Privacy policy
Data Controllers
This Privacy Notice explains how personal data are processed in connection with the PERIFORMANCE website (“Website”). BBMRI-ERIC as Coordinator of the Project PERIFORMANCE (having Grant Agreement ID: 101216808, DOI 10.3030/101216808) and the Consortium partners or affiliated entities are committed to ensuring that personal data are processed in accordance with applicable data protection legislation, including European Union Regulation (EU) 2016/679 (“GDPR”).
The Website is operated within the framework of the PERIFORMANCE Consortium and technically hosted and administered by:
BBMRI-ERIC
Neue Stiftingtalstrasse 2/B/6
8010 Graz, Austria
The Host Institution acts as the provider of the technical infrastructure and administration of the Website.
Consortium members independently publishing content on the Website remain individually responsible for ensuring that any personal data contained in the content they upload comply with applicable data protection and confidentiality obligations.
BBMRI-ERIC acts as Data Controller for the technical and usage data, while Consortium members act as Data Controllers for the contact data and for the content they provide.
Categories of Personal Data Processed
The Website may process the following categories of personal data:
a) Technical and Usage Data
When users access the Website, certain technical information may be automatically collected, including:
- IP address;
- browser type and version;
- operating system;
- date and time of access;
- server log information.
b) Contact information
Where users contact the Consortium through forms or email addresses published on the Website, the following data may be processed:
- Name
- Email address
c) Contributor Information
Where Consortium members or contributors publish content on the Website, personal data associated with authorship or professional identification may be displayed, such as:
- name;
- title;
- institutional affiliation;
- professional contact details.
Purposes and Legal Bases for Processing
Personal data are processed for the following purposes:
Purpose | Legal Basis |
|---|---|
Technical operation and security of the Website | Legitimate interests (Art. 6(1)(f) GDPR) |
Responding to inquiries and communications | Legitimate interests and/or pre-contractual measures (Art. 6(1)(f) and (b) GDPR) |
Dissemination of project activities and research outputs | Legitimate interests (Art. 6(1)(f) GDPR) |
Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
Management of cookies or analytics, where applicable | Consent where required (Art. 6(1)(a) GDPR) |
Content Published by Consortium Members
Content made available on the Website may be independently uploaded and managed by Consortium members or contributors.
Each contributor remains solely responsible for ensuring that:
- any personal data included in uploaded materials are lawfully processed;
- appropriate legal bases exist for publication;
- necessary information notices and permissions have been obtained where required.
The Host Institution does not systematically review or pre-approve third-party content prior to publication.
Data Sharing and Recipients
Personal data may be accessible to:
- authorized personnel of the Host Institution;
- authorized Consortium members involved in Website administration or communication activities;
- IT service providers acting under appropriate contractual safeguards;
- competent public authorities where required by law.
Personal data will not be sold or used for commercial advertising purposes.
International Transfers
Personal data are generally processed within the European Economic Area (EEA).
If data are transferred outside the EEA, appropriate safeguards in accordance with the GDPR shall be implemented.
Data Retention
Personal data shall be retained only for as long as necessary for the purposes for which they were collected. Namely:
- Technical and Usage Data: technical logs, IP addresses, and related usage data are retained for a limited period necessary to ensure the security, integrity, and proper functioning of the Website.
- Contact Information: Personal data submitted through contact forms, email communications, or similar interactions are retained for the duration necessary to manage and respond to the request and, thereafter, for a maximum period of 48 months, unless further retention is required by law or justified by ongoing project-related activities.
- Contributor Information: Contributor identification data published in connection with project activities, publications, or Website content may be retained for the duration of the PERIFORMANCE project and for an additional period necessary for scientific documentation, reporting obligations, dissemination purposes, or archiving in the public interest, unless removal is requested and legally justified.
Where applicable, data may be retained longer where required to comply with legal, regulatory, contractual, or audit obligations, as needed by law enforcement authorities and/or regulatory bodies.
Data Subject Rights
Under applicable data protection law, individuals may have the right to:
- access their personal data;
- request rectification or erasure;
- restrict or object to processing;
- request data portability where applicable;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a competent supervisory authority.
Requests may be submitted to: dpo@bbmri-eric.eu
Security Measures
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
Third-Party Links
The Website may contain links to external websites operated by third parties. The Consortium and Host Institution are not responsible for the privacy practices or content of external websites.
Contact
For questions relating to this Privacy Policy or personal data processing, please contact: dpo@bbmri-eric.eu