Data Protection Declaration

Information on data protection We process your personal data in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). The joint data controllers are: University of Potsdam Represented by the President, Prof. Oliver Günther, Ph.D. Am Neuen Palais 10 14469 Potsdam Phone: +49 331 977-0 Telefax: +49 331-97 21 63 www.uni-potsdam.de

University of Cagliari Represented by the Rector, Prof. Francesco Mola Via Università, 40 09124 Cagliari Italy Phone: +39 070 6752215 / +39 070 6752216 www.unica.it

Masaryk University Represented by the Rector, Prof. Dr. Martin Bareš Žerotínovo nám. 617/9 60177 Brno Czech Republic Phone: +420 549 49 1111 www.muni.cz

University Paris Nanterre Represented by the President, Prof. Dr. Philippe Gervais-Lambony 200 avenue de la République 92001 Nanterre Cedex France Phone: +33 1 40 97 72 00 www.parisnanterre.fr

University of Pécs Represented by the Rector, Dr. Attila Miseta Vasvári Pál Utca 4 7622 Pécs Hungary Phone: +36-72/501-500 www.pte.hu

University Rennes I Represented by the President, Prof. Dr. David Alis 2 rue du Thabor - CS 46510 35065 RENNES Cedex France Phone : +33 223233649 www.univ-rennes1.fr

Processed data With your registration to the EDUC Moodle, the following personal data will be processed: 1. User account (corresponds to the respective university account or a guest account), 2. Surname and first name, 3. Your email address at your home university or the email address of the guest account. 4. Log data, e.g. at what time you access which parts of the course offerings. 5. User data: Content, contributions and activities of the user in Moodle.

Purpose of processing The European Digital UniverCity (EDUC) is an alliance formed by six European universities to foster collaboration in the areas of teaching, research, innovation and third mission. Participating universities are the University of Cagliary (Italy), Masaryk University (Czech Republic), University Paris-Nanterre (France), University of Pécs (Hungary), University of Potsdam (Germany) and University Rennes I (France). The central e-learning platform "EDUC Moodle" under the URL https://learning.educalliance.eu/ is established in order to promote and execute electronically supported learning ("e-learning") among the participating universities and to make it accessible on a uniform platform. To achieve this purpose, the partner universities have concluded an agreement to determine their responsibilities for compliance with the obligations under the GDPR. According to this agreement the University of Potsdam will be responsible for the technical implementation of the EDUC Moodle platform and provide data subjects with information on data protection. Each of the partners will be responsible for processing data in the context of courses or modules taught by individual teachers from their respective universities. Accordingly, to exercise your rights under the GDPR, there are different contact persons who are listed in detail in the section "Your rights". Lawfulness of processing The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. e GDPR. This provision allows the processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. It has to be complemented by a legal basis in Union law or in the law of the Member States from which the specific tasks to be carried out are derived. These complementing provisions differ for the processing done by each of the joint controllers: 1. University of Potsdam: Sec. 14 Para. 9 Brandenburg Higher Education Act (BbgHG). According to this provision institutions of higher education in the state of Brandenburg may process personal data of applicants, students, doctoral students, examination candidates and external users of higher education facilities that are required i.a. for the participation in courses, examinations and the use of higher education facilities, such as the Center for Information Technology and Media Management (ZIM) which is hosting EDUC Moodle at the University of Potsdam. 2. University of Cagliari: ROYAL DECREE 31 August 1933, n. 1592. Approval of the consolidated act of higher education laws. Article 33 of the Italian Constitution which provides that universities have the right to adopt autonomous systems within the limits established by the laws of the State. Law 9 May 1989, n. 168. Establishment of the Ministry of universities and scientific and technological research. University Statute issued on 9 July 2019 n. 765. 3. Masaryk University: Sec. 88 of Higher Education Act N. 111/1998 Coll. According to this provision higher education institutions in the Czech Republic shall process personal data of its students and graduates for the state registry and transfer them to the Ministry of Education, Youth and Health. Section 16 of the Czech Act on Personal data Processing – No.110/2019 Coll. deals with processing of personal data for the purpose of scientific or historical research or for statistical purposes. 4. University Paris-Nanterre: Law number 78-17 of 6 January 1978 on information technology, files and civil liberties. According to this law, the legal basis for data processing is 1st Title, Chap. 1,

Art. 5, lit. 5. This provision allows the processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 5. University of Pécs: Art. 18 and Annex 3, point I. of Act CCIV of 2011 on higher education regulates the data processing operations at the universities. Art. 18 lists the possible data processing purposes, the relevant ones are „ensuring the proper operation of the university” and “to grant the rights and ensure obligations of the students”. The Annex lists the potential categories of personal data processed, including – among others – the students’ identification data (name, time and place of birth, etc.), contact data (contact address, telephone number, etc.), data about their education (courses, exams, credits, foreign studies, etc.)”. The Annex also lists the potential categories of data regarding the employees. 6. University Rennes I: Law number 78-17 of 6 January 1978 on information technology, files and civil liberties. According to this law, the legal basis for data processing is 1st Title, Chap. 1, Art. 5, lit. 5. This provision allows the processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Duration of data processing The data in your user profile (registration data) is stored until the user profile is deleted. The data from participation in courses (user data) is stored until the course is deleted. Log data is deleted seven days after the end of the usage process, unless legal regulations allow or exceptionally require longer storage. You can delete user data and voluntary entries in the user profile yourself at any time. Recipients of your data (1) Only the staff responsible for the administration and management of the central e-learning platform “EDUC Moodle” shall have access to all data stored in the system, including the log files. They may process this data solely to ensure the operation of the EDUC Moodle. The evaluation of user data for statistical purposes may only be carried out by the persons named in sentence 1 in an anonymous form. Data is anonymized by deleting the personally identifiable information. (2) Teachers shall only have access to the activities, contributions and data provided by their course participants insofar as these are generally accessible in the EDUC Moodle or are accessible within the course. Access to log files or other EDUC Moodle data from which individual user profiles can be derived is prohibited. The prohibition shall be ensured by appropriate technical and organisational measures. Your rights: You have the right to obtain from the controller confirmation as to whether or not your personal data is being processed, and, if that is the case, access to the personal data and additional information (right of access). You also have the right to obtain from the controller without undue delay the rectification of inaccurate personal data. If the legal requirements of Art. 17 or 18 GDPR are met, you are entitled to the erasure of your personal data or to a restriction of processing. Please note that restricted processing of the data may not be possible in every instance. Furthermore, you may object to the processing of your personal data under the conditions set forth in Art. 21 GDPR. In order to exercise your rights, we kindly request that you contact:

For exercising rights concerning data as mentioned in numbers 1-4 under “Processed Data” (see above) that is required for the general running of the platform please contact: Mr. Stefan Jank Am Neuen Palais 10 14469 Potsdam Phone: +49 331 9772498 Email: [email protected]

For exercising rights concerning data as mentioned in number 5 under “Processed Data” (see above) originating from the context of courses or modules taught by individual teachers please contact:

1. For courses taught by teachers from the University of Potsdam:

Mr. Stefan Jank Am Neuen Palais 10 14469 Potsdam Phone: +49 331 9772498 Email: [email protected]

2. For courses taught by teachers from the University of Cagliari:

Vice-Rector for international Affairs, Prof. Alessandra Carucci, Direzione per la Ricerca ed il Territorio Via San Giorgio, 12 09124 Cagliari, Italy e-mail: [email protected]

3. For courses taught by teachers from the Masaryk University:

Mgr. Iva Zlatušková 583 Žerotínovo nám. 617/9 60177 Brno Phone: +420 549 49 4151 Email: [email protected]

4. For courses taught by teachers from the University Paris-Nanterre:

EDUC Project Manager Service des relations internationales 200 avenue de la République 92001 Nanterre cedex E-mail: [email protected]

5. For courses taught by teachers from the University of Pécs:

University of Pécs, EDUC Office Vasvári P. u. 4. 7622 Pécs Email: [email protected]

6. For courses taught by teachers from the University Rennes I:

La déléguée à la protection des données Direction des affaires juridiques et institutionnelles 2 rue du Thabor CS 46510 35065 RENNES Cedex Email: [email protected]

You can contact the universities’ data protection officers if you have questions regarding data protection:

University of Potsdam Dr. Marek Kneis Am Neuen Palais 10 14469 Potsdam Phone: +49 331 977-124409 Telefax: +49 331 977- 701821 E-Mail: [email protected]

University of Cagliari Dr. Massimo Farina Università degli Studi di Cagliari via Università, 40 09124 Cagliari Email: [email protected]

Masaryk University PhDr. Mgr. Mona Nechvátalová 583 Žerotínovo nám. 617/9 60177 Brno Email: [email protected]

University Paris-Nanterre Diane De Bearn Service des Affaires Juridiques et Institutionnelles (SAJI) Batiment Pierre Grappin 200 avenue de la République 92001 Nanterre Cedex France Email : [email protected]

University of Pécs Dr. Gergely László Szőke Vasvári P. u. 4. 7622 Pécs Email: [email protected]

University Rennes I La déléguée à la protection des données Direction des affaires juridiques et institutionnelles 2 rue du Thabor CS 46510 35065 RENNES Cedex Email: [email protected]

If you think that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the respective supervisory authority for data protection.

For the University of Potsdam Dagmar Hartge Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Stahnsdorfer Damm 77 14532 Kleinmachnow Email: [email protected] +49 33203 356 – 0

For the University of Cagliari Garante per la protezione dei dati personali Piazza Venezia n. 11 - 00187 Roma Tel: (+39) 06.696771 Email: [email protected] Web: https://www.garanteprivacy.it

For the Masaryk University Úřad pro ochranu osobních údajů (Personal Data Protection Office) Pplk. Sochora 27 170 00 Praha 7 Czech Republic Website: https://www.uoou.cz Email: [email protected]

For the University Paris-Nanterre Commission Nationale de l'Informatique et des Libertés 3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07 Tel: +33 (0)1.53.73.22.22 Web: https://www.cnil.fr/

For the University of Pécs Hungarian National Authority for Data Protection and Freedom of Information PO Box.: 1363 Budapest, Pf. 9. Tel.: +36 1 391 1400 Email: [email protected] Web: https://naih.hu

For the University Rennes I Commission Nationale de l'Informatique et des Libertés 3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07 Tel: +33 (0)1.53.73.22.22 Web: https://www.cnil.fr/