Legal Advice and Privacy Policy

1.1. The Data Controller, EDP Distribuição – Energia, S.A. (EDP Distribuição or Coordinator of the EUniversal Consortium) , will process the personal data you provided through the www.euniversal.eu website (hereafter the “Website”) in compliance with applicable current privacy and personal data protection legislation and regulation, namely the Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27th April 2016 (Regulation), the deliverable 13.1 “Ethics requirements – Requirements n.º1”and this Legal Advice and Privacy Policy.

1.2. When you subscribe to the various services or to gain access to the aforementioned website, you will be given the names of any further partners of the EUniversal Consortium.

2.1 The Coordinator has appointed a Data Protection Officer (DPO), for any question related to the General Data Protection Regulation, who can be directly contacted at the following email address dpo.edpdistribuicao@edp.com.

3.1. The Coordinator will process the personal information you provide us, through the website, or which has been legitimately collected by the EUniversal Consortium (“Personal Data”). Personal Data” means any information that relates to or identifies a person as an individual. The following Personal Data will be processed:

3.1.1. Contact information: name, surname, email address sent by you and other Personal Data that you may have provided during the communication.

We will process this Personal Data in the case in which you make enquiries, request information or send us communications of any type. You send us this Personal Data when you contact us. The processing of this Personal Data is necessary for us to provide a response to the communications received from you or to the requests that you have made. The provision of any further Personal Data by you is voluntary.

3.1.2. Navigation data: the IT and electronic communications systems and software procedures put in place to allow the Website to function, will, in the course of their normal work, collect certain data (e.g. access date and time, pages visited, name of the Internet Service Provider and Internet Protocol (IP) address you use to access the internet, the internet address from which you connect to our Website, etc.), the transmission of which is implicit in the use of web communications protocols or is pertinent to effective management or optimisation of the data or email sending system.

3.2. In the context of this Privacy Policy, Personal Data processing refers to any operation or group of operations carried out using automated processes and applied to Personal Data, such as collection, recording, organisation, structuring, conservation, adaptation or modification, extraction, consultation, use, communication through transmission, dissemination or any other available means, comparison or interconnection, restriction, erasure or destruction.

3.3. Please be informed that this Personal Data will be processed manually and/or using IT or electronic support.

4.1. The Coordinator will process your Personal Data for very specific purposes and only if there is a specific legal basis provided for under applicable personal data protection and privacy legislation or regulation. Specifically, the Coordinator will process your Personal Data only when one or more of the following legal requirements has been met:

a) You have freely given your specific, informed, unambiguous and affirmative consent to the processing of said data;

b) The processing is necessary to the performance of a contract to which you are a party or to take pre-contractual measures at your request;

c) For the purposes of the pursuit of the EUniversal Consortium legitimate interests. The EUniversal Consortium has a legal obligation to process the Personal Data.

4.2. The following bullets lists the purposes for which your Personal Data can be processed by the EUniversal Consortium and the legal bases for the processing.

a) To allow you to use all of the Website’s functionalities (Performance of a contract);

b) To check that the Website is functioning correctly (Performance of a contract);

c) To establish responsibility in the case of cybercrime that commit the Website; the detection, prevention, mitigation or verification of fraudulent or illegal activities relating to the services provided on the Website; the performance of security controls required under law (Legitimate interest);

d) To respond to a query or a request from the Data Subject. (Implementation of pre-contractual measures adopted at the request of the Data Subject)

4.3. The provision of your Personal Data is necessary in all instances in which processing is a legal requirement or necessary to the performance of a contract to which you are a party or to the implementation of pre-contractual measures adopted at your request. Any refusal on your behalf may make it impossible for the EUniversal Consortium to perform the task for which your Personal Data has been collected.

4.4. The provision of your Personal Data, however, is voluntary for any further purposes and failure to give your consent in such cases will have no effect on the completion of the contract. The obligatory (to fulfill the contractually or legally established purpose) or optional nature of the provision of data will be specified when collected.

5.1. Your Personal Data may be accessible for the abovementioned purposes, to:

a) Employees and staff of the EUniversal Consortium who, for that purpose, have been tasked with data processing, or to the companies of the EUniversal consortium in the European Union for the implementation of organisational, administrative, financial and accounting activities;

b) To third party companies or other subjects to which the EUniversal Consortium outsources work required to allow the Website to function, in their role as external data processors.

6.1. Navigation Data will be processed within the European Union and stored within the European Union, no providing for any international data transfer.

6.2. The newsletter subscription will be stored using the storage services provided by Mailchimp. To subscribe to the EUniversal consortium newsletter, individuals must provide the email address where they wish to receive it. Individuals can unsubscribe anytime by clicking on the ‘unsubscribe’ link available in the footer of each newsletter. EDP Distribuição is the partner for its sending and monitoring.

7.1. Data processed for the purposes described above will be held in compliance with the principles of proportionality and necessity, and, in all cases, until the purposes of the processing have been completed.

7.2. Your Personal Data is legally required to be kept until you withdraw your consent but, in all instances, you can always contact us through h2020.euniversal@gmail.com to request your unsubscription.

8.1. Under articles 15 – 21 of GDPR, you have the right in relation to the Personal Data you provide:

a) To access and request a copy;

b) To request rectification;

c) To request erasure;

d) To obtain restriction of data processing;

e) To object to the processing;

f) To receive in a commonly-used structured form readable on an automatic device and to transmit without impediment said data to another Data Controller in the case that this is technically feasible.

8.2. Please be informed that you have the right to object at any time to the processing of Personal Data relating to you that is carried out in the pursuit of EUniversal Consortium legitimate interests.

8.3. When you object to the processing of your Personal Data as per article 8.2, the EUniversal Consortium will refrain from further processing your Personal Data, except where convincing legitimate reasons for continuing with the processing have been established or for the verification, exercising or defence of a right in a court of law.

8.4. To exercise your rights and withdraw your consent, please write to this email address: h2020.euniversal@gmail.com

8.5. Please note that you have the right to make a complaint to the relevant Personal Data protection authority

9.1. EUniversal Consortium Coordinator undertakes to use its best efforts to put in place the appropriate technical measures to protect users’ personal data from unauthorized access. For this purpose, it uses security systems, rules and other procedures in order to prevent its accidental, or unlawful destruction, accidental loss, alteration, dissemination or unauthorized access.

9.2. Despite the efforts of EUniversal Consortium Coordinator to protect your personal data, since they are collected through an open network – the internet – they may circulate on the network without security conditions, at the risk of being seen and used by non-third parties authorized.

EUniversal Consortium Coordinator does not adopt automated decisions based on the treatment of user data.