Protection of personal data

To become a member of our community, you are required to complete a small survey. This collects personal information along with other information relevant to subsequent surveys. We ask for your email address to send you survey invitations. The information we ask for, such as name, address, gender, and date of birth, helps us choose which surveys to invite you to.

I have been informed that I have the right to object to the processing of personal data concerning me and to request the deletion of the data. In order to exercise these rights, I can address an online request to the email address survey_ro@daedalusonline.eu with the text DATA PROCESSING REFUSAL. I am also granted the right to address the courts.

Extract from Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC

General Data Protection Regulation

CHAPTER III: The rights of the data subject

Section 2: Information and access to personal data

Art. 13: Information to be provided if personal data are collected from the data subject

1. Where personal data concerning a data subject are collected from that data subject, the controller shall, when obtaining such personal data, provide the data subject with all the following information:

a) the identity and contact details of the operator and, as the case may be, of his representative;

b) the contact details of the data protection officer, as the case may be;

c) the purposes for which the personal data are processed, as well as the legal basis of the processing;

d) where the processing is carried out pursuant to Article 6 (1) (f), the legitimate interests pursued by the controller or a third party;

e) the recipients or categories of recipients of personal data;

f) where applicable, the intention of the controller to transfer personal data to a third country or an international organization and the existence or absence of a Commission decision on suitability or, in the case of transfers referred to in Article 46 or 47 or Article 49 (1) (1) second subparagraph, a reference to the appropriate or appropriate guarantees and to the means of obtaining a copy thereof, if they have been made available.

2. In addition to the information referred to in paragraph 1, when the personal data are obtained, the controller shall provide the data subject with the following additional information necessary to ensure fair and transparent processing:

a) the period for which the personal data will be stored or, if this is not possible, the criteria used to establish this period;

b) the existence of the right to request from the controller, regarding the personal data regarding the data subject, access to them, rectification or deletion or restriction of processing or the right to oppose the processing, as well as the right to data portability;

c) where the processing is based on Article 6 (1) (a) or Article 9 (2) (a), the existence of the right to withdraw consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of the consent before its withdrawal;

d) the right to lodge a complaint with a supervisory authority;

e) whether the provision of personal data is a legal or contractual obligation or an obligation necessary for the conclusion of a contract, as well as whether the data subject is obliged to provide such personal data and what are the possible consequences of non-compliance with this obligation;

f) the existence of an automated decision-making process including profiling, referred to in Article 22 (1) and (4), as well as, at least in those cases, relevant information on the logic used and on the importance and expected consequences of such processing for the data subject.

3. If the controller intends to further process personal data for a purpose other than that for which they were collected, the controller shall provide the data subject, before such further processing, with information on that secondary purpose and any additional information. in accordance with paragraph 2.

4. Paragraphs 1, 2 and 3 shall not apply if and to the extent that the data subject already holds that information.

Art. 14: Information to be provided if personal data have not been obtained from the data subject

(1) If personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information: a) the identity and contact details of the controller and, where applicable, of his representative;

b) the contact details of the data protection officer, as the case may be;

c) the purposes for which the personal data are processed, as well as the legal basis of the processing;

d) the categories of personal data concerned;

e) the recipients or categories of recipients of personal data, as the case may be;

f) where applicable, the intention of the controller to transfer personal data to a recipient in a third country or an international organization and the existence or absence of a Commission decision on the appropriateness or, in the case of transfers referred to in Article 46 or 47, or in the second subparagraph of Article 49 (1), a reference to the appropriate or appropriate guarantees and to the means of obtaining a copy thereof, if they have been made available.

2. In addition to the information referred to in paragraph 1, the controller shall provide the data subject with the following information necessary to ensure fair and transparent processing in respect of the data subject:

a) the period for which the personal data will be stored or, if this is not possible, the criteria used to establish this period;

b) where the processing is carried out pursuant to Article 6 (1) (f), the legitimate interests pursued by the controller or a third party;

c) the existence of the right to request from the controller, regarding the personal data regarding the data subject, access to them, rectification or deletion or restriction of processing and the right to oppose the processing, as well as the right to data portability;

d) where the processing is based on Article 6 (1) (a) or Article 9 (2) (a), the existence of the right to withdraw consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of the consent before its withdrawal;

e) the right to lodge a complaint with a supervisory authority;

f) the source from which the personal data come and, if applicable, if they come from publicly available sources;

g) the existence of an automated decision-making process including profiling, referred to in Article 22 (1) and (4), as well as, at least in those cases, relevant information on the logic used and on the importance and expected consequences of such processing for the data subject.

3. The controller shall provide the information referred to in paragraphs 1 and 2: a) within a reasonable time after obtaining personal data, but not more than one month, taking into account the specific circumstances in which they are processed. personal data;

b) if the personal data are to be used for communication with the data subject, at the latest at the time of the first communication to the data subject concerned; or

c) if it is intended to disclose personal data to another recipient, at the latest on the date on which they are first disclosed.

4. If the controller intends to further process personal data for a purpose other than that for which they were obtained, the controller shall provide the data subject, before such further processing, with information on that secondary purpose and any additional information. in accordance with paragraph 2.

5. Paragraphs 1 to 4 shall not apply if and to the extent that:

a) the data subject already has the information;

b) the provision of such information proves to be impossible or would involve disproportionate efforts, in particular in the case of processing for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, subject to the conditions and guarantees provided in Article 89 (1), or to the extent that the obligation referred to in paragraph 1 of this Article is likely to make it impossible or seriously impair the achievement of the objectives of such processing. In such cases, the controller shall take appropriate measures to protect the rights, the freedoms and legitimate interests of the data subject, including making the information available to the public;

c) the obtaining or disclosure of data is expressly provided for by Union or national law to which the controller is subject and which provides for appropriate measures to protect the legitimate interests of the data subject; or d) where personal data must remain confidential by virtue of a statutory obligation of professional secrecy governed by Union or national law, including a legal obligation to maintain secrecy.

Art. 15: The right of access of the data subject

1. The data subject shall have the right to obtain confirmation from the controller whether or not personal data concerning him or her are being processed and, if so, access to such data and to the following information:

a) the purposes of the processing;

b) the categories of personal data concerned;

c) the recipients or categories of recipients to whom personal data have been or are to be disclosed, in particular recipients from third countries or international organizations;

d) where possible, the period for which personal data are expected to be stored or, if this is not possible, the criteria used to establish this period;

e) the existence of the right to request the operator to rectify or delete personal data or to restrict the processing of personal data relating to the data subject or the right to oppose the processing;

f) the right to lodge a complaint with a supervisory authority;

g) in case the personal data are not collected from the data subject, any available information regarding their source;

h) the existence of an automated decision-making process including profiling, referred to in Article 22 (1) and (4), as well as, at least in those cases, relevant information on the logic used and on the importance and expected consequences of such processing for the data subject.

2. Where personal data are transferred to a third country or an international organization, the data subject shall have the right to be informed of the appropriate safeguards under Article 46 concerning the transfer.

(3) The operator shall provide a copy of the personal data subject to processing. For any other copies requested by the data subject, the operator may charge a reasonable fee, based on administrative costs. If the data subject submits the application in electronic format and unless the data subject requests another format, the information shall be provided in a commonly used electronic format.

4. The right to obtain a copy referred to in paragraph 3 shall be without prejudice to the rights and freedoms of others.

Section 3: Correction and deletion

Art. 16: The right to rectification

The data subject has the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning him. Taking into account the purposes for which the data were processed, the data subject has the right to obtain the completion of personal data which are incomplete, including by providing an additional statement.

Art. 17: The right to erasure of data (“the right to be forgotten”)

(1) The data subject has the right to obtain from the controller the deletion of personal data concerning him, without undue delay, and the controller has the obligation to delete personal data without undue delay if one of the following reasons applies :

a) personal data are no longer necessary for the purposes for which they were collected or processed;

(b) the data subject withdraws the consent on the basis of which the processing takes place in accordance with Article 6 (1) (a) or Article 9 (2) (a) and there is no other legal basis for the processing;

(c) the data subject opposes the processing pursuant to Article 21 (1) and there are no legitimate reasons prevailing in respect of the processing or the data subject opposes the processing pursuant to Article 21 (2);

d) personal data have been processed illegally;

e) personal data must be deleted in order to comply with a legal obligation incumbent on the controller under Union or national law to which the controller is subject;

f) personal data have been collected in connection with the provision of information society services referred to in Article 8 (1).

2. If the controller has made his personal data public and is required under paragraph 1 to delete them, the controller shall, taking into account the available technology and the cost of implementation, take reasonable measures, including technical measures, to inform operators who process personal data that the data subject has requested the deletion by these operators of any links to such data or of any copies or reproductions of such personal data.

3. Paragraphs 1 and 2a shall not apply in so far as processing is required:

a) for exercising the right to free expression and information;

b) for compliance with a legal obligation to process under Union or national law applicable to the controller or for the performance of a task performed in the public interest or in the exercise of official authority with which the controller is vested;

c) for reasons of public interest in the field of public health, in accordance with Article 9 (2) (h) and (i) and Article 9 (3);

d) for archiving purposes in the public interest, for the purpose of scientific or historical research or for statistical purposes, in accordance with Article 89 (1), in so far as the right referred to in paragraph 1 is likely to make it impossible or seriously affect the achievement of the objectives of that processing; or

e) for ascertaining, exercising or defending a right in court.

Art. 18: The right to restrict processing

1. The data subject shall have the right to obtain from the controller a restriction on processing where one of the following cases applies:

a) the data subject disputes the accuracy of the data, for a period which allows the controller to verify the accuracy of the data;

b) the processing is illegal, and the data subject opposes the deletion of personal data, requesting in return the restriction of their use;

c) the controller no longer needs the personal data for the purpose of processing, but the data subject requests them for the establishment, exercise or defense of a right in court; or

d) the data subject has objected to the processing in accordance with Article 21 (1), for the period during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.

2. Where processing has been restricted pursuant to paragraph 1, such personal data may, except in the case of storage, be processed only with the consent of the data subject or for the establishment, exercise or defense of a right in court, or for the protection of the rights of another natural or legal person or for reasons of overriding public interest in the Union or in a Member State.

3. A data subject who has obtained a processing restriction pursuant to paragraph 1 shall be informed by the controller before the processing restriction is lifted.

Art. 19: Obligation to notify regarding the rectification or deletion of personal data or restriction of processing

The controller shall notify each recipient to whom the personal data have been disclosed of any rectification or deletion of personal data or restriction of processing carried out in accordance with Article 16, Article 17 (1) and Article 18, unless this proves impossible or involves disproportionate effort. The operator shall inform the data subject of those recipients if the data subject so requests.

Art. 20: The right to data portability

1. The data subject shall have the right to receive personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and automatically readable format and shall have the right to transmit such data to another. operator, without hindrance from the operator to whom the personal data were provided, if:

(a) processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) or a contract pursuant to Article 6 (1) (b); and

b) the processing is performed by automatic means.

2. In exercising his right to data portability pursuant to paragraph 1, the data subject shall have the right to have personal data transmitted directly from one controller to another where this is technically feasible.

3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. That right shall not apply to processing necessary for the performance of a task performed in the public interest or in the exercise of official authority with which the operator is vested.

4. The right referred to in paragraph 1 shall be without prejudice to the rights and freedoms of others.

Section 4: Right to Opposition and Automated Individual Decision-Making

Art. 21: The right to oppose

1. The data subject shall at any time have the right to object, on grounds relating to his particular situation, to processing pursuant to Article 6 (1) (e) or (f) or Article 6 (1). 1) personal data concerning her, including the creation of profiles on the basis of those provisions. The controller shall no longer process personal data unless the controller demonstrates that he has legitimate and compelling reasons justifying the processing and prevailing over the interests, rights and freedoms of the data subject or that the purpose is to establish, exercise or defend a right in court.

2. Where the processing of personal data is for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning him or her, including the creation of profiles, in so far as related to that direct marketing.

(3) If the data subject opposes the processing for the purpose of direct marketing, the personal data shall no longer be processed for that purpose.

4. At the latest when first communicating with the data subject, the right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be clearly and separately from any other information.

5. In the context of the use of information society services and notwithstanding Directive 2002/58 / EC, the data subject may exercise his right to oppose by means of automatic means using technical specifications.

6. Where personal data are processed for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 (1), the data subject shall, for reasons relating to his or her particular situation, have the right to opposes the processing of personal data concerning her, unless the processing is necessary for the performance of a task for reasons of public interest.

Art. 22: Automated individual decision-making process, including profile creation

1. The data subject shall have the right not to be subject to a decision based solely on automatic processing, including profiling, which shall produce legal effects concerning the data subject or similarly affect him or her to a significant extent.

2. Paragraph 1 shall not apply where the decision:

a) is necessary for the conclusion or execution of a contract between the data subject and a data controller;

b) is authorized by Union or national law applicable to the controller and which also provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or

c) is based on the explicit consent of the data subject.

3. In the cases referred to in points (a) and (c) of paragraph 2, the data controller shall implement appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, at least his right to obtain human intervention from the data subject. the operator to express his point of view and to challenge the decision.

4. The decisions referred to in paragraph 2 shall not be based on the special categories of personal data referred to in Article 9 (1), unless Article 9 (2) (a) or (g) apply. ) and in which appropriate measures have been put in place to protect the rights, freedoms and legitimate interests of the data subject.