Data Privacy Statement
In accordance with current data protection regulations, Eurac Research, as Data Controller (hereinafter the Controller), hereby provides you (the Data Subject) with information about how your data is processed. All personal data is dealt with in compliance with EU Regulation No. 2016/679 (GDPR) and the national legislation.
1. Purpose and legal basis for the Processing:
Any and all personal data that is in the possession of the Controller, or that may be requested by the Controller, is necessary to register as a user with the Eurac Research CLARIN Centre (ERCC) and will only be used for the purposes of identifying the user and checking their authorization when using the services provided by the ERCC. The legal basis for the processing of your personal data for the purposes indicated above is your consent to the processing of your personal data. By ticking the boxes at the end of this policy you give your consent to the data processing. You can withdraw the consent at any time by contacting the data controller.
2. Information on the Retention Period of Personal Data
Personal data will be stored for the time necessary to carry out the purposes for which it was collected. When this period has been reached, the data shall be deleted or made anonymous.
3. Mandatory or Voluntary Communication of Data and Possible Consequences of a Failure to Provide it
The provision of personal data is voluntary, but refusal could interfere with the correct performance of the purposes, thus rendering the registration impossible.
4. Methods of processing
Your personal data will be recorded and stored in electronic format. This knowledge and storage of personal data of the Data Subject is necessary in order to process it according to the above-stated purposes. All changes to such data should be immediately communicated to Eurac Research in order to ensure the data’s correct processing.
Data concerned:
The ERCC uses a federated login. This means that your Identity Provider (your university or research institution) that you use to log in with the ERCC will automatically provide some data about you. Of this we will save your e-mail address (so we will be able to contact you if needed) and a unique identifier, which might also be the e-mail address or something different, e.g. your username at your institution. We also save which institution you are affiliated with as this is part of the unique identifier. All data processing will be done in accordance with the GÉANT Code of Conduct for Service Providers.
The ERCC services uses cookies and the tracking plugin Matomo to gather statistics about the use of our services. These data will be anonymized automatically.
5. Recipients of the data processed and transfer of data:
The recipients of the data are the persons in charge of data processing activities (staff members from the Institute for Applied Linguistics -Eurac Research), authorized and instructed by the data controller to data processing activities.
Your data will not be communicated to and processed by third parties.
6. Transfer of data:
Your personal data will not be transferred to any country or international organization outside the European Union.
7. Presence of Automated Decision-Making Process
There are no automated decision-making processes that could produce an adverse legal effect on the data subject or have a similarly significant negative impact upon them.
8. Data Controller and Data Protection Officer (DPO)
Data Controller: Eurac Research, Viale Druso 1, 39100 Bolzano
You can contact the DPO under the following e-mail Address: privacy@eurac.edu
9.The Data Subject's Rights:
At any time the data subject has the right to request access to their personal data, and to correct or delete that data, or to limit its processing. In addition, the data subject has the right to data portability, as well as the right to lodge a complaint with a supervisory authority. When the data processing is based on consent, the data subject has the right to withdraw that consent at any time. The data subject may also exercise all other rights pursuant to current data protection regulations (art. 15 et seq. GDPR) by writing to the email: privacy@eurac.edu.
You may cancel your registration at any time and revoke your consent to the storage of your data. You will then no longer be able to use those ERCC services that require login. Revocation of consent to the registration constitutes a revocation of consent for tracking your data; separated revocations are not possible.