The www.eusst.eu website has been created to inform the public about the EU SST, its establishment, results, actions, events and evolution, while it provides an e-mail and contact form for communication with anyone interested in the EU SST.
All personal data are dealt with in compliance with Regulation (EU) No 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the European institutions, bodies, offices and agencies and on the free movement of such data (Regulation (EU) 2018/1725).
Identity and contact details of the Controller:
European Union Agency for the Space Programme
ICT and Facility Management Department
helpdesk@euspa.europa.eu
Janovského 438/2
170 00 Prague 7 – Holesovice
Czech Republic
DPO: European Union Agency for the Space Programme (EUSPA), Data Protection Officer, dpo@euspa.europa.eu
Type of data we collect and purpose of processing
By visiting the EU SST website, the IP address of the users is collected. Also, in the event of using the “Contact us” form in order to communicate with us and/or any questionnaire/participation form in events and/or surveys, the following personal data of the sender might be collected by the Controller:
- name;
- surname;
- e-mail address;
- nationality;
- age;
- phone number;
- organisation; and
- position held.
Lawfulness and purpose of processing
The lawfulness of the processing is based on Article 5(d) of the Regulation (EU) 2018/1725. Data subjects give their consent with contacting them upon the completion of relevant communication and/or participation/survey forms by them. The aforementioned personal data might be used for reporting and statistical purposes in an anonymised way.
Data storage and duration
The data collected are stored in our server for five years. After that period the personal data stored are deleted or anonymised, unless the user withdraws his/her consent earlier.
Disclosure of data
The Controller takes all appropriate measures to safeguard the personal data collected from any unauthorised disclosure.
Recipients which have access to the personal data on the basis of the ‘need to know’ principle are restricted to:
- duly authorised bodies, namely the European Commission, the SST Partnership and their designated Operations Centres, and if needed the Council, the European Health and Digital Executive Agency and the EEAS; and
- a limited number of persons managing the SST Portal (EUSPA staff members); and
- a limited number of external contractors providing support to EUSPA activities as regards the SST Portal management (e.g. to be added) or companies providing IT support or hosting services to EUSPA.
Personal data of the website’s users are not transferred outside the EU. However, in case of communication via our social media such personal data might be transferred outside the EU by the social media providers under their terms and conditions of use.
Your rights
Website users have specific rights as “data subjects” under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the right:
• To obtain confirmation as to whether or not your personal data are being processed;
• To access your personal data and obtain detailed information on the processing;
• Of rectification of inaccurate personal data;
• Of erasure of personal data if the statutory provisions are met;
• Of restriction of processing if the statutory provisions are met;
• To data portability, where applicable;
• To withdraw the consent, without affecting the lawfulness of the processing carried out before you have withdrawn the consent.
Any request for the exercise of any of the abovementioned rights shall be addressed to helpdesk@euspa.europa.eu or in case of conflict the Data Protection Officer at dpo@euspa.europa.eu. Data subjects are kindly requested to describe their requests explicitly.
Website users also have the right to lodge a complaint to the European Data Protection Supervisor at EDPS@edps.europa.eu should they consider that the processing operations do not comply with Regulation (EU) No 2018/1725.
Social media
We use social media to present our work through widely used communications channels.
Each social media channel has its own policy on the way they process personal data of the users when they access their sites. For example, if users choose to watch one of our videos on YouTube, they will be asked for explicit consent to accept YouTube cookies; if they look at our Twitter activity on Twitter, they will be asked for explicit consent to accept Twitter cookies; the same applies for LinkedIn.
If users have any concerns or questions about the use of their personal data, they should read carefully the privacy policies of the social media channels before using them.