Ulysseus partners are the controllers of individuals data. This means that Ulysseus European University alliance determines the purposes and means by which individual\u2019s data is processed. Each Ulysseus member institution is a co-controller of personal data, contact details for each partner are:<\/p>\n\n\n\n
UNIVERSITY OF SEVILLE, Calle San Fernando 4, CP 41004 Seville (Spain), <\/p>\n\n\n\n
internacionalizacion@us.es<\/a>, dpd@us.es<\/a> <\/p>\n\n\n\n UNIVERSITA DEGLI STUDI DI GENOVA, established in VIA BALBI 5, GENOVA 16126, Italy. valorint@unige.it<\/a>,\u00a0<\/p>\n\n\n\n UNIVERSITE COTE D’AZUR, established in GRAND CHATEAU 28 AVENUE VALROSE, NICE 06100, France dpo@univ-cotedazur.fr<\/a>, <\/p>\n\n\n\n TECHNICKA UNIVERZITA V KOSICIACH, established in LETNA 9, KOSICE 042 00, Slovakia. Radovan Hudak: radovan.hudak@tuke.sk<\/a>, <\/p>\n\n\n\n MCI MANAGEMENT CENTER INNSBRUCK INTERNATIONALE HOCHSCHULE GMBH, established in UNIVERSITATSSTRASSE 15, INNSBRUCK 6020, Austria. Siegfried Walch: siegfried.walch@mci.edu<\/a> and, <\/p>\n\n\n\n HAAGA-HELIA AMMATTIKORKEAKOULU OY, established in RATAPIHANTIE 13, HELSINKI 00520, Finland. Kitte Marttinnen: kitte.marttinen@haaga-helia.fi<\/a>.<\/p>\n\n\n\n Ulysseus Digital Platform is managed by the Ulysseus Digital Unit meaning that individuals personal data is processed by the Ulysseus Digital Unit for the purposes defined by the Ulysseus European University alliance. The exercise of individual\u2019s rights<\/strong> description can be found in section 10<\/strong>. <\/p>\n\n\n\n The Parties ensure compliance with the European Regulation n\u00b02016\/769 on the protection of individuals<\/strong> regarding the processing of personal data known as General Data Protection Regulation \u201cGDPR\u201d. The GDPR strengthens the rights and obligations of data controllers, data processors, data subjects and data recipients. <\/p>\n\n\n\n The Parties define and implement technical, physical or logical security measures to protect individuals\u2019 data from destruction, loss, alteration, unauthorized access, or disclosure of individuals data. <\/p>\n\n\n\n The Parties undertake to contractually impose security guarantees on its processors in particular technical measures to protect the data and the appropriate human resources.<\/p>\n\n\n\n Ulysseus parties collection includes the one directly or indirectly obtain by the Ulysseus Digital Platform and to the data collected via the website \u201chttps:\/\/ulysseus.eu\u201d its subdomains and aliases (ulysseus.eu, ulysseus.fr, ulysseus.es, ulysseus.it, ulysseus.at, ulysseus.sk and ulysseus.fi) and the Ulysseus mobile applications.<\/p>\n\n\n\n Ulysseus Digital Platform collects, stores and uses individuals\u2019 data: <\/p>\n\n\n\n Ulysseus is an alliance of university created in the scope of an Erasmus+ program which purpose is to become a fully integrated European University<\/p>\n\n\n\n As part of its work, Ulysseus Digital Platform collects individual\u2019s data in several ways: <\/p>\n\n\n\n The above can include First Name, Last Name, email, date of birth, student files, examination results, social profile, social interactions, document produced or reviewed, result of a survey.<\/p>\n\n\n\n This can include emails, names, research public identifiers, research keywords, laboratory, research publications.<\/p>\n\n\n\n As stated in section 2 of the main agreement, the Parties will keep and store the data collected the time necessary for the purpose of processing and within the limits provided by the European legislation. <\/p>\n\n\n\n Personal data within the Ulysseus Digital Platform will be kept until the purpose for which it was collected has been fulfilled (end of a contractual relationship, last activity in the absence of a permanent contractual relationship, or in case of withdrawal of individual\u2019s consent to the specific processing of the data).<\/p>\n\n\n\n Personal data is retained beyond this period only: <\/p>\n\n\n\n The Parties ensure that data is only accessible to authorized internal recipient or authorized external Parties. Recipients of student\u2019s personal data within Ulysseus are subject to a specific confidentiality obligation. <\/p>\n\n\n\n The Parties decide which recipients may have access to which data according to a defined authorization policy. <\/p>\n\n\n\n The Parties are not responsible for any damage of any kind that may result from an illicit access to personal data.<\/p>\n\n\n\n In particular, the personal data may be sent to: <\/p>\n\n\n\n Furthermore, personal data may be communicated to any authority legally entitled to know about it. In this case the Parties are not responsible for the conditions under which the staff of theses authorities’ access and use the data, according to section 3 (pg.6) of the main agreement.<\/p>\n\n\n\n The Parties reserve the right to choose whether to have data transfers outside the European Union or not. In case of a such transfer, the Parties will inform the data subjects. <\/p>\n\n\n\n The provisions relating to data transfers outside the European Union are enforceable against the Parties, except in the cases provided for in the article 49 of the GDPR. <\/p>\n\n\n\n Therefore, it is agreed that the transfers referred below are necessary for the conclusion of a contract concluded in the interest of data subject between the controller and a third Party.<\/p>\n\n\n\n Using the \u201cLog in with Orcid\u201d function will share with Orcid NPO the information of individuals connection through their service. <\/p>\n\n\n\n Using Microsoft 365 services (Sharepoint, Teams, etc.), individuals personal information might be transferred to the USA due to the Privacy Shield.<\/p>\n\n\n\n Navigation on the website is tracked with Google Analytics. Thus, the anonymized data about individuals\u2019 navigation is transmitted to Google and stored in the USA on their servers.<\/p>\n\n\n\n Under the GDPR Regulation, individuals have the rights set out in articles 12 to 21 of the GDPR Regulation. <\/p>\n\n\n\n Individuals may at any time exercise its right of access to their personal information to complete, modify, rectify or delete it or to object to its processing in accordance with applicable data protection laws. For exercising individuals\u2019 rights according to the Digital Platform data collection, the following should be follow:<\/p>\n\n\n\n A request must be sent with an identification form, either passport or any other form of identification: <\/p>\n\n\n\n To ensure the individuals data fully respect, a proof of individuals identity is required in order to avoid possible filtrations to a third Party.<\/p>\n\n\n\n2. Data processor<\/h2>\n\n\n\n
3. Protection of personal data <\/h2>\n\n\n\n
4. Inclusion of personal data in ulysseus files <\/h2>\n\n\n\n
5. Purposes for and basis upon ulysseus uses individuals\u2019 personal data<\/h2>\n\n\n\n
\n
6. Origin of the data processed <\/h2>\n\n\n\n
\n
\n
\n
\n
7. Time limit for storing personal data sharing of data <\/h2>\n\n\n\n
\n
8. Sharing of data <\/h2>\n\n\n\n
\n
9. Data transfers outside the European Union<\/h2>\n\n\n\n
10. What are individualidual\u2019s rights and how can individuals exercise them? <\/h2>\n\n\n\n
\n