EUSPA is committed to protect your personal data and to respect your privacy. All personal data are dealt with in compliance with Regulation (EU) No 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the European institutions, bodies, offices and agencies and on the free movement of such data (Regulation (EU) 2018/1725).
The following data protection information notice outlines the criteria by which the data is collected, managed and used in relation to the EGNOS and EDAS-Maritime User Support Websites, E-GNSS Call Centre, and EDAS-Maritime and EGNOS Helpdesk.
This privacy statement explains the reason for the processing of your personal data. It explains the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible Data Controller with whom you may exercise your rights, the Data Protection Officer and the European Data Protection Supervisor.
Identity of the controller:
Controller: Head of EGNOS Exploitation, egnos-service-provision@euspa.europa.eu
European Union Agency for the Space Programme
Janovského 438/2
170 00 Prague 7 – Holesovice
Czech Republic
DPO: European Union Agency for the Space Programme (EUSPA), Data Protection Officer, dpo@euspa.europa.eu.
Identity of the Processor:
ESSP SAS (EUSPA contractor as EGNOS Service Provider - currently under contract GSA/NP/09/12)
3, rue Tarfaya - CS 84432 31405 Toulouse Cedex 4 – France
Delegated processor: Executive Director of EUROPEAN SATELLITE SERVICES PROVIDER SAS;
Purpose of processing:
Data / categories of data concerned:
When submitting a direct e-mail only the e-mail address is mandatory.
When contacting the EGNOS and EDAS-Maritime Helpdesk by phone only the telephone number and the e-mail address are mandatory.
Legal basis:
Activities in the frame of EGNOS Service Provision (ESP) contract between EUSPA and ESSP as contractor (ref. GSA/NP/09/12) and with data subjects’ express consent.
Recipients of the data processed:
These recipients of the personal data concerned are bound by confidentiality clauses regarding the use, disclosure and protection of the personal data.
-
EDAS Users Registration
Person which have access to the personal data on the basis of the ‘need to know’ principle to:
- a limited number of persons managing the EDAS activities among ESSP and EUSPA staff members and,
- a limited number of external contractors providing support to EUSPA and ESSP activities as regards the EDAS management (e.g. ENAIRE, GMV).
These recipients of the personal data concerned are bound by confidentiality clauses regarding the use, disclosure and protection of the personal data.
Lawfulness of processing:
The lawfulness of the processing is based on Article 5(d) of Regulation (EU) No 2018/1725.
Data subjects unambiguously give their consent when submitting (a) the registration form in the case of the EGNOS User Support website and EDAS-Maritime, (b) the EGNOS Documentation Subscription request and / or (c) the request form in the case of the EGNOS Helpdesk.
Information on the retention period of personal data:
Data shall be stored as long as required by Regulation (EU, Euratom) 2018/1046 (Financial Regulation) for audit and discharge purposes: N+5 years from the end of the year of payment of the balance of the contract GSA/CD/09/19 plus an additional 2 years for discharge procedure of EU budget (= N+5+2), unless the users unregisters earlier. In accordance with Article 75, paragraph 3 of the Financial Regulation, personal data contained in supporting documents shall, where possible, be deleted when those data are not necessary for budgetary discharge, control and audit purposes.
Helpdesk users phone calls are recorded and stored for a period of 48 days.
Users can unregister from the EGNOS and EDAS databases by sending an email to personaldata.essp@essp-sas.eu. Personal data will be deleted once a user is no longer registered at the EGNOS and EDAS databases.
Users can unregister from the EGNOS and EDAS-Maritime User Support websites databases by editing their profiles in the “My Account” section of the website after logging in. Personal data will be deleted once a user is no longer registered in the website.
Users can unregister from the EGNOS Documentation Subscription database in the website by unselecting the required check-boxes from the subscriptions sections in the website and pressing the “unsubscribe” button. Personal data will be deleted once a user is no longer subscribed to any item.
Once the retention period is over, personal data are destroyed.
Information on storage of the personal data and possible transfer of data
Personal data are electronically stored in:
- EGNOS and EDAS-Maritime User Support website registration and EGNOS Documentation subscription request:
- EGNOS and EDAS-Maritime User Support website database: hosting services sub-contracted to GMV which uses Amazon Web Services servers located in Europe.
- Specific website activity database: ESSP servers (Spain and France)
- Servers of EUSPA contractors mentioned above (under the section on “recipients of the data”), which are located in the EU and abiding by the necessary security provisions;
- EDAS Users registration
- EGNOS and EDAS-Maritime User Support website database: hosting services sub-contracted to GMV which uses Amazon servers located in Europe.
- Old EGNOS Helpdesk mailbox (egnos-helpdesk@essp-sas.eu): ESSP servers (France)
- New EGNOS Helpdesk mailbox (helpdesk@egnos.gsc-europa.eu)
- EDAS-Maritime Helpdesk mailbox (helpdesk@edas.gsc-europa.eu)
- Specific EDAS registered uses database ESSP servers (Spain and France) - EUSPA EDAS mailbox (EDAS@euspa.europa.eu): EUSPA servers
- Servers of EUSPA contractors mentioned above (under the section on “recipients of the data”), which are located in the EU and abiding by the necessary security provisions;
- EGNOS and EDAS-Maritime Helpdesk form / e-mail / phone call (E-GNSS Call Centre)
- EGNOS User Support website database: hosting services sub-contracted to GMV which uses Amazon servers located in Europe.
- Old EGNOS Helpdesk mailbox (egnos-helpdesk@essp-sas.eu): ESSP servers (France)
- New EGNOS Helpdesk mailbox (helpdesk@egnos.gsc-europa.eu)
- Specific EGNOS Helpdesk database: ESSP servers (Spain and France) - EUSPA EDAS mailbox (EDAS@euspa.europa.eu): EUSPA servers
- Personal data may be stored on the servers of EUSPA contractors mentioned above (under the section on “recipients of the data”), which are located in the EU and abiding by the necessary security provisions.
It is underlined that Amazon Web Services (AWS) are provided by Amazon.com Inc, a US incorporated/based company. According to AWS, a small number of AWS services might involve the transfer of data to the US, for example, to develop and improve those services or because transfer is an essential part of the service (such as a content delivery service). In order to allow you to make an informed decision, please note that personal data that may be transferred to the United States of America may be subject to (a) disclosure to governmental authorities and/or (b) further transfer to other economic operators established in third countries; the EUSPA has no visibility on such processing operations.
Such transfer can occur on the basis of your consent to the proposed transfer (Art. 50(1)(a) of Regulation (EU) 2018/1725).
Automated decision-making
Your data will not be used for an automated decision-making, including profiling.
The data subject’s rights:
You have specific rights as a “data subject” under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the right:
- To obtain confirmation as to whether or not your personal data are being processed;
- To access your personal data and obtain detailed information on the processing;
- Of rectification of inaccurate personal data;
- Of erasure of personal data if the statutory provisions are met;
- Of restriction of processing if the statutory provisions are met;
- To data portability, where applicable;
- To withdraw the consent, without affecting the lawfulness of the processing carried out before you have withdrawn the consent.
Any request for the exercise of any of the abovementioned rights shall be addressed to egnos-service-provision@euspa.europa.eu or in case of conflict the Data Protection Officer at dpo@euspa.europa.eu. Data subjects are kindly requested to describe their requests explicitly.
You also have the right to lodge a complaint to the European Data Protection Supervisor at edps@edps.europa.eu should they consider that the processing operations do not comply with Regulation (EU) No 2018/1725.
Contact information: