Privacy Policy

PRIVACY NOTICE  - APPLICATION FOR THE DIGITAL INNOVATION HUB NETWORK

SUMMARY

The Universidade Nova de Lisboa (“UNL”), as a public higher education institution, has a mission to serve society at local, regional and global levels through the advancement and dissemination of knowledge. To achieve this aim, a relationship of trust between UNL and its community is essential.  

Therefore, to strengthen this relationship of trust, this privacy notice describes how UNL processes personal data in accordance with the transparency and information requirements of the General Data Protection Regulation (“GDPR”).

SCOPE

This privacy notice applies to the processing of personal data carried out in the context of applications to the Network of Digital Innovation Hubs of the Faculty of Science and Technology (“FCT”) at UNL.

WHO ARE WE?

Personal data will be processed by UNL, legal entity no. 501559094, with its registered office at Campus de Campolide, 1099-085 Lisbon, telephone number +(351) 213715600. 

UNL is the data controller in relation to the processing of personal data, in the sense that these terms are defined and used in the GDPR.  

WHAT PERSONAL DATA DO WE PROCESS?

In order to comply with the principle of data minimisation, UNL collects and processes only the personal data strictly necessary for the fulfilment of its mission, depending on the context of your interaction with UNL.

In the context of the application for the Faculty of Science and Technology’s Digital Innovation Hubs Network, UNL will process the following personal data:

• Contact details, namely email address and telephone number;
• Consent to subscribe to the inNOVA4TECH newsletter.

Personal data may also be processed in conjunction with other entities or partners collaborating with UNL in the pursuit of its missions and duties. This may occur within the framework of projects that may involve the drafting and approval of specific Privacy Policies and Notices for such projects.

WHAT ARE THE LEGAL GROUNDS FOR THE PROCESSING OF PERSONAL DATA?

The legal basis for the processing of personal data in the context of the application to the Faculty of Science and Technology’s Digital Innovation Hubs Network is the legitimate interest of UNL. In light of the legally required balancing test, it was considered that, in the context of preparing that application, the FCT has an interest in ascertaining whether companies that have collaborated with it in the past intend to continue doing so. Furthermore, the processing may also be in the interest of the companies themselves, given that they have already collaborated with the FCT in the past.

It should also be emphasised that, given the type of personal data processed, the risk of harm to the data subject is low. In any event, the data subject must be given the option to opt out.

WHAT ARE THE PURPOSES OF THE PROCESSING OF PERSONAL DATA CARRIED OUT BY UNL?

The application for the Faculty of Science and Technology’s Digital Innovation Hubs Network, through the inNOVA4Tech hub, capitalises on the unique opportunities arising from the interaction between science, industry-oriented research and engineering activities, through collaborations on joint research and innovation projects. inNOVA4Tech focuses on developing research-based technologies and solutions to address societal challenges and actively engages Defence and Space partners (at local, regional, national and international levels) to ensure the impact of research projects on the value chain and society. The cluster aims to support the Defence and Space sector in integrating digital technologies and acquiring digital skills to accelerate digital transformation in Portugal and Europe. To this end, it needs to process personal data for this purpose, namely to:

a)       Compile a list of organisations interested in acting as service recipients or providers for the services offered by the hub

b)      Compile a list of services to be offered by the hub

c)       Compile a list of contact persons from the interested organisations

d)       Consent to be included on the inNOVA4Tech mailing list

UNL will only process personal data for the purposes for which it was collected, except where it considers that such data is necessary for another purpose, provided that this purpose is compatible with the original purpose, particularly for scientific or historical research purposes, or for statistical purposes, and provided that the other requirements imposed by law for the reuse of data are met.

TO WHOM DO WE DISCLOSE PERSONAL DATA?

UNL may disclose personal data to one or more organisations. Whenever this occurs, UNL will take steps to verify the extent to which these organisations comply with personal data protection legislation.

These entities include:

• UNINOVA
• inNOVA4TECH
• NOVA.ID.FCT

HOW LONG DO WE RETAIN PERSONAL DATA?

In order to ensure that personal data is retained only for as long as necessary, UNL sets time limits for erasure or anonymisation or for periodic review. In certain cases, your data may be retained for longer periods, namely where required by law or for scientific or historical research purposes or for statistical purposes.

The retention period for personal data processed in the context of applications to the Faculty of Science and Technology’s Digital Innovation Hubs Network is 6 months. The other retention periods applied by UNL are set out in the table for the retention and disposal of physical records, which forms part of the retention schedule and selection table adopted by UNL. 

WHAT SECURITY MEASURES HAVE BEEN PUT IN PLACE TO PRETECT THE PROCESSING OF PERSONAL DATA?

Information security and the protection of personal data are priorities for UNL. For this reason, UNL has implemented and maintains a set of technical and organisational measures which, taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of each processing operation, enable the mitigation of risks to the data subject and the prevention of personal data breaches and security incidents in general.

• Making every effort to ensure that third parties collaborating with UNL guarantee adequate protection of the personal data to which they have access;
• Restricting access to personal data to specific staff members, and only when their contact with such personal data is justified within the scope of their duties;
• Storing all personal data processed by UNL on servers that offer security guarantees, namely encryption, access control and backups;
• Subjecting security systems and policies to periodic reviews to ensure that data is secure and protected;

In particular, the following measures, amongst others, are highlighted:

• Monitoring of UNL’s technological infrastructure with a view to preventing and detecting irregularities in its use.

IS PERSONAL DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION OR TO AN INTERNATIONAL ORGANISATION?

Yes. It may be necessary, within the framework of protocols and other programmes concluded with institutions outside the European Union, to transfer personal data. In such cases, UNL will assess the recipient’s level of maturity and adopt appropriate safeguards, whether contractual or otherwise, to mitigate the risks associated with each transfer of personal data.

Cookies

1. ‘Cookies’ are small text files that identify each User’s computer on the UNL server. Cookies do not identify individual users; they only identify the computer being used.

2. This Website uses cookies to help determine the usefulness, interest and number of visits to the Website, enabling faster and more efficient browsing and eliminating the need to repeatedly enter the same information. In this way, UNL can provide a more personalised service tailored to Users.

3. The cookies used on this Website are as follows:

4. All modern browsers allow the User to accept, refuse or delete cookies, in particular by selecting the appropriate settings in their browser. You can configure cookies in your browser’s ‘Options’ or ‘Preferences’ menu. To find out more about cookies, including how to see which cookies have been set and how to manage and delete them, you can visit www.allaboutcookies.org, which includes information on how to manage user settings for various browser providers.

5. Not sure which web browser you use? To check, open your web browser and select “Help” at the top of the browser window. Then select “About”. A pop-up window should appear with information about your browser. Open your web browser and select the browser name at the top of the screen (e.g. “Firefox”). Then select “About”. A pop-up window should appear with information about your browser.

Please note, however, that by disabling cookies, you may partially or completely affect your browsing experience on the Website.

WHAT ARE THE RIGHTS OF DATA SUBJECTS?

Data subjects may, at any time, exercise their rights, including the right to request further information regarding the processing of their data, to have their data rectified, and, within certain limits, to have their data erased, to withdraw their consent or to object to the processing of their data, amongst others, by emailing nova. rgpd@unl.pt or by post to the address: Rectory of the New University of Lisbon, Campolide Campus, 1099-085 Lisbon. You may also contact the UNL Data Protection Officer at dpo@unl.pt

The data subject should bear in mind that, in certain cases (for example, due to legal requirements), their request may not be granted. In any event, they will be informed of the measures taken in this regard within one month of the request being made.

The data subject also has the right to lodge a complaint with the National Data Protection Commission at https://www.cnpd.pt/.

Data subjects should consult this page regularly, as this privacy notice may be updated.

Version 1 | 23/12/2020 | Data Controller