ECRE distributes newsletters through Mailchimp and have agreed to their standard Data Processing Addendum (DPA) you can read about their Privacy Policy here: https://mailchimp.com/legal/privacy/