PRIVACY POLICY
STANDARD 10060 — DIGITAL PRODUCT PASSPORT (DPP) EXECUTION FRAMEWORK
Effective date: 01 January 2026
1️⃣ Purpose
This Privacy Policy explains how personal data is processed in connection with the Standard 10060 Digital Product Passport (DPP) Execution Framework, in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR)
- UK GDPR and the Data Protection Act 2018
The STANDARD-10060-DPP website is a technical execution interface.
It is not a consumer service and does not engage in marketing, profiling, or advertising.
2️⃣ Data Controller
The 10060 Consortium
141 Adelaide Street West, Suite 1800
Toronto, Ontario M5H 3L5
Canada
Primary privacy contact: 📧 privacy@eco-10060.org
3️⃣ Scope of This Policy
This Privacy Policy applies to:
Visitors to standard-10060-dpp.org
Professional users submitting enquiries via contact forms
Technical or governance correspondence related to DPP / DPU execution standards
This policy does not apply to:
External audit ledgers
Blockchain or execution infrastructure
Third-party Digital Product Passport platforms linked from this site
4️⃣ Personal Data Collected
The Standard 10060 DPP Execution Framework collects minimal personal data, limited to what is necessary for professional contact.
This may include:
- Name
- Company or organisation
- Email address
- Telephone number (if voluntarily provided)
- Message content submitted via contact forms
No sensitive personal data is intentionally collected.
5️⃣ Purpose of Processing
Personal data is processed solely for:
- Responding to technical or governance enquiries
- Clarifying execution standards, schemas, or interoperability questions
- Maintaining operational security and integrity of the website
- Meeting applicable legal or regulatory obligations
Personal data is not used for:
- Marketing or sales
- Advertising
- Profiling
- Automated decision-making
6️⃣ Legal Basis for Processing
Processing is conducted under one or more of the following lawful bases:
- Legitimate interests (Article 6(1)(f) GDPR): professional standards governance and technical correspondence
- Consent (Article 6(1)(a) GDPR): where explicitly provided via contact forms
- Legal obligation (Article 6(1)(c) GDPR): where required by applicable law
7️⃣ Data Storage & Retention
- Personal data is stored securely
- Access is restricted to authorised personnel only
- Data is retained only as long as necessary to fulfil the purpose of the enquiry or to comply with governance or legal obligations
- Contact records are periodically reviewed and securely deleted when no longer required.
8️⃣ Data Sharing
Personal data is not sold, rented, or traded.
Data may be shared only:
- With service providers strictly necessary to operate the website (e.g. hosting, security), under appropriate safeguards
- Where disclosure is required by law or a competent regulatory authority
9️⃣ International Transfers
Website infrastructure and execution systems may involve processing in multiple jurisdictions, including the European Union.
Where personal data is transferred outside the EU or UK, appropriate safeguards are applied in accordance with GDPR and UK GDPR requirements.
🔟 Data Subject Rights (EU & UK)
Under GDPR and UK GDPR, individuals have the right to:
- Access their personal data
- Rectify inaccurate or incomplete data
- Request erasure (“right to be forgotten”)
- Restrict or object to processing
- Request data portability, where applicable
- Withdraw consent at any time, where processing is based on consent
Requests may be submitted to: 📧 privacy@eco-10060.org
11️⃣ Cookies & Tracking
The standard-10060-dpp.org website:
- Does not use advertising cookies
- Does not deploy behavioural tracking
- Does not conduct user profiling
Only strictly necessary technical cookies may be used to ensure site functionality and security.
12️⃣ Relationship to Commercial Entities
Although the 10060 Consortium was administratively originated by GreenCore Solutions Corp.:
- Personal data submitted through this site is handled independently
- Data is not used for commercial marketing, sales, or promotional activity
- No personal data is shared with commercial entities for marketing purposes
13️⃣ Changes to This Policy
This Privacy Policy may be updated to reflect changes in legal requirements or operational practices.
The current version will always be published on this page, with the effective date clearly stated above.
