DataProtectionNotice

1. For the purpose of its activities, the Cost action IPEMA established a membership list the is published on the IPEMA website.
2. For the purpose of this Data Protection Notice and pursuant to Article 4 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), “personal data” means “any information relating to a natural person identified or identifiable, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”; “processing” means “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.
3. Your personal data will/may be processed by IPEMA for the following purposes:
   1. Establishing the list of IPEMA participants;
   2. Administering and/or managing participants’ relationship with IPEMA (including mailing of correspondence, statements or notices to members, which could involve the disclosure of certain personal data about the members to bring about delivery of these items, as well as on the external cover of envelopes/mail packages);
   3. Responding to any enquiries by participants and/or third parties;
   4. Carrying out research and analysis for IPEMA strategy and policy planning purposes;
   5. Sending materials and information via postal mail or electronic mail;
   6. Other activities in relation to IPEMA objectives.
4. IPEMA lawfully and rightfully processes personal data in accordance with Regulation (EU) 2016/679. Personal data are processed by IPEMA in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures, and kept in a form which permits identification of data subjects for no longer than it is necessary for the purposes for which the personal data are processed.
5. The processing of personal data by IPEMA shall be without prejudice to all the rights conferred to you as data subject by Articles 15-21 of Regulation (EU) 2016/679, namely:
   1. Right to have access to your own personal data processed by IPEMA and to receive the information on the persons or third parties who have directly or indirectly access to your personal data stored in the IPEMA databases; this include the right to receive a response to the request for the information whether your personal data are being processed and receive the personal data within 30 calendar days after the request is made;[1]
   2. Right to obtain from IPEMA the rectification without undue delay of inaccurate or incomplete personal data;
   3. Right to obtain from IPEMA the restriction of processing of your personal data where they are: i) inaccurate; ii) no longer necessary in relation to the purposes for which they were processed, but you need them for the establishment, exercise or defence of your legal claims;
   4. Right to obtain from IPEMA the erasure without undue delay of your personal data where: i) they are no longer necessary in relation to the purposes for which they were processed; ii) they have been unlawfully processed; iii) you have exercised your right of withdrawal of consent on which the processing is based and there is no other legal ground for the processing;
   5. Right to require IPEMA to provide your personal data in a structured, commonly used and machine-readable format; and where technically feasible, to transmit your data directly to another controller of your choice (right to data portability);
   6. Right to object at any time to processing of personal data where they are processed for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing;
   7. Right to protect your personal data from unlawful processing or accidental loss, destruction or damage caused by intentional or untimely concealment, and the right for protection from information which is unreliable or harms the person’s honour, dignity, and business reputation;
   8. Right to lodge a complaint with the supervisory authority (Landesbeauftragter für Datenschutz une Informationsfreiheit Baden-Würtemberg)  to safeguard your rights of personal data protection;
   9. Right to withdraw your consent to processing your personal data at any time by contacting the IPEMA representative, Ulrike Weiler by email (weiler@uni-hohenheim.de).

[1] That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. IPEMA shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay (Article 12(3) GDPR)