Regulation (EU) 2016/679, the “General Data Protection Regulation” (hereinafter “GDPR”), provides that everyone has the right to the protection of personal data concerning him or her. In compliance with Article 13 of the EU Regulation 2016/679, the Universitat Pompeu Fabra (hereinafter “UPF”) provides those who fill out the Contact and Report form (hereinafter “data subjects”) with the following information.
Data controller
The Data controller is Universitat Pompeu Fabra – Carrer de la Mercè 12, Barcelona (Spain) ; email: dpd@upf.edu.
Contact details of the Data Protection Officer (DPO)
The DPO can be contacted to request information on personal data at the following email address: dpo@upf.edu.
Purpose of the processing and legal basis
UPF processes personal data as part of the performance of its public interest tasks (teaching, academic research and administration purposes) according to Article 6 [1], point e) of the GDPR. Within the JuLIA Project, personal data are processed to identify and contact those who report a legal case of interest to the project itself or who request more information on the same.
Categories of processed data
Personal data requested as mandatory: first name, last name, email address; personal data requested as optional: title and institution of affiliation. The sending of data through this form entails implicitly the automated acquisition of the following information: IP addresses and/or the domain names of the computer or device used to connect with this web site; date and time of the data submission.
Acquisition of data
The provision of personal data is essential to achieve the purposes mentioned above.
Data processing methods
The processing of personal data shall be carried out manually and by automated means by authorised staff, according to their tasks. Personal data shall be processed lawfully, fairly and transparently, confidentially, in a manner that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (GDPR, article 5[1]). No profiling is carried out, and decision are not taken by automated means.
Recipients of personal data
For the purposes mentioned above personal data may be disclosed to the Coordination Unit and Project Management Team established at UPF. Personal data will not be transferred in any way to countries outside the EU.
Period of storage
Personal data will be stored as long as necessary to fulfil the purposes as mentioned in previous point 3 and, in particular they will be stored for the whole duration of the project.
Rights of the data subjects
The data subject shall exercise the rights referred to in article 15 et seq. of the GDPR at any time. In particular, data subjects have the following rights: access to his/her own personal data and to other information; rectification of his/her own personal data when inaccurate and/or their integration when incomplete; erasure of his/her own personal data, except when UPF is obliged to data storage to comply with article 17 [3] of the GDPR; restriction of processing as per article 18 of the GDPR; object to processing of personal data concerning him or her when allowed. To exercise their rights, please, write an email to: dpd@upf.edu.
This is without prejudice to the right to lodge a complaint with the Supervisory Authority in accordance with article 77 of GDPR.
