PROTECTION OF PERSONAL DATA WITHIN SAFEWAY

INTRODUCTION

The SAFEWAY project assumes the responsibility of complying with current legislation on data protection, guaranteeing the protection of personal information in a lawful and transparent manner in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and their free circulation (GDPR), with the national, regional and the University of Vigo’s internal regulations regarding the protection of personal data.

This document informs in detail the circumstances and conditions of the processing of personal data and the rights that assist the interested persons.

As coordinator of the action, the University of Vigo is the data controller for all personal data being collected for workshops and other communication and dissemination events. The University of Vigo has appointed as Data Protection Officer to: Ana Garriga Domínguez with address at: Faculty of Law, As Lagoas s/n, 32004, Ourense, Spain (dpd@uvigo.es).

PURPOSE:

SAFEWAY partners will only collect the personal data strictly necessary in relation to the purposes for which they are treated, in accordance with the principles set in Article 5 of the GDPR.  The information necessary to guarantee a fair and transparent treatment will be provided to the interested persons at the moment of collection, in accordance with the provisions of articles 13 and 14 of the GDPR.

The data collected by SAFEWAY for the dissemination activities aims to reach the widest audience to disseminate SAFEWAY project outcomes and to communicate the knowledge gained by its partners during the duration of the project.

The workshops or meetings with stakeholder are focused to present and discuss all project results, not only among project partners but also open to stakeholders and other target groups. The events will be targeted to technology innovators on infrastructure management, including end-users, materials and technology suppliers, the research community, regulatory agency, standardization bodies and all the potential players interested in fields associated to innovative resilience of transport infrastructure with special focus on their application in railway and roads.

PROCESSING OF PERSONAL DATA:

Your Personal Data is freely provided. Where it is specified in the registration form, the provision of Personal Data is necessary to provide you with the services expected from the dissemination event, and the access to SAFEWY project results. if you refuse to communicate these Data, it may be impossible for the Data Controller to fulfil your request. On the contrary, with reference to Personal Data not marked as mandatory, you can refuse to communicate them and this refusal shall not have any consequence for your participation and attendance to SAFEWAY dissemination activities.

The provision of your Personal Data for publication of your contact details on the Internet or elsewhere for networking implemented by the Data Controller is optional, consequently you can freely decide whether or not give your consent, or withdraw it at any time. Therefore, if you decide not to give your consent, SAFEWAY dissemination responsible will not be able to carry out the aforementioned activities.

SAFEWAY will never collect any special categories of Personal Data (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation – Art. 9 of GDPR). SAFEWAY asks you expressly to avoid providing these categories of Data. In the event in which you voluntarily choose to give us these Data, the Company may decide not to process them or to process them only with your specific consent or, in any event, in compliance with the applicable law.

In the event of accidental processing of third party Personal Data is communicated to SAFEWAY, you become an autonomous Data Controller and assume all the related obligations and responsibilities provided by the law. In this regard, SAFEWAY is exempt from any liability arising from any claims or requests made by third parties, whose Data have been processed by us because of your spontaneous communication of them to us, in violation of the law on the protection of Personal Data. In any event, if you provide or process third party Personal Data, you must guarantee as of now, assuming any related responsibility, that this particular hypothesis of processing is based on a legal basis pursuant to Art. 6 of GDPR.

DATA STORAGE AND RETENTION:

The personal data provided will be kept for the time necessary to fulfill the purpose for which they are requested and to determine the possible liabilities that could derive from the same purpose, in addition to the periods established in the regulations on files and documentation. Unless otherwise stated, the data will be retained for a period of five years after the end of the project as this data can support the report of some of the implemented activities.

During this period, the data will be stored in a secured area with access by a limited number of researchers. SAFEWAY data managers will apply appropriate technical and organizational measures to guarantee a level of safety appropriate to the risk and in accordance with the provisions of article 32 of the GDPR. The system also allows tracking of use of data. Five years after the end of the project, the data will be destructed at the surveillance of the Data Protection Officer at University of Vigo, as coordinating organization of SAFEWAY.

RIGHTS OF THE DATA SUBJECT:

Any person, as the holder of personal data, has the following rights recognized in the terms and under the conditions indicated in articles 15-22 of the RGPD:

• Right of Access: obtain from the controller confirmation as to whether or not personal data concerning you are being processed, more information on the processing and copy of the personal data processed.

• Right to Rectification obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning you and the right to have incomplete personal data competed.

• Right to Erasure: obtain from the controller, without undue delay, the erasure of personal data concerning you.

• Right to Restriction of Processing: obtain the restriction of the processing in the event you assume that your data are incorrect, the processing is illegal or if these data are necessary for the establishment of legal claims.

• Right to Data Portability: receive the personal data concerning you, which you has provided to a controller, in a structured, commonly used and machine-readable format, in order to transfer these data to another Controller.

• Right to Object: Object, on grounds relating to your particular situation, to the processing of personal data concerning you, unless the controller demonstrates compelling legitimate grounds for the processing. You can also object to processing your data where them are processed for direct marketing purposes.

• Right to withdraw the Consent: withdraw the consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The subject may exercise their rights without any cost and will have the right to receive a response, within the deadlines established by current legislation on data protection, by contacting SAFEWAY project coordinators at: safeway@uvigo.es, or by contacting the Data Protection Officer at: dpd@uvigo.es.

CONTACT PERSON

For any additional information or clarification please contact SAFEWAY coordinators at UVIGO (safeway@uvigo.es). This consent form does not remove any of your rights under GDPR but provides us with the necessary permissions to process your application and manage SAFEWAY workshops and events.