Privacy statement regarding protection of personal data in relation to the EGNOS User Support Website, EDAS and EGNOS Helpdesk.
All personal data are dealt with in compliance with Regulation (EU) No 2018/1725 of the European Parliament and of the Council of 23 october 2018 on the protection of natural persons with regard to the processing of personal data by the European institutions, bodies, offices and agencies and on the free movement of such data (Regulation (EU) 2018/1725).
The following data protection information notice outlines the criteria by which the data is collected, managed and used in relation to the EGNOS User Support Website, EDAS and EGNOS Helpdesk.
Identity of the controller:
Controller: EUSPA Executive Director
European Union Agency for the Space Programme
Janovského 438/2
170 00 Prague 7 – Holesovice
Czech Republic
Delegated controller: Head of EGNOS Exploitation; Head of Communications
Identity of the Processor:
ESSP SAS (EUSPA contractor as EGNOS Service Provider - currently under contract GSA/NP/09/12)
3, rue Tarfaya - CS 84432 31405 Toulouse Cedex 4 – France
Delegated processor: Executive Director of EUROPEAN SATELLITE SERVICES PROVIDER SAS;
Data Protection Officer
Purpose of processing:
- EGNOS User Support website registration
The purpose of the processing is the management and administration of the website, including the following activities:
- To enable access to specific contents and to the subscription to EGNOS related notifications/alerts.
- Dissemination of specific EGNOS User Support website related news and service information (e.g. outages).
- Dissemination of specific consultations and of the annual EGNOS User Satisfaction survey.
- EGNOS Documentation subscription
The purpose of the processing is the management of the EGNOS documentation subscriptions, including the following activites:
- Management of the EGNOS Documentation subscription function.
- Monitoring and reporting on the EGNOS documentation subscriptions use / activity.
- Dissemination of the annual EGNOS User Satisfaction survey.
- EDAS Users registration
The purpose of the processing is the management of the EDAS service, including the following activities:
- To enable access to the EDAS services (EUSPA authorisation required).
- Communications related to EDAS services status (new releases, planned/unplanned outages and interventions).
- Communications related to EDAS services documentation (EDAS Service Definition Document, Service Notices, Service Implementation Roadmaps...).
- Monitoring and reporting on the EDAS use and EDAS-based applications implementation status.
- To implement specific consultations related to the EDAS use.
- Dissemination of the annual EGNOS User Satisfaction survey.
- EGNOS Helpdesk form / e-mail / phone calls
The purpose of the processing is the management of the EGNOS Helpdesk, including the following activities:
- Management of the EGNOS related questions / tickets.
- Monitoring and reporting on the EGNOS Helpdesk use / activity.
- Dissemination of specific consultations (e.g. DEL-5) and of the annual EGNOS User Satisfaction survey.
Data concerned:
- EGNOS User Support website registration
Data necessary for the website related activities, administration and maintenance:
- obligatory data: e-mail address, first & second name, country, user category and service.
- optional data: phone, fax, name of organisation, position in the organisation, market segment and receiver
- EGNOS Documentation subscription
Data necessary for the management of the EDAS documentation subscription function:
- obligatory data: e-mail address, subscription preferences
- optional data: none
- EDAS Users registration
Data necessary for the management of the EDAS services including the verification of the data consistency and EU origin:
- obligatory data: e-mail address, name of organisation, business area of activity, country, phone, IP, address (for SL1 & SL2), purpose & description of the project, Internet Service Provider and Connection Point Address
- optional data: type of organisation, fax and requested service level
- EGNOS Helpdesk form / e-mail / phone calls
Data required for the EGNOS Helpdesk management:
- obligatory data: name, e-mail address, user category, EGNOS service and EGNOS domain
- optional data: name of organisation
When submitting a direct e-mail only the e-mail address is mandatory.
When contacting the EGNOS Helpdesk by phone only the telephone number and the e-mail address are mandatory.
Legal basis:
Activities in the frame of EGNOS Service Provision (ESP) contract between EUSPA and ESSP as contractor (ref. GSA/NP/09/12) and with data subjects’ express consent.
Recipients of the data processed:
- EGNOS User Support website registration and EGNOS Documentation subscription
Person which have access to the personal data on the basis of the ‘need to know’ principle to:
- a limited number of persons managing the EGNOS website and EGNOS Documentation subscription activities among ESSP and EUSPA staff and,
- a limited number of persons working for companies providing support to ESSP activities as regards the website management (e.g. GMV, Amazon) or companies providing IT support or hosting services to ESSP .
These recipients of the personal data concerned are bound by confidentiality clauses regarding the use, disclosure and protection of the personal data.
- EDAS Users Registration
Person which have access to the personal data on the basis of the ‘need to know’ principle to:
- a limited number of persons managing the EDAS activities among ESSP and EUSPA staff and,
- a limited number of persons working for companies providing support to ESSP activities as regards the EDAS management (e.g. ENAIRE, GMV).
These recipients of the personal data concerned are bound by confidentiality clauses regarding the use, disclosure and protection of the personal data.
- EGNOS Helpdesk form / e-mail / phone call
Persons which have access to the personal data on the basis of the ‘need to know’ principle to:
- a limited number of persons managing the EGNOS Helpdesk activities among ESSP and EUSPA staff and,
- a limited number of persons working for companies providing support to ESSP activities as regards the EGNOS Helpdesk management (e.g. GMV, Amazon) These recipients of the personal data concerned are bound by confidentiality clauses regarding the use, disclosure and protection of the personal data.
Lawfulness of processing:
The lawfulness of the processing is based on Article 5(d) of Regulation (EU) No 2018/1725. Data subjects unambiguously give their consent when submitting (a) the registration form in the case of the EGNOS User Support website and EDAS, (b) the EGNOS Documentation Subscription request and (c) the request form in the case of the EGNOS Helpdesk.
Information on the retention period of personal data:
Data shall be stored as long as required by the Financial Regulation and its Rules of Application for audit and discharge purposes: N+5 years from the end of the year of payment of the balance of the contract GSA/NP/09/12 plus an additional 2 years for discharge procedure of EU budget (= N+5+2).
Users can unregister from the EGNOS Helpdesk and EDAS databases by sending an email to personaldata.essp@essp-sas.eu. Personal data will be deleted once a user is no longer registered at the EGNOS Helpdesk and EDAS databases.
Users can unregister from the EGNOS User Support website database by editing their profiles in the “My Account” section of the website after logging in. Personal data will be deleted once a user is no longer registered in the website.
Users can unregister from the EGNOS Documentation Subscription database in the website by unselecting the required check-boxes from the subscriptions sections in the website and pressing the “unsubscribe” button. Personal data will be deleted once a user is no longer subscribed to any item.
Information on storage of the personal data and possible transfer of data
Personal data are electronically stored in:
- EGNOS User Support website registration and EGNOS Documentation subscription request:
- EGNOS User Support website database: hosting services sub-contracted to GMV which uses Amazon servers located in Europe.
- Specific website activity database: ESSP servers (Spain and France)
- EDAS Users registration
- EGNOS User Support website database: hosting services sub-contracted to GMV which uses Amazon servers located in Europe.
- EGNOS Helpdesk mailbox (egnos-helpdesk@essp-sas.eu): ESSP servers (France)
- Specific EDAS registered uses database ESSP servers (Spain and France)
- EGNOS Helpdesk form / e-mail / phone call
- EGNOS User Support website database: hosting services sub-contracted to GMV which uses Amazon servers located in Europe.
- EGNOS Helpdesk mailbox (egnos-helpdesk@essp-sas.eu): ESSP servers (France)
- Specific EGNOS Helpdesk database: ESSP servers (Spain and France)
The data subject’s rights:
- Data subjects have the right of access and rectification of their personal data at any time. Requests shall be addressed to ESSP Personal Data Officer : personaldata.essp@essp-sas.eu
- Data subjects are entitled to lodge an appeal at any time with the European Data Protection Supervisor (EDPS) at edps@edps.europa.eu should they consider that the processing operations do not comply with Regulation (EU) No 2018/1725.