1. SECURITY AND PRIVACY POLICY
 

1.1. Protection of your personal data:

• As part of its duties, particularly the services accessible on this website, EFIS Centre, as Data
  Controller, may collect and process personal data.
• All processing of personal data carried out in the context of the accessible services complies with
  the local regulations applicable to the protection of personal data and provisions and the General
  Data Protection Regulations (EU Regulation 2016/679) or GDPR.
• To ensure the proper application of these rules, EFIS Centre has appointed the Operations
  Manager as Data Protection Officer.
• EFIS Centre also implements appropriate internal procedures to raise awareness among its
  employees and ensure compliance with these rules within its organisation.

1.2. Commitments regarding the protection of personal data:

• EFIS Centre is committed to ensuring a high level of protection for the personal data of the ST4TE
  (Strategies for Just and Equitable Transition in Europe) project (hereafter ‘ST4TE’) contacts and of
  any other person whose personal data it processes.
• EFIS Centre undertakes to comply with the regulations applicable to all personal data processing
  it carries out. More specifically, EFIS Centre undertakes to respect the following principles:
  
  • EFIS Centre shall implement appropriate technical and organisational measures to ensure
    a level of security commensurate with the risk inherent in its processing operations, to
    comply with regulatory requirements and to protect the rights and data of the persons
    concerned from the design of processing operations.
  • EFIS Centre contractually imposes the same level of personal data protection on ST4TE
    subcontractors (service providers, suppliers, etc.).
  • EFIS Centre undertakes to respect any other principle required by the applicable regulations
    on the protection of personal data, and more specifically concerning the rights conferred
    on the data subjects, the storage periods for personal data and the obligations relating to
    cross-border transfers of personal data.
     

2. PURPOSE OF THE DATA THAT MAY BE COLLECTED
 

2.1. Means of collecting your data:
Within the scope of ST4TE, you may provide us with your personal data by various means, including on
our website and by filling out various data collection forms and surveys, subscribing to our e-newsletter,
creating a profile in the ST4TE portal, or any other means by which you choose to share your personal
data with us.
 

2.2. Processing purposes and legal bases:
Within the scope of ST4TE, your data will be mainly used for the purpose of communication and
dissemination purposes and for tailoring specific aspects of the project’s products and outcomes. In
addition to the cases where your consent has been obtained, the processing of your data for the purposes
mentioned above is necessary:
 

• to ensure that you properly received the ST4TE communication products
• to contact you about any ST4TE-related purpose or event
• for statistical purposes
• to allow you to register and properly use the ST4TE portal
   

3. PERSONAL DATA STORAGE
EFIS Centre undertakes to keep your personal data for a period not exceeding that necessary for the
purposes for which it is processed. In addition, EFIS Centre keeps your personal data in accordance with
the retention periods imposed by applicable laws in force.
These storage periods are defined according to the processing purposes implemented by EFIS Centre and
consider in particular the applicable legal provisions imposing a precise storage period for certain
categories of data, any applicable limitation periods and recommendations concerning certain categories
of data processing.
 

4. ACCESS TO YOUR PERSONAL DATA
Recipients of your data:
The data collected on the website may be communicated to the EFIS Centre's authorised personnel,
partners or auxiliary service providers in the context of the performance of all or part of the services
referred to above. We remind you that in this context, EFIS Centre asks its service providers to implement
strict confidentiality and data protection measures.
Data transfers outside the European Union:
If this should be the case, EFIS Centre undertakes to guarantee the protection of your data in accordance
with the strictest rules, in particular by signing, on a case-by-case basis, contractual clauses based on the
European Commission's model, or any other mechanism in accordance with the GDPR, provided that your
personal data are processed by a service provider outside the European Economic Area and whose
country is not considered by the European Commission as ensuring an adequate level of protection.

5. YOUR RIGHTS
In accordance with the applicable regulations on the protection of personal data, you may, at any time,
exercise your rights of access, rectification, deletion of data concerning you as well as your rights to limit
and oppose the processing and portability of your personal data. In addition, you have the legal right to
define regarding the handling of your personal data following death. These rights can be exercised by
email to neve@efiscentre.eu
In this context, we ask you to accompany your request with the elements necessary for your identification
(name, first name, e-mail) and any other information necessary to confirm your identity. For certain
specific services, these rights may be exercised directly online (management of your user profile, etc.).
You also have a right of appeal to (applicable body) if the applicable regulations on the protection of
Personal Data are breached, particularly the GDPR. You can exercise your rights, withdraw your consent,
or address any questions or complaints via the following email: neve@efiscentre.eu
Where required by law, your data will only be used for electronic marketing purposes with your explicit
consent. In addition, if you no longer wish to receive ST4TE electronic newsletter by e-mail, you can click
on the unsubscribe link at the bottom of each communication.

6. IT SECURITY
Ensuring the security and confidentiality of the personal data you entrust to us is a priority. We therefore
implement all appropriate technical and organisational measures, having regard to the nature, scope and
context of the personal data you communicate to us and the risks presented by their processing, to
preserve the security of your personal data and, in particular, to prevent any accidental or unlawful
destruction, loss, alteration, disclosure, intrusion or unauthorised access to such data.
The security and confidentiality of personal data are based on everyone's best practices. This is why we
invite you not to share your passwords with third parties, to systematically log out of your profile and to
close your browser window at the end of your work session, especially if you access the Internet from a
computer shared with other people. This will prevent other users from accessing your personal
information.
 

7. LINKS TO OTHER SITES
On several pages of the ST4TE website you can click to access other websites. We advise you to read the
policy of these non-ST4TE sites regarding the processing and protection of personal data, as the conditions
on these sites may differ from the conditions of ST4TE. EFIS Centre and the ST4TE consortium will not be
responsible for the processing of personal data by these other websites.
 

8. CONTACT
If you have any further questions about this policy or how EFIS Centre handles your personal data, please
contact email us to neve@efiscentre.eu

9. MODIFICATIONS
We reserve the right to adapt the personal data protection policy and undertake to inform you on its
website of any changes or additions. This policy was last updated in March 2024.