Description of the SUCCESS project

The international SUCCESS project – “Supporting success for all – Universal Design Principles in Digital Learning for students with disabilities” – is funded with the ERASMUS+ Programme agreement number 2020-1-PL01-KA226-SCH-095777. The project is executed between March 2021 and February 2023.

The project delivers web applications (such as a learning platform, a website, and others) mainly for students with disabilities, their teachers, caregivers, and therapists. The project also communicates with such target groups in various ways to achieve its research goals.

Scope of this Privacy Notice

This Privacy Notice sets out the criteria and the conditions under which the SUCCESS project collects, processes, stores, and transfers your personal data, how the confidentiality of such information is ensured as well as any law and/or regulation implemented or enacted in accordance with the GDPR (General Data Protection Regulation).

What Personal Data Do We Process and for what Purpose?

We will be processing the following personal data:

1. For communicating with you via emails, newsletters, questionnaires, etc.

   1. Name

   2. Email address

   3. Preferred language

   4. Role – such as student, teacher, caregiver, therapist, etc.

   5. Affiliation (school, institution, etc.)

2. For creating and maintaining your user profile in our web applications

   1. The data as above, but also:

   2. Nickname, username

   3. Profile picture

   4. Learning outcomes and other data you decide to share via our web applications

3. For application maintenance and for security reasons

   1. Cookies

   2. IP Address

   3. Access date & time

   4. record (log) of actions taken within applications

Providing the information above is necessary and if you choose not to provide certain information, you may not be able to use certain services or participate in certain activities.

Data Controller

The purpose and means of processing your data are determined by six joint data controllers from different European countries. Each data controller defined their contact point.

The joint data controllers and their contact points are the following:

1. INSTYTUT CHEMII BIOORGANICZNEJ POLSKIEJ AKADEMII NAUK, Poznan Supercomputing and Networking Center, ul. Z. Noskowskiego 12-14, 61-704 Poznan, Poland (PSNC). Contact to the data protection officer: tel. +48 61 8582044, email: dpo@ibch.poznan.pl

2. Casa Santa Rosa Istituto delle Figlie Santa Maria della Divina Provvidenza, Via Appia Antica 203, 00178 Roma, Italy (CSR). Contact email: marco.montanari@uniroma1.it

3. INSTITUTO POLITECNICO DO PORTO, Rua dr Roberto Frias 712, 4200-465 Porto, Portugal (IPP). Contact to the data protection officer: email: dpo@ipp.pt

4. UNIVERSITA DEGLI STUDI DI ROMA LA SAPIENZA, Piazzale Aldo Moro 5, 00185 Roma, Italy (URoma). Contact email: stefano.lariccia@uniroma1.it

5. LIETUVOS SVEIKATOS MOKSLU UNIVERSITETAS, A Mickeviciaus Gatve 9, 44307 Kaunas, Lithuania (LSMU). Contact to the data protection officer: duomenų.sauga@lsmu.lt

6. NATIONAL TECHNICAL UNIVERSITY OF ATHENS – NTUA, Heroon Polytechniou 9 Zographou Campus, 15780 Athina, Greece (NTUA). Contact to the data protection officer: drig@central.ntua.gr

Legal basis

Your personal data will be processed on the basis of:

• if you are 16 or older – your consent;

• if you are under 16 – the consent provided by the holder of parental responsibility over you.

Additionally, we process your personal data on the basis of legitimate interest consisting of providing to the users technical solution enabling them to use our web applications (based on voluntary decision of each user) as well as administrative and security maintenance of the applications what is not overridden by the interests or fundamental rights and freedoms of the user (data subject).

When and How we Share Personal Data?

Your personal data, when necessary, will be shared with third parties, that are following the same practices and have implemented the security and data protection requirements to ensure the adequate protection of your personal data. Your personal data, when necessary, may be also transferred to a third country but only to third parties that implement suitable safeguards such as approved certification mechanisms or standard data protection clauses.

Due to the nature of the applications being used some data (name and email) may be visible to other users of the applications (e.g. your name and your posts in a forum).

Personal Data Retention

Your personal data will be processed at least until the end of the project (currently planned for February 2023), or as long as the web application services are provided (currently planned at least one year since the project ends). After this period your personal data will be anonymized and used only for statistical purposes.

Security

To ensure the security of your personal data, we have in place the following measures:

• Minimisation and pseudonymization of personal data we collect;

• Multi-layers of firewalls to avoid the unauthorised external access;

• Managing, limiting and controlling access to personal data;

• Backup and redundancy;

• Regular testing of the effectiveness of the measures implemented;

• Safety and encrypted communication channels.

Your Rights

You have the right to: 

1. request access to your data;
2. ask us to rectify information;
3. withdraw your/parental consent what is not affecting the lawfulness of the processing based on the consent before its withdrawal;
4. request the deletion of your account and data here.

Those rights can be exercised by contacting any of the contact points listed in section “Data Controller”.

Additionally, you have the right to lodge a complaint with a supervisory authority from any of the countries listed in section “Data Controller”.

Privacy notice updates

This privacy notice may be reviewed and updated from time to time – in such case the privacy notice will be labelled as “Revised (date)”. The initial version of this notice was created in May 2021.