Privacy notice on the processing of personal data in the GOVAQUA project

Contact details are at the end of this notice. Your participation in the study is voluntary and you can withdraw from the study at any point in time.

Legal basis for processing personal data

In accordance with the EU’s General Data Protection Regulation (GDPR), the processing of personal data is based on the consent (Article 6(1)(a)).

Collected and processed personal data and purpose of processing

We collect the following personal data in the project, depending on the nature of the data collection:  whether you represent a worksite or a company,  the sector your company operates in, participants’ names and job titles, areas of expertise, email address, audio and video recordings. The personal data will be collected either directly from the participants or indirectly from publicly available sources, such as the websites of organisations. Indirectly collected information may include contact details (e.g., names and email addresses used to reach research participants), as well as information about their roles and areas of expertise. All personal data is collected and processed for scientific research purposes and for organising events related to the GOVAQUA project.

The collected data will not be used for other purposes such as automated decision making nor profiling.

Recipients and transfer of personal data

The researchers and other personnel working in the GOVAQUA project have the right to access and process research data containing personal data. In addition, the personnel or service providers who transcribe audio material have access to personal data. These service providers are considered as processors of personal data and must comply Sykes’s guidelines on processing personal data.

Personal data may be transferred outside the EU or the European Economic Area (EEA) when transferred to the United Kingdom for processing by a project partner or to the United States when stored on the Microsoft Teams platform. This is because Microsoft cloud servers may be located outside the EU. Such transfers of personal data to the UK and USA are allowed under decisions made by EU.

Protection, storage and deletion of personal data

Personal data may be stored in both electronic and physical form. All organisations that process personal data in GOVAQUA have taken technical and organisational measures to protect personal data and requires these measures from all the service providers used. The personal data is stored on password protected secure local network drive and secure facilities provided by the partners organisations, where only authorised project members have access to the data.

The research results and data will be reported in publications in such a way that research participants, nor the companies they work for, cannot be identified. We will publish a description of the data, i.e., metadata (title, creators, date, language, format, version, rights, funding reference) in the Zenodo platform (zenodo.org), which we can refer to in publications when necessary.  

The personal data will be kept for as long as deemed necessary for the purpose of conducting the GOVAQUA project and verifying the research and will be deleted thereafter, but no later than five years from the date of collection. 

Data protection rights related to processing of your personal data

The purpose of this notice is to provide a comprehensive explanation of the processing of your personal data and your rights to your personal data collected by GOVAQUA.

According to the General Data Protection Regulation (GDPR), you have the right to know for what purposes and how your personal data is processed and get copy of your personal data being processed. You have also the right to correct your personal data. If we correct your personal data at your request, we are obliged, as far as possible, to notify all those to whom the data previously was disclosed of the correction. In addition, you have the right to delete your personal data and restrict its processing. Note that these rights cannot be exercised in all situations. For example, your personal data cannot be identified for deletion if it has already been anonymised.

If you are unclear about any aspect of our processing of your personal data, please contact our contact persons.

Contact details

Finnish Environment Institute (Syke)

Data controller:
Latokartanonkaari 11
00790 Helsinki
Email: kirjaamo@syke.fi
Confidential e-mail: https://securemail.syke.fi
Tel. +58 295 251 001

Suvi Sojamo, Leading Researcher and 
Contact person in matters concerning the project:
Environment Institute (Syke)
firstname.lastname@syke.fi
Tel. +358 29 525 1049

Data protection officer:
tietosuojaSYKE@syke.fi

Alliance for Water Stewardship (AWS)

Jackie Ho, Chief Financial Officer
Alliance for Water Stewardship (AWS)
jackie@a4ws.org

Lisa Bunclark, Knowledge & Learning Coordinator 
Alliance for Water Stewardship (AWS) 
lisabunclark@a4ws.org  
Tel: +51 934 994 270

Ecologic Institute

Data controller:
Pfalzburger Str. 43-44
10717 Berlin
Email: Eleftheria.kampa@ecologic.eu

Data protection officer:
felix.dengler@ecologic.eu

Contact person in matters concerning the project:
Eleftheria Kampa, Senior Fellow
Ecologic Institute
Eleftheria.kampa@ecologic.eu
Tel. +49 30 86880145

University of Cordoba

Data controller:

Campus universitario de Rabanales.
Edificio Gregor Mendel, 3ª Planta.
14071 Córdoba (España).
Email: es1bevej@uco.es

Data protection officer:
dpdatos@uco.es

Contact person in matters concerning the project:
Julio Bervel,
Universidad de Córdoba (UCO)
Tel: +34 651 850 602

University of Twente

Data controller:
University of Twente
Drienerlolaan 5
7522 NB Enschede
The Netherlands
g.ozerol@utwente.nl

Data protection officer:
Annika van der Putten
dpo@utwente.nl

Contact person in matters concerning the project:
Gül Özerol
g.ozerol@utwente.nl
Tel. +31 53 4894171

You also have the right to lodge a complaint with the supervisory authority in your country.