About the project:
This research is conducted by the team members of the project “Identity Management in PUbLic Services” (hereinafter “IMPULSE” or “Project”). IMPULSE is a 36-month research project funded by the Horizon 2020 Programme of the European Union. The Project is composed by 16 European partners (hereinafter the “Consortium”) and its goals are:
(1) Understanding the landscape of existing eID (electronic IDentification) solutions in different European countries. eID refers to the different ways a person may prove their identity to access and use online services.
(2) Evaluating the adoption and impact of eID solutions based on Artificial Intelligence (AI) and Blockchain (BC). AI and BC are two different types of technology proposed to make eID safer and more trustworthy for people.
To achieve these research goals, the Consortium will study 6 pilot cases in the following countries: Bulgaria, Denmark, Iceland, Italy, and Spain. Each case will be designed using the data from questionnaires, interviews, and workshops.
As a part of the work of the IMPULSE project, the Consortium, is committed to conducting pilot activities. In this respect, the Consortium would be pleased to invite you to participate to the following activity: the collection of samples (photographs) of ID documents among the IMPULSE partners in the countries where the pilots will take place (i.e., Italy, Spain, Bulgaria, Iceland and Denmark).
In light of the above, TREE TECHNOLOGY S.A. shall be the Data Controller of your personal data. TREE TECHNOLOGY S.A. is committed to taking its responsibility regarding the security and privacy of Personal Data very seriously (as well as the Consortium as whole) and is going to be transparent about the type of data it collects and how it is being handled.
Pursuant to article 5 of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Processing of the Personal Data carried out for the performance of the research activities indicated above for the purposes of the Project will be based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and accountability.
To this extent, please read the following Privacy Notice (hereinafter the “Privacy Notice”) that explains how your personal data will be processed and protected by the Controller.
Any term indicated in capital letter shall have the meaning attributed to it within the GDPR, or otherwise provided hereto.
Please, feel free to contact us at javier.gutierrez[at]treetk.com in case you have doubts and you need clarifications.
If you would like to exercise your rights under GDPR, or if you have comments, questions or concerns, or if you would like to submit a complaint regarding the collection and use of your Personal Data, please feel free to contact the following email address: javier.gutierrez[at]treetk.com
The Data Controller of your Personal Data will be TREE TECHNOLOGY S.A.
Personal data processing and lawful basis:
The Controller will only process the Personal Data that you will voluntarily and directly decide to provide and/or disclose to the same in connection and/or related to the collection of ID document samples such as, for example, your name, surname, ID number.
The lawful basis pursuant to which the Controller will process your Personal Data shall be your free and informed consent to the data processing itself given by you by signing the Information Sheet. Please note that you are free to give your consent as well as to deny it - article 6, paragraph 1 letter a and article 9, paragraph 2 letter a of GDPR .
Furthermore, TREE TECHNOLOGY S.A. may use your Personal Data to comply with its tax and other legal obligations, including in terms of invoicing, accounting and archiving (article 6, paragraph 1 letter c of GDPR).
Purpose of the data processing:
The Processing of your Personal Data will be limited to the extent necessary to perform each and all of the activities connected and related to pilot activities.
Any other further processing of your Personal Data will be excluded without your previous consent.
Recipients of Personal Data:
Your Personal Data may be accessed, for the purposes referred above by:
- subjects, bodies or authorities to which the Controller is obliged to communicate your Personal Data pursuant to any applicable law;
- our repository (Microsoft Sharepoint) provider.
The Controller may also share your information with the European Commission or with competent legal and/or fiscal authorities for legitimate reasons.
Personal Data transfer to third countries:
At the moment the Consortium does not provide for the transfer of data to third countries. However, this aspect will be subject to continuous monitoring and updating.
In any case you have the right to object to or opt out of such transfer at any time.
Data Retention and data security:
Those Personal Data processed for the purposes set out in section “Purposes of the data processing” will be kept for the time strictly necessary to achieve the purposes stated therein. The Controller will store your information for twelve months after the end of your participation, or twelve months after our last contact with you, or the retention period required by law, whichever is longest, and for the applicable statute of limitations period thereafter.
Be aware that if you want to leave the research project, your personal data will continue to be processed throughout the research project unless, by exercising your right to withdraw your consent, you make an explicit request that they must be deleted at the following email address address: javier.gutierrez[at]treetk.com
In any case, to ensure the best level of protection of your Personal Data we will apply all the best physical and logical security measures internally, and our servers are subscribed from the most established cloud providers and protected through state-of-the-art security measures.
Data subject rights:
Pursuant to the GDPR, you have a number of rights concerning the Personal Data we hold about you. If you wish to exercise any of these rights, please contact our Data Protection Officer using the contact details set out above. In particular, you have the right to be informed, of access, of rectification, of erasure, to restrict processing activities, of data portability, to lodge a complaint, to withdraw your consent, and to object to processing.
Where appropriate, we will notify you of any changes to this Privacy Notice, by email. This Privacy Notice was last updated on 21st July 2021