Your rights under the GDPR
GDPR stands for General Data Protection Regulation and came into effect on 25th May 2018. In accordance with applicable law you have the right to access, modify, extract, correct and delete your personal data if it has been collected and, for legitimate reasons, restrict and object to the processing of any of your personal data.
As you navigate around the DRIVE website, certain information about you is collected. We may use information from or about you as described below and for IT purposes, such as enhancing our website and identifying website usage trends.
However kindly note that we do not collect personal information such as your name or email address.
We only collect the following information:
Cookies, including “session cookies” and “persistent cookies”
A cookie is a piece of information sent by a website to a web browser in order to enable the website to remember certain information and preferences of previous users for future use. “Session cookies” are temporary cookies that are deleted as soon as the visitor leaves their web browser or switches off their computer. Session cookies are used to improve browsing on websites and to collect static information. “Persistent cookies” are stored on the hard disc and stay there unless they are deleted. You can refuse to accept these cookies by following your browser’s instructions; however, if you do not accept them, you may not have optimal use of the website. To learn more about cookies, please visit: http://www.allaboutcookies.org
We use Google Analytics to gather data from cookies to analyse our website traffic in order to provide better services and to set benchmarks for how we are doing in meeting DRIVE’s goals. We have now implemented Google Analytics’ GDPR recommendations in order to ensure that we meet GDPR compliance.
If you do not want your data being used by Google Analytics, you can install an opt-out add-on for your web browser: Google Analytics Opt-out Browser Add-on
As part of the registration process for our e-newsletters, we collect personal information. We use that information to keep you updated on the activities of the DRIVE project. We don’t rent or trade email lists with other organisations.
You have either subscribed to the newsletter yourself or you receive the newsletter on the basis of your position working in an organisation that can be seen to benefit from information on activities of DRIVE’s research.
We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe from general mailings at any time by clicking the unsubscribe link at the bottom of any of our emails.
We handle the following personal data:
- Your name
- Your email address
- Job title
How we transfer information
As required for the above-mentioned purposes, we may need to transfer your personal data to the following recipients:
- Subcontractors and service providers in charge of processing your personal data under our supervision
- Judicial and administrative authorities in accordance with legal or regulatory requirements and/or to respond to specific requests or orders in the framework of judicial or administrative procedures
In order to ensure an adequate level of protection of your data, those transfers are safeguarded by us in accordance with the requirement of European law as follows:
- Dreamhost (DRIVE Website hosting provider, data stored outside EEA): https://www.dreamhost.com/legal/privacy-policy/
- Mailchimp: https://mailchimp.com/legal/privacy/
- Google Analytics: https://www.google.com/analytics/terms/us.html (point 7 is about privacy)
Your personal data will generally be retained for three (3) years and in any case only for the duration that is necessary to fulfil the above mentioned purposes, unless further retention is necessary to meet legal or regulatory requirements or to the protection of our interests.
When we work with third parties who provide services on our behalf, we take steps to limit the personal data provided to them, to that which is reasonably necessary for them to perform their functions for the allowable purposes listed above. We require them to agree to only process the personal data in accordance with our instructions and to maintain the security and confidentiality of such information by applying adequate technical and organizational measures.
We use appropriate physical, managerial, and technical safeguards that are designed to protect the confidentiality, integrity and security of your data that we collect and maintain against accidental or unlawful loss, theft and misuse and unauthorized access, disclosure, alteration destruction, or any other type of unlawful processing.
You can withdraw the consent you have provided to us for the processing of your personal data at any time and free of charge by contacting us using the information provided below, or, if relating to our e-newsletters, by clicking on the unsubscribe link located at the bottom of the email.
If you have questions about your rights and choices in relation to your Personal data, or would like to request additional information, please contact firstname.lastname@example.org. We will respond to your request within a reasonable time frame as required by applicable law.
This policy was last updated on 15 February 2019.