Concawe NO2 Viewer Privacy Policy

The importance of data protection
The Vlaamse Instelling voor Technologisch Onderzoek (VITO) and the European Fuel Manufacturers Association AISBL, Concawe division, attach great importance to the proper protection of the data they process, especially personal data. In this privacy statement, VITO and Concawe wish to explain how personal data is processed and protected, and what rights you have as a data subject. In the context of Concawe NO₂ Source Apportionment Viewer, VITO and Concawe act as the data controller.

Scope of this privacy statement
This privacy statement only applies to the entire lifecycle of information within Concawe NO₂ Source Apportionment Viewer, from the acquisition of information to the eventual deletion of information within both organizations.
For certain domains or processes, additional guidelines or procedures may be developed that describe in detail which measures are taken to achieve the desired level of data protection.
The purpose of this privacy statement is to inform you as fully as possible and to explain how and why VITO and Concawe, as the data controllers, collect, uses, and retains your personal data, as well as to inform you about your rights and how you can exercise them.

Data controller
As a data controller, VITO and Concawe process your personal data as described in this privacy statement. This means that VITO and Concawe determine the purposes and methods of processing these personal data and are the point of contact not only for you but also for the supervisory authority for any questions about the use and processing of your personal data.

Information regarding VITO as data controller:

VITO has an  appointed a Data Protection Officer (DPO) as the unique point of contact within VITO for all your questions and comments regarding the protection and processing of personal data by VITO. You can contact the DPO at the following address and email address:
VITO
Data Protection Officer
Boeretang 200
2400 Mol
Assist-dpo@vito.be

Information regarding Concawe as data controller:

The data controller in respect of Concawe NO₂ Source Apportionment Viewer is Concawe Boulevard du Souverain 165 B-1160 Brussels, Belgium.
Concawe is registered in Belgium with registration number VAT BE 0440 441 663
You can contact the data controller by writing to Concawe

Boulevard du Souverain
165 B-1160 BRUSSELS
Belgium

or calling Tel : 032 2 566 9160
or sending an email to info@concawe.eu

Nature, purpose, legal basis, and retention period
VITO and Concawe collect the following personal information within Concawe NO₂ Source Apportionment Viewer:

• Full name/First name
• Email address
• Password
• Affiliation (e.g., the name of the company or research organisation)
• Reason for requesting the account

The legal basis for collecting and processing these personal data is the consent of the data subject.
We only use the personal data that are relevant and necessary for the intended purpose of the processing.
Your personal data are retained as long as necessary for the achievement of the purposes, to comply with contractual and legal requirements, and to establish, exercise, or defend our legal rights. A retention period has been determined for each category based on these requirements.

Data transfers
To protect your privacy, employees and collaborators only have access to your personal data if and insofar as necessary to perform their duties.
If contractually or legally required, or if necessary for the public interest, VITO or Concawe will transfer your data to third parties. In addition, VITO and Concawe use specialized partners in Belgium or abroad for performing certain services or improving the quality of our performance, and in such cases, transferring personal data is necessary.
VITO, nor Concawe do transfer your data to third parties for commercial use.
VITO, nor Concawe do transfer the data obtained in the context of Concawe NO₂ Source Apportionment Viewer to countries outside the European Economic Area (EEA).

Information security
VITO and Concawe are committed to ensuring the confidentiality and security of personal data. We have implemented several technical and organizational measures to protect personal data against loss, unauthorized modification, unauthorized access, and unauthorized processing.

Your rights

1. Right to information
   As a data subject, you have the right to information. Through this privacy statement, we aim to provide you with information about the data we process, what we do with this data, the legal basis for the processing, and to whom we transfer this data.
2. Right of access
   You have the right to request access to the data we hold and process about you. You may request a copy. Access to certain data may only be granted on-site; in consultation with our DPO, a place and time will be agreed upon.
3. Right to rectification
   You always have the right to have your data corrected if there are errors.
4. Right to erasure
   You may request that your personal data be erased when there is no longer a valid reason to process them.
   This right is not absolute and can only be enforced when:

• The personal data are no longer necessary for the purpose for which they were collected;
• The personal data were collected without explicit consent and are therefore unlawfully processed;
• There is a legal obligation to erase the data;
• Consent for the processing is withdrawn;
• Personal data provided when you were a minor can be erased at any time.

1. Right to restriction
   Restriction means that your personal data, except for storage, may only be processed with your consent for establishing, exercising, or defending legal claims, for the protection of the rights of another natural or legal person, or for reasons of public interest.
   In general, you may exercise your right to restriction of processing when it is unclear whether or when your personal data will need to be erased. You may request that your data not be processed until everything has been corrected, or that your data be retained but no longer used.
2. Right to object
   If we process your personal data on the basis of a legitimate interest or a task of public interest, you may object to the processing of your personal data. We will weigh the legitimate grounds for processing against your interests, rights, and freedoms. Processing will be suspended during this assessment.
   If you object to direct marketing, we will automatically cease processing your personal data for that purpose.
3. Right to data portability
   You may request that your data be transferred from VITO and/or Concawe to another organization.
4. Right not to be subject to automated decision-making
   You may request that VITO and/or Concawe no longer use your data unless there are compelling reasons to do so.

How to exercise these rights
To exercise your rights, you can send it to us by mail or email at the address below:
for VITO
Data Protection Officer
Boeretang 200
2400 Mol
Assist-dpo@vito.be

for Concawe

Boulevard du Souverain

165 B-1160 BRUSSELS

Belgium

Tel : 032 2 566 9160

info@concawe.eu

Depending on the subject of the request, and to prevent fraudulent requests from sharing personal data with the wrong people, we may need to verify your identity. We may ask you to send us a copy of your passport or identity card with proof of your full name, date of birth, and place of birth; you may redact other parts. The copy must be complete enough for us to identify you. After processing your request, we will delete this copy unless otherwise required by law.
For on-site access, you will also need to identify yourself.

If you believe the processing of your personal data violates privacy legislation, you also have the right to file a complaint with the Belgian privacy protection authority –  Gegevensbeschermingsautoriteit:

• The complaints procedure with the Gegevensbeschermingsautoriteit can be found at the following link: https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen.

Data protection policy
You can find the full privacy policy of VITO here, and the full privacy policy of Concawe here. This provides further details on the privacy policy within the organizations, the processing principles applied, the register of processing activities, and the points previously mentioned are explained in more detail.

Changes to this privacy statement
VITO and Concawe may amend or update this privacy statement to reflect changes in our practices regarding the processing of personal data or changes in applicable law. We will post the updated version on our website. We encourage you to regularly review the online version of this privacy statement.