1. What is the purpose of this privacy policy?

This document expresses ENHANCE’s commitment to guaranteeing the fundamental data protection right.

ENHANCE must process personal data to comply with the objectives defined by the Organic Law of Universities and its status. We do this by respecting the rights of our students, University Staff and those who relate to us. Therefore, in this privacy policy, we would like to describe how we process data and our commitment to comply with the regulations in this matter.

The terms used are not gender-specific.

2. Who processes your data?

The Alliance deals with data from members of different universities, and we are faced with a case of co-responsibility.

Data rights questions corresponding to each university should be addressed to the user’s home University’s Data Protection Officer or the ENHANCE project manager, taking into account that these are the home universities :

TUB https://www.tu.berlin/

WUT https://www.pw.edu.pl/engpw

UPV http://www.upv.es/es

POLIMI https://www.polimi.it/

RWTH Aachen https://www.rwth-aachen.de/go/id/a/?lidx=1

NTNU https://www.ntnu.edu/

CHALMERS https://www.chalmers.se/en/Pages/default.aspx

Delft https://www.tudelft.nl/en/

ETH Zurich https://ethz.ch/en.html

GDAŃSK https://pg.edu.pl/en

3. How can you contact our data protection officer?

If you have any questions or concerns about how we handle your data, please contact our data protection officer at: info@enhanceuniversity.eu. They will assist and help you exercise your rights if necessary.

4. Why do we process your data? Why and on what legal basis do we process your data?

The information is processed for the administrative and academic management of ENHANCE (which includes both the external offer and the internal training of university staff), the promotion of the training offer and statistical analysis of Lifelong Learning.

In order to implement an agreement ( ENHANCE Grant Agreement from 21^st October 2020 ), Data processing is necessary involving a user and to carry appropriate measures preceding this agreement ( GDPR EU 2016/679, Article 6, Section 1b ). So that personal data can also be processed based on your implied or specific consent ( GDPR EU 2016/679, Article 6, Section 1a )

5. Who do we share your data with?

Communications and data transfers are foreseen with collaborating banks, insurance entities, departments, centres, research institutes, and collegiate and single-person bodies of ENHANCE.

Additionally, no communications or transfers of data are foreseen unless required by the authorities in accordance with the provisions of the law. Before making the data available to you, we ensure that such authorities request and access the data in accordance with the Laws.

6. How long will we keep the data?

Personal data will generally be kept if there is a link with ENHANCE, without prejudice to keeping the information blocked for three years due to possible legal responsibilities in terms of data protection.

However, personal data concerning the academic record and certifiable academic activities will be kept indefinitely to issue the corresponding certificates and safeguard the academic record.

7. What rights do our users have?

Our users can request from ENHANCE:

• Access their data, i.e., to consult and ensure that they are correct and up to date.
• The rectification of data to correct errors or deficiencies. If you exercise this right, you must tell us what we should rectify and justify if necessary.
• The deletion of the data when you consider that we should no longer process them. In this case, it is advisable to notify us of the reason for your request.
• The restriction of their processing so that we keep them blocked in a guarantee of their rights.
• Where we have processed your data on a lawful basis other than your consent, you can also object to our processing. In this case, it is advisable to tell us your reasons for this so we can assess your request.
• When possible, under the legislation conditions, you may request the right to data portability so that we can provide it to you in a format compatible with other systems.
• If you freely consented to our data processing, you could withdraw your consent in the same way.

8. How can you exercise your rights?

You can write to info@enhanceuniversity.eu. Remember to include supporting documentation if necessary.

You can also write to:

TECHNISCHE UNIVERSITAT BERLIN (TUB), established in STRASSE DES 17 JUNI 135, BERLIN 10623, Germany, VAT number : DE811231089, represented for the purposes of signing the Agreement by Silke KÖSTER-RIEMANN. A user should indicate that the message is in reference to the application process for specific mobility or other activity.

9. Who guarantees your rights? Who can you complain to?

If you wish to file a complaint or obtain additional information on the regulation of the processing of personal data in ( Dispute settlement )

If a dispute concerning the interpretation, application or validity of the Agreement cannot be settled amicably, the General Court — or, on appeal, the Court of Justice of the European Union — has sole jurisdiction. Such actions must be brought under Article 272 of the Treaty on the Functioning of the EU (TFEU).

As an exception, if such a dispute is between the Agency and NORGES TEKNISKNATURVITENSKAPELIGE UNIVERSITET NTNU, it must be brought before the courts of Brussels, Belgium.

If a dispute concerns administrative sanctions, offsetting, or an enforceable decision under Article 299 TFEU (see Articles 28 and 29), the beneficiaries must bring an action before the General Court — or, on appeal, the Court of Justice of the European Union — under Article 263 TFEU. Actions against offsetting and enforceable decisions must be brought against the Commission (not against the Agency).

It is relevant to indicate that it is the user’s responsibility to be aware of the GDPR in all cases in which they request mobility or other activities through ENHANCE, and the personal data is subsequently processed.