PRIVACY NOTICE
On 18 November 2020, an implementation agreement concerning cooperation activities at ESRIC was signed between the Ministry of the Economy, as the supervisory body of the Luxembourg Space Agency (LSA), the Luxembourg Institute of Science and Technology (LIST), a leading mission-driven research and technology organisation, and ESA. The Centre is embedded in Luxembourg’s space ecosystem, which is promoted and supported by LSA. ESRIC is operated and hosted by LIST.
Please kindly note that the Space Resources Week is jointly organized by LIST, LSA and ESA (hereafter “the Organizers of the Event”).
1. An overview of data protection
The Luxembourg Institute of Science and Technology (hereafter “LIST”, “we”) is committed to ensure the highest standards of data protection in compliance with the national applicable legislation and with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter “GDPR”).
The present notice aims at illustrating what personal data we collect about you, the reason why LIST uses your data and, as the case may be, share your data and the applicable retention periods. Additionally, the notice also provides you with information regarding your rights, how to exercise them and whom you can contact in case of any query.
2. Scope of the notice
The present notice is directed to:
users or visitors of the Space Resources Week’s website (hereafter the “website”),
users registering for any of the events organized in the course of the Space Resources Week (including public lectures and conferences and online events such as webinars - hereafter “Event”),
individuals who contact us by any means in relation to the Space Resources Week,
individuals who submit papers in the context of the call for papers for the Space Resources Week 2021.
Hereafter together “you”.
3.Identity of the data controller
The data controller is LIST, having its registered office at 5, Avenue des Hauts-Fourneaux L-4362 Esch-sur-Alzette, Luxembourg.
LIST is responsible for collecting and processing your personal data in relation with LIST’s activities.
Our contact details are set out in Section 11 (“Your rights and how to exercise them”) below.
4. How your personal data is collected
We may collect personal data from the following sources:
From you:
typically when you register to an Event,
when you attend an Event,
when you submit a paper,
when you communicate with us,
when you complete our feedback forms,
when you use or visit our website.
From third parties:
a third party who may submit the paper within the context of the call for papers and indicate you as first author,
a third party who may register your data for an Event,
LIST’s webinar providers.
5. Categories of personal data we collect
The categories of personal data that we collect about you may vary depending on your use of the website or on the type of Event.
Please find here below a detailed list of personal data we may collect and process. Those may at times include:
Contact details (such as name, surname, address, e-mail address, telephone number),
Professional information (such as company/organisation),
Technical data (such as IP address),
Your image, audio and likeliness (as captured on a webinar, in photographs or recordings realised at the Event),
Any other requirement (such as accessibility requirements).
6. Purpose and legal basis for processing
Please find here below a list of the purposes for which LIST collects and processes your personal data:
To communicate with you,
To manage your registration to the Event (this may, at times, include sending out Event invitations, managing the invoices),
To ensure a proper management of the Event (this may, at times, include distribution of badges, managing of dietary requirements for the meal, distribution of satisfaction forms),
To deliver you the Event you have registered for,
To ensure the broadcast of the event, in case of an online Event,
To provide you with updates and details regarding the Event,
To take photographs and/or videos of the Event,
To provide you with communications in relation to the Space Resources Week and its future editions sent by the Organizers of the Event,
To provide you with communications in relation to theme discussed during the Event sent by the Organizers of the Event,
To receive and evaluate the paper you submitted in the context of the call for papers for the Space Resources Week 2021,
To ensure and improve the functioning and the security of our website and network,
To ensure the security of our premises and facilities,
To manage complaints, feedback and queries,
To comply with applicable laws and regulatory obligations,
To establish and/or defend our legal rights;
To perform analytics evaluation on the participants.
Please find here below a list of the legal basis on whose grounds LIST collects and processes your personal data:
Your consent, for instance we shall require your consent to send you communications to future editions of the Space Resources Week or to film, photograph or otherwise record Events and to publish such content on ESRIC’s website, social media accounts and other channels,
Performance of a contract to which you are party when you register to an Event,
LIST’s legitimate interest, which may consist of ensuring the management of the event or having records of the Event we organized and promoting it in the future with photos or videos taken at the Event.
7. Share of your personal data with third parties
In order to fulfil the purposes mentioned in Section 6 (“Purposes and legal basis for processing”), LIST may transfer your personal data to:
LIST’s internal departments, in order to ensure the proper organization and management of the Event,
External service providers that perform services on LIST behalf, such as IT service providers,
Institutional or non-institutional partners, with whom LIST collaborates in the context of the Event’ management and organization.
In case of disclosure of your personal data to the aforementioned external subjects, LIST shall take appropriate steps to ensure that third parties will apply adequate protection to this data as required by the applicable data protection legislation.
In order to ensure the delivery of the Event for which you subscribed, the personal data you submitted at the moment of the registration will be transferred from LIST to the other Organizers of the Event, who are in charge of injecting these data into the streaming platform used for the Space Resources Week. The streaming of the online Events is performed via Let’s Get Digital, a platform managed by EventInsight B.V. The Organizers of the Event have signed the necessary contractual provisions in order to ensure their service meets our requirements and obtain guarantees concerning the processing of personal data.
Some of the mentioned recipients of your personal data may be located in countries outside the European Union or the European Economic Area (EU/EEA). In such cases, transfers to a county outside EU/EEA may take place when the European Commission has decided that the third country ensures an adequate level of protection. In the absence of such adequacy decision, LIST will only proceed to such transfer after having implemented appropriate safeguards to protect your personal data (such as the use of standard contractual clauses adopted by the European Commission) or where a derogation established by art. 49 of the GDPR exists (such as your explicit and informed consent).
Further information about the mentioned transfers and the safeguard measures applied by LIST can be obtained by contacting us at dpo@list.lu.
8. Ensuring personal data security and integrity
In compliance with the applicable data protection legislation, LIST has put in place appropriate technical and organisational measures in order to prevent or act upon any unauthorised and unlawful processing or disclosure, accidental loss, modification or destruction of personal data. These measures are implemented based on the current state of art, an evaluation of the risks derived by the processing activity and the need to protect personal data. Such technical and organisation measures are regularly updated and/or adjusted to new technical developments or any organisational change that may affect LIST.
9. Cookies
This website uses cookies. Cookies are small text files that are sent and stored to your personal computer or device when you visit a website. The information stored may be returned to the website’s servers or to the servers of the relevant third parties during a subsequent visit.
Cookies have different functions. In general, cookies are necessary for the website to work in a correct way (for instance, by saving your current session). Cookies can also be used to analyse your browsing behaviour and to optimize your experience.
On this website, we only use essential cookies that are required for the proper functioning of the website. To learn more about the cookies implemented on this website, we invite you to visit the following link: https://support.squarespace.com/hc/en-us/articles/360001264507.
The present website is hosted by Squarespace, with whom the Organizers of the Event have signed the necessary contractual provisions.
10. Data retention periods
LIST will only retain your personal for a period of time that is strictly necessary for the purposes for which we collect your data, without prejudice to LIST to keep them for a longer duration for legal and/or regulatory obligations applying to LIST or due to exceptional situations that would justify them being kept longer (judicial procedure, etc.).
11. Your rights and how to exercise them
With regards to your personal data collected and processed by LIST, you may exercise at any time the following rights:
Right to access: You have the right to receive confirmation about whether or not your personal data is being processed by LIST. If that is the case, you have the right to know what data is being collected and processed and to obtain of copy of it;
Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request to have it rectified;
Right to erasure: Subject to certain conditions specified in art. 17 of the GDPR, you have the right to have your personal data deleted by LIST;
Right to restriction of processing: Subject to certain conditions specified in art. 18 of the GDPR, you have the right to obtain restriction of the processing of your personal data performed by LIST;
Right to data portability: Subject to certain conditions specified in art. 20 of the GDPR, you have the right to obtain a copy of the personal data you provided to LIST in in a structured, commonly used and machine-readable format and to request the transfer of these data to another data controller;
Right to object: You have the right to object the processing of your personal data when the conditions set out in art. 21 of the GDPR apply;
Right to withdraw consent: If LIST is processing your personal data based on your consent, you have the right to withdraw that consent at any time. The withdrawal of such consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD). More information on how to lodge a complaint are available on CNPD’s website: https://cnpd.public.lu.
You may exercise any of these rights by contacting Data Protection Officer (DPO) of LIST:
by e-mail at the following address: dpo@list.lu,
or by post at:
Luxembourg Institute of Science and Technology
Attn. Data Protection Officer
5, Avenue des Hauts-Fourneaux
L-4362 Esch-sur-Alzette, Luxembourg.
12. Link to other websites
Please be aware that this website may contain links to other websites, that are not governed by this privacy notice. We encourage users to review the privacy notice of each website before disclosing any personal data.