Privacy Policy

This Privacy Policy describes the personal data processing operations carried out on and through this website, www.datatools4heart.eu (‘Website’).

Please note that this Privacy Policy applies to anyone who accesses and visits, or otherwise interacts with, the Website (‘Users’).

All processing activities will be carried out in compliance with the applicable data protection legislation, with particular regard to the Regulation (EU) 2016/679 (‘GDPR’).

 

1. DATA CONTROLLER

The Controller is the DataTools4Heart Consortium, as made up by all partners listed here (‘Consortium’ or ‘Controller’). Users can at any time send requests to one or more partners, using the individual contacts which are published for each Consortium member.

 

2. THE WEBSITE

This Website aims to provide information and updates regarding DataTools4heart, a project funded by the European Union’s Horizon Europe Framework under Grant Agreement no. 101057849.

It is designed to minimize the collection and processing of Users’ personal data.

 

3. COOKIES

A cookie is a small file, typically made up of letters and numbers, downloaded on to a device when the User accesses a website. Cookies are then sent back to the originating website on each subsequent visit by the User. Cookies are useful, therefore, because they allow a website to recognize a User’s device and the choices and settings associated to it.

Some cookies are strictly necessary for the correct functioning of Internet and the Website and do not require User’s consent, such as those ensuring web security. Other types of cookies are still important, but not necessary and so can be installed only insofar the Users provided their consent.

This Website installs cookies only to allow the Users to flawlessly navigate through its pages and sections and to smoothly enjoy its contents, as well as to generate fully anonymous statistics regarding the volume of visits. These cookies can be used without User’s consent.

 

4. CATEGORIES OF PERSONAL DATA COLLECTED

 

Internet data

Computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data needed for the use of Internet communication protocols (e.g. IP addresses, Browser type, Operating System, the time of access and period of User’s staying on a single page). These technical / IT data are collected through cookies and used only in an aggregated and not immediately identifiable manner and can be used to ascertain responsibilities in case of crimes, or upon public authorities’ request.

 

Personal data provided by the User

There are few sections of the Website (e.g. ‘Contact us’) where Users can freely provide some personal data (e.g. name, surname, email address, working information) for the purposes set out below.

 

5. PURPOSE AND LEGAL BASES OF THE PROCESSING

The User’s personal data will be processed solely for the following purposes:

1. allowing the User to navigate the Website easily and seamlessly. This processing is necessary to run the Website and to allow the User to access its contents, according to Art. 6.1, b) of the GDPR;
2. fulfill any request made by the User either through the contact form available on the Website (link) or by using the general e-mail info@datatools4heart.eu, according to Art. 6.1, b) of the GDPR;
3. complying with decisions and orders issued by competent authorities, as well as with the obligations set forth by applicable laws and regulations, pursuant to Art. 6.1, c) of the GDPR;
4. pursuing the Consortium’s or any of its Partners’ legitimate interest to establish or defend legal claims, as per Art. 6.1, f) of the GDPR.

 

6. METHODS OF THE PROCESSING AND DATA SECURITY

The personal data are collected and processed lawfully and fairly, solely for the purposes described above and in accordance with the fundamental principles established by the applicable legislation.

Personal data may be processed either manually, through information technology tools or electronically, in any case under technical and organizational measures that enable ensuring their security and confidentiality, especially for the purposes of preventing any risk arising from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data.

Processing activities will be carried out, under the Consortium’s control, only by personnel duly authorized to access and process the Users’ personal data in accordance with specific data protection and security instructions provided by each Partner, with a particular view to safeguarding the rights of the Users under the GDPR.

Under no circumstances personal data may undergo automated decision-making processes, including profiling.

 

7. COMMUNICATIONS TO THIRD PARTIES

The personal data collected by the Consortium will not be shared or communicated to third parties, unless upon specific consent of the data subject, or as otherwise required by applicable laws.

Should the communication to vendors which support the Consortiums (e.g. service providers, hosting providers, IT companies, communication agencies) be necessary for organizational or administrative or IT and maintenance needs relating to the Website, it will be the Controller’s responsibility to appoint such parties as data processors by virtue of their capacity, experience and reliability, as per Art. 28 of the GDPR.

It is understood that the Users’ personal data can be made available to third parties, such as public or judicial authorities, whenever this is required by applicable law or by an order issued by them.

 

8. DATA RETENTION

1. Internet data will be kept for no longer than 7 days;
2. personal data provided through the contact form will be retained for no longer than 2 months after fulfilling the relevant request.

Subject to the above, Users’ data will be kept for those further periods which are required or expressly permitted by applicable laws and regulations, with particular reference to the fulfilment of orders issued by competent authorities and the enforcement and/or protection of the Controller’s rights (consistent with the retention periods and statutes of limitations provided for by the law), where necessary. When no longer necessary, the data will be immediately cancelled or made anonymous.

 

9. TRANSFER OF DATA ABROAD

The User’s personal data will not be transferred outside the European Economic Area (hereinafter, the ‘EEA’).

In any case, should the need to transfer Users’ data to third countries arise in the future for any reason, the relevant transmission will be subject to specific data protection guarantees by the Consortium, as required by the law, e.g. through the adoption of Standard Contractual Clauses as approved by the European Commission, or other equivalent safeguards.

 

10. REDIRECT TO OTHER WEBSITES

The Website may incorporate links which allow the User to connect to other websites run by third parties. The Controller is not responsible for the data processing carried out through and/or in connection with such third parties’ websites.

Therefore, each User who accesses other web pages through the Website must carefully read their privacy policies to better understand how their personal data will be processed by the third parties which, as autonomous controllers, will provide and manage such websites.

 

11. DATA SUBJECTS’ RIGHTS

The Users can exercise their rights at any time, including:

1. accessing their personal data, obtaining evidence – among others – of the purposes pursued by the Consortium, the categories of data involved, the recipients to whom they may be disclosed, the applicable storage period, the existence of automated decision-making processes;
2. having incorrect personal data referred to them rectified without delay;
3. having their data erased in the cases provided for by the law;
4. obtaining restrictions to processing, where possible;
5. requesting portability of the data provided to the Consortium, i.e. receiving them in a structured, commonly used and machine-readable format, also for transmitting such data to another controller, without any hindrance by the Controller, in all situations where it is required by the law in force;
6. lodging a complaint to the competent Supervisory Authorities (here is an updated list of DPAs in Europe).

To exercise these rights, or for any further information and/or clarifications, please write to the Consortium, by sending an email to info@datatools4heart.eu, or to any of the partners listed here.

 

12. POLICY UPDATING

This Policy may be updated periodically at the Consortium’s sole discretion. Therefore, Users are recommended to read it every time they access the Website.

Below is highlighted the date when the last version of this Policy has been uploaded.

 

Last Update: 31/03/2023