Additional Privacy Policy for Collaborations
Introduction
Anyone whose personal data is processed has the right to file a complaint with the competent authority in case of (possible) violations of the applicable law with regard to the protection of personal data. Question and remarks regarding data protection can be addressed to the X-SeeO2 Project Coordinator Prof. Miguel A.G. Aranda (g_aranda@uma.es). If necessary or desired, he will include the Data Protection Officer (Delegado de Protección de Datos de la Universidad de Malaga) in the communication.
‘Personal data’ means any information, private or professional, which relates to an identified or identifiable natural person.
The X-SeeO2 project prioritizes the careful handling of personal data. All beneficiaries of the project consortium that process personal data under the X-SeeO2 Grant Agreement must do this in accordance with EU and national law on data protection. Personal data are processed for various categories of people involved in the consortium. The protection of personal data is regulated by law and via this privacy statement, we provide information on how we handle personal data in accordance with the requirements of the GDPR.
This policy covers all activities of X-SeeO2 with respect to personal data collection. Please read this policy carefully to understand how we collect and use personal data. It describes the technical and organizational measures that will be implemented to safeguard the rights and freedoms of all participants. It describes the security measures that will be implemented to prevent unauthorized access to personal data or the equipment used for processing.
X-SeeO2 is a consortium formed by the Universidad de Malaga, University of Bath, University of Manchester and the European Synchrotron Radiation Facility. Mor information at: https://x-seeo2.eu/
Who is responsible for the processing of provided personal data?
The X-SeeO2 website https://x-seeo2.eu/ , https://x-seeo2-work-area.eu/ (Private area), is owned by the Universidad de Malaga. Personal registration is not needed for access to and visualization of the website
However, personal data are needed for the beamtime proposals within the X-SeeO2 collaboration with other consortia of the EIC EIC Pathfinder Challenge ‘Towards cement and concrete as a carbon sink’ portfolio, https://eic-carbonsink.eu/
The collected personal data are stored at University of Malaga, Spain complying with GDPR. Contact information (name, email address, etc.) will also be made available to the facilities within the X-SeeO2 beneficiaries, in order to directly organize access with the researchers requesting access to a given facility.
Registration of personal data for participating in X-SeeO2 training, workshops and meetings is with the local organizing X-SeeO2 partners. Every X-SeeO2 partner shall handle personal data in accordance with GDPR.
What personal data do we collect?
All personal data that will be collected and processed will be relevant and limited to the purpose of X-SeeO2.
On behalf of the X-SeeO2 consortium, the University of Malaga will collect and process the following contact data upon registration: name, email address, nationality, country of residence, employing organization, working address. The collected information will be kept restricted to the minimum required to access to the different X-SeeO2 facilities.
For what purposes do we process personal data?
Stored registration data (name, email address) are for communication purposes only. The contact details are used to handle requested services, to provide information relating to the requested X-SeeO2 activities, and to handle complaints, disputes and incidents.
What is the basis for the processing of personal data?
The processing of personal data is necessary for the execution of a request, such as obtaining X-SeeO2 beamtime access or training. Providers of personal data have provided these personal data on basis for their participation in access provision, training and reporting. The processing is necessary to comply with legal compliance requirements of the X-SeeO2 consortium to the European Commission.
How long do we keep personal data?
The X-SeeO2 grant agreement with the European Commission requires that data are kept for a period of five years after the X-SeeO2 project’s final payment that takes place after the end of September 2029.
Who will receive the personal data?
When access to research facilities is requested, the participant registration data will be shared with the relevant X-SeeO2 partner(s).
The X-SeeO2 beneficiaries may grant their personnel access only to data that is strictly necessary for implementing, managing and monitoring the Grant Agreement. The X-SeeO2 beneficiaries must put in place adequate access controls and retention policies for the data they hold.
Third parties will only receive personal data if this needs to be provided for the implementation of a law or court order, or if this is necessary to protect the interests of X-SeeO2 beneficiaries.
Who will protect personal data?
The X-SeeO2 consortium has taken technical and organizational security measures to protect personal data against unlawful use. We secure our systems according to the applicable standards for information security, and we make agreements about this with our service providers. Personal data will be only accessible to those who are logically allowed to process this data. X-SeeO2 affiliates who are involved in the processing of personal data on behalf of the consortium are required to maintain the confidentiality of the personal data of which they are aware. The personal data that will be collected will be minimized and pseudonymized whenever possible.
Rights regarding personal data
- Right of inspection: this concerns the right to view one’s personal data or request a copy;
- Right to rectification and supplementation: this concerns the right to change personal data if it is factually incorrect;
- Right to restriction of processing: this concerns the right to have less data processed;
- Right to be forgotten – this concerns the right for personal data to be deleted without undue delay;
The X-SeeO2 website
- Browsing and contact
One can browse through X-SeeO2 webpages without submitting personal details. The X-SeeO2 website allows visitors to contact members of the consortium through different email addresses. The personal data provided through these email addresses is used only to the extent necessary to reply. If the recipients of the emails redirected from these email addresses are unable to answer a question, they may forward the email to another X-SeeO2 partner.
Registration in the area https://x-seeo2-work-area.eu/ is required.
- Cookie policy
A cookie is a small file that is stored on a computer, tablet or mobile phone when someone visits a website. Cookies do not contain viruses or other malicious applications. If one does not want us to use cookies, one must turn ‘cookies off’ in their browser or not accept cookies upon receiving the cookie notification. Turning off cookies may limit the use of our website.
If the use of cookies is accepted, these will remain on a computer, tablet or mobile phone until they are deleted. The X-SeeO2 website may also contains links to other websites. If those other websites use cookies, the information is not sent to our servers but to the server of that other website.
The X-SeeO2 website makes use of functional cookies for optimization of its website and analysis of visitor behaviour. Cookies do not retrieve stored data on a hard-drive and do not affect a computer or data.