Your personal data is processed in accordance with Regulation (EU) No 2018/172511 on the protection of individuals with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data.

The data controller of the processing operation is Head of Unit B.3 – Biodiversity, Circular Economy and Environment – European Research Executive Agency (REA).

This Data Protection Notice (DPN) is in relation to the GoNaturePostive! project. The following entity/ies process your personal data on our behalf: The contractor: TRINITY COLLEGE, College Green Dublin 2, Ireland ; ICLEI European Secretariat GmbH, Leopoldring 3, 79098 Freiburg, Germany (Statutory registration number: HRB 4188), AARHUS UNIVERSITET, Nordee Ringgade 1, Aarhus C800, Denmark, ECOLOGIC INSTITUT gemeinnutzige GmbH, Pflazburger Strasse 43-44, Berlin 10717, Germany, EIGEN VERMOGEN VAN HET INSTITUUT VOOR NATUUR- EN BOSONDERZOEK (EV-INBO) Havenlaan 88 BUS 73, Brussel 1000, Belgium, STIFTELSEN VARLDSNATURFONDEN WWF (WWF), Ulriksdals Slott, Solna 17081 Sweden,, STICHTING WORLD BENCHMARKING ALLIANCE FOUNDATION (WBA) Prins Hendrikkade 25) Amsterdam 1012TM, Netherlands, HORIZON NUA INNOVATION (HNua) 14 Marley Rise, Rathfarnham, D16 P277, FORENINGEN IKED (IKED), Skeppsgatten19, Malmo, 201 22, Sweden, ASSO 2 INVESTING INITIATIVE (2DII) 15 rue des Halles, Paris 75011, France, LGI SUSTAINABLE INNOVATION (LGI) 6 Cite de l’Ameueublement, Paris 75011, France, SI POR SUPUESTO SL (FLC) Calle Cea Bermudez 23 Planta 1 Derecha, Madrid 28003, Spain, ETIFOR SRL (ETF) Piazza Alcide de gas[eri 41, Padova 35131, Italy, VOEDSEL ANDERS (VA), regie Beerplein 1, Antwerpen 2018, Belgium, ICLEI (Colombia, Calle 67 5220 Piso Antioquia Medellin 050034, Colombia Western Development Commission (WDC) Dillon House Ballaghderreen, Co Roscommon, Ireland, Europaische Foderation Bauwerksbegrunungsverbande -EFB, Wiedner Haupstrasse 63, Wien 1045, Austria, …. acting as processors on behalf of the Agency.

Approved third-party authorized, EUSurvey, which does not process or transfer Customer’s personal data or have these processed by third parties, outside the European Union, in line with EUSurvey Data Processing Agreement, available at: https://ec.europa.eu/eusurvey/home/privacystatement.

The legal basis for the processing activities is/are – Article 5(1)(a) of Regulation (EU) 2018/1725 because processing is necessary for the performance of a
task carried out in the public interest (or in the exercise of official authority vested in the Union institution or body [or necessary for the management and functioning of the Union institution and body2] laid down
in Union law; – Article 5(1)(d) of Regulation (EU) 2018/1725 based on your explicit prior consent for your non-mandatory personal data indicated below; – etc.]. The purpose(s) of this processing is/are to register and manage participation of relevant stakeholders of GoNaturePostive! and general public to events organized by the project consortium; collect data from registered participants to provide practical key information for long-term engagement in the project, tools, resources and to enable effective collaboration.

The following of your personal data are collected: your first name, last name, e-mail, job title, organisation, organisation type, city of residence, country of residence, potential dietary requirements and accessibility needs; nationality, date of birth, ID number e.g. only for security clearance to allow you to access the premises…]. All personal data are mandatory for the purpose(s) outlined above.

In addition, for events, the following non-mandatory personal data are collected: photos, social media accounts, web streaming, videos that will be collected during the event and might be used for related communication purposes and can only be processed based on your explicit prior consent.

Please note that you may be recorded during the event, either through web-streaming or through on-site videos. It is also possible that photographs of you will be taken during the event and might be used for related communication purposes. Upon registration, you can give your explicit consent to have your image/voice recorded and published on related communication channels. In the absence of your consent, the organiser will try to find suitable alternatives, so that you can fully take part in the event, e.g. by offering an alternative room to follow the event.

The recipients of your personal data will be or may be authorised staff of the Agency and Commission, or Commission contractors and bodies in charge of monitoring or inspection tasks in application of Union or national law (e.g. internal audits, Court of Auditors, European Anti-fraud Office (OLAF), European Public Prosecutor’s Office (EPPO), law enforcement bodies).

Your personal data will not be transferred to third countries or international organisations.

The processing of your data will not include automated decision-making (such as profiling).

The following technical and organisational security measures are in place to safeguard the processing of you personal data: Personal data are processed on a need-to-know basis by authorised staff only, with limited access rights; files are stored on secured Servers subject to the European Commission’s security Decision 2017/46 of 10 January 2017. Electronic communication and files are secured for internal communication purposes.

The contractors are bound by a specific contractual clause for any processing operations of your data on behalf of the Agency or the Commission, and by the confidentiality obligations deriving from the General Data Protection Regulation in the EU Member States (‘GDPR’ Regulation (EU) 2016/679).

Your personal data will be kept for a maximum period of 5 years from the end of the implementation of the tasks within the service contract (end foreseen for December 2027). Data will be deleted at the end of this period.

You have the right to access your personal data and to request your personal data to be rectified, if the data is inaccurate or incomplete; where applicable, you have the right to request restriction or to object to processing, to request a copy or erasure of your personal data held by the data controller. If processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent before its withdrawal.

Your request to exercise one of the above rights will be dealt with without undue delay and within one month.

Your right to information, access, rectification, erasure, restriction or objection to processing, communication of a personal data breach or confidentiality of electronic communications may be restricted only under certain specific conditions as set out in the applicable Restriction Decision in accordance with Article 25 of Regulation (EU) 2018/1725.

If you have any queries concerning the processing of your personal data, you may address them to you may address them to REA Data Protection Officer (DPO): REA-DATAPROTECTION-OFFICER@ec.europa.eu. In case of conflict, you can address your complaint to the European Data Protection Supervisor: EDPS@edps.europa.eu

 

---

 

1. Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L295/39 of 21.11.2018).