we process the personal information of Member Representatives. When you provide personal information to us, we request your consent to transfer that personal information to the USA. The USA does not have an adequacy decision from the European Commission, which means that the Commission has not determined that the laws of the USA provide adequate protection for personal information. Although the laws of the USA do not provide legal protection that is equivalent to EU data protection laws, we nonetheless treat the personal information of Member Representatives in accordance with this GDPR Privacy Notice. We take appropriate steps to protect your privacy and implement reasonable security measures to protect your personal information in storage. We use secure transmission methods to collect personal data such as website passwords. We also enter into contracts with our data processors that require them to treat personal information in a manner that is consistent with this Notice.

Retention Period for Personal Information

How long we retain personal information varies according to the type of information in question and the purpose for which it is used. We delete personal information within a reasonable period after we no longer need to use it for the purpose for which it was collected (or for any subsequent purpose that is compatible with the original purpose). This does not affect your right to request that we delete your personal data before the end of its retention period. We may archive personal data (which means storing it in inactive files) for a certain period prior to its final deletion, as part of our ordinary business continuity procedures.

Your Rights to Access, Correct, Restrict or Delete Your Personal Data and Object to Processing

You have the right to request access to your personal data, to have your personal data corrected, restricted or deleted, and to object to our processing of your personal data. Your rights may be subject to various limitations under the GDPR.  If you wish to exercise any of these rights, or if you have any concerns about our processing of your personal data, please contact us in any of the ways listed in the section “How to Contact Us”. The GDPR’s data portability rights are not relevant to the kinds of processing that we do in connection with our website.

The Right to Lodge a Complaint with a Supervisory Authority

You have the right to file a complaint concerning our processing of your personal data with your national (or in some countries, regional) data protection authority.  The EU Commission has a list here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

For individuals residing in the EU please contact our EU Representative with any requests you may have by emailing eurep@itgovernance.eu 

Statutory or Contractual Requirement or Other Obligation to Provide Any Personal Data

Users of our website are under no statutory or contractual requirement or other obligation to provide personal information to us via our website.

Cookies Notice

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a better experience when you use our website and also allows us to improve our site.

A cookie is a small file containing letters and numbers that we store on your device if you agree. Cookies contain information that is transferred to your device and then later read from your device.

We use the following categories of cookies:

  • Strictly necessary cookies. These are cookies that are required for the operation of our website – and specifically, to allow you to sign into the website.  These cookies cannot be switched off.  You can set your browser to block these cookies, but as a result, some parts of our website will not work as designed.
    • SimpleSAMLAuthToken – used for Single Sign on, duration: 1 year from last login
    • SimpleSAMLSessionID – used for Single Sign on, duration: 1 year from last login
    • Drupal.visitor.name – used for Single Sign on, duration: 1 year from last login
  • Analytical cookies Analytical cookies allow us to count the number of visitors and sources of web traffic, so we can see how users move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users can find what they are looking for easily. All information these cookies collect is aggregated and therefore anonymized.  Currently, we use one analytical cookie:
    • Browser ID – identifies browser being used, duration: 1 year from last login
  • Functionality cookies. These cookies enable specific enhanced functionality such as javascript-enabled functions. If you do not allow these cookies, then some or all of these functions may not work properly.  Currently, we use one functionality cookie:
    • Has_js – flag for javascript enabled (checks whether your browser allows javascript to run)