INESC Brussels HUB Privacy Policy

INESC Brussels HUB was created to increase the success of the five institutes from INESC Group: INESC Coimbra, INESC ID, INESC MN, INESC TEC, and INOV.
The INESC Brussels HUB is committed to ensuring that all activities are conducted in an ethically responsible manner. Our “Privacy Policy” explains how we collect, use, disclose, and protect the information, ensuring compliance with the national and European data protection legislation applicable, on our website.

1. NOTION OF PERSONAL DATA AND DATA PROCESSING
“Personal data” means any information that relates to or identifies a person as an individual.
The processing of personal data covers all operations or set of operations carried out on personal data, by automated or non-automated means, such as:
•    Collecting of personal data
•    Registering and preserving of personal data
•    Organising of personal data
•    Adapting or changing of personal data
•    Consulting and using of personal data
•    Disclosing, regardless of how personal data are disseminated
•    Comparing or combining personal data
•    Limiting, erasing or destroying personal data

2. RESPONSIBILITIES FOR PROCESSING PERSONAL DATA
INESC TEC, INESC Coimbra, INESC INOV, INESC ID and INESC MN, as jointly responsible for the processing of personal data, have regulated their respective responsibilities regarding such processing.
It is INESC TEC’s primary responsibility, as the contact point, to respond to requests submitted by the data subjects, with the necessary assistance and support from the other INESC institutions.  
Modal Creativity, Lda is the developer of the website and provides storage services, therefore a data processor according to Regulation (EU) 2016/679, of the European Parliament European Parliament, and of the Council of 27 April 2016.

3. PERSONAL DATA COLLECTED, PURPOSES OF PROCESSING AND BINDING LEGAL PRINCIPLES
The processing of personal data will only take place according to a set of specific purposes, always based on an adequate legal ground laid down in the applicable legislation.

4. PERSONAL DATA RETENTION PERIOD
As a matter of principle, and according to the legal requirements, all personal data processed will be kept for the strictly necessary period, also taking into account the legal basis of each processing activity. At the end of that period, the data will be erased, even if the data subject does not express his/her agreement; however, data subjects may ask for the erasure of its data at any time, and under the legally permitted terms. The table above and the Cookies Policy further specify the applicable data retention periods.

5. TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES AND INTERVENTION BY PROCESSORS
The collected data may not be shared with third parties and no data transfers are envisaged.

5. RIGHTS OF THE PERSONAL DATA SUBJECT
Data subjects are the natural persons to whom specific data or set of data relate.
The data subject is entitled to, at any time, request from INESC Brussels HUB, under the terms allowed by the applicable legislation, the compliance with the following rights:
•    Access to personal data
•    Adjustment or correction of personal data
•    Erase of personal data
•    Limitation of personal data processing
•    Refuse to personal data processing
•    Refuse to being subject to individual decisions made via exclusively automated means
•    Request of the portability of personal data to any designated entity, even if the personal data are stored in digital format.
The exercise of these rights may, in practice, be limited or conditioned because of the fulfilment of a legal obligation or the compliance with the rights of third parties that take precedence over them in the specific case. However, in such circumstances, INESC Brussels HUB will never fail to provide the interested party with adequate information about those limitations or conditions.
The data subject also has the right to file a complaint with a Supervisory Authority of one of EU Member-States. In Portugal, the National Supervisory Authority dedicated to supervise the compliance with personal data protection is the Comissão Nacional de Proteção de Dados (CNPD).
For more information about exercising your rights according to CNPD guidelines, be sure to visit the entity’s website: www.cnpd.pt.

6. COOKIES POLICY
Cookies are small files that a browser stores on the visitors’ computer or mobile device. These files are necessary for the server’s functioning; for example, the server needs to differentiate all users who visit our website (www.hub.inesc.pt) and maintain the performance during navigation. More specifically, cookies relate to information about the type of browser, operating systems and date and time of access to the website, rather than information about personal data e.g. name or IP. These cookies are necessary for the functioning and security of our website; as a matter of principle, they do not track or monitor the users’ behaviour.

Statistical analysis and third party cookies:
In addition to the aforementioned performance cookies, strictly necessary for the functioning of the website, other cookies may be installed, but only after the users’ consent. Examples of said cookies are those relating to statistical analysis tools, such as Matomo (https://matomo.org ), used entirely and exclusively for statistical purposes – in particular, to analyse the number of users visiting the website and evaluate their browsing experience, in order to keep improving our website. The INESC Brussels HUB website does not resort to third parties for the implementation of the aforementioned open-source analytics platform (Matomo). This tool ensures the protection of users’ personal data through resources designed for said purpose e.g. IP-masking. In addition, the data controllers have developed a solution to manage the users’ consent on the institution’s website, namely concerning the management of analytics cookies for the aforementioned statistical purposes.
It is important to point out that the website does not install this type of cookies by default.
Finally, INESC Brussels HUB may use third-party web services to display content within our website, such as images or videos, or to conduct surveys or provide event registration forms. However, these resources do not run automatically on our website, thus requiring the users’ activation and consent for that purpose. By default, our website blocks the installation of said cookies. Facebook, YouTube, Twitter, LinkedIn, Instagram or other similar platforms managed by third parties may install cookies for the purpose of sharing content on social networks or for compiling consultation statistics, but only when activated by the users. In this sense, when used by visitors to our website, they are allowed to activate the resource in question and consent to the collection of that data by the corresponding third party. From that particular moment, the data controllers will neither determine nor ensure which data about the use of the embedded content is collected. Moreover, they will not guarantee that the list of cookies installed by such third parties remains unchanged. We advise the users to review the privacy policy of such service providers before making any their decision on the provision of consent regarding the processing of data.

In addition, users will always be able to control and manage these and other aforementioned cookies through the web browser settings, which can block and erase them. For this purpose, you should check your browser’s “Help” menu to find out the correct way to change or disable cookies. However, we warn you that the deactivation of the strictly necessary cookies can substantially affect the browsing experience on the website, preventing users from accessing relevant features.

For more information on how to manage cookies and check your settings, we recommend visiting the site http://www.allaboutcookies.org/ .

We also recommend visiting Cookies Policy and Settings (link) for detailed information about our cookies policy and available options.

7. CONTACTS
The data subject may exercise his/her rights of access, adjustment, correction or deletion, as well as request any information regarding the processing of his/her personal data through written request addressed to INESC Brussels HUB, via mail and/or email addresses:

 INESC Brussels HUB – Rue du Luxembourg 3, 3º, 1000 Brussels

(DPO) dpo@inesctec.pt

8. UPDATES
INESC Brussels HUB may be required to amend this Policy, namely due to the need to adapt it to possible legal changes or to recommendations by Supervisory Authorities, which it is recommended its consultation regularly.