Information is a key point to respect the fairness of the processing operation. Moreover, the right to be informed is a pre-requisite to all other data subjects' rights. In this context, the main quality of a good privacy statement is to provide essential easily readable information.
Regulation 45/2001 (herein after "the Regulation") applies to the processing of personal data carried out in the use of the discuto.io platform.
Further to Article 11 and Article 12 of this Regulation, the BEREC Office provides the data subjects with the following information:
The controller is the BEREC Office.
The processor is Community Based Innovation Systems GmbH represented by Mr. Hannes Leo, Email: email@example.com
The purpose of the processing is to organise ideation and document crowdsourcing projects on discuto.io.
The categories of data collected and used for the processing operations are:
- username, eMail address, password, IP address plus facultative information the user decides to add to the user profile (e.g. first name, last name, sector, affiliation, picture, social media handles, etc.);
- data produced during ideation or document crowdsourcing projects by voting, commenting and uploading ideas, attachment, pictures and videos.
The username, picture and the contributions of a user (e.g. comments and uploaded ideas) are displayed on the platform - i.e. in the ideation and document crowdsourcing processes and the user page. The votes of a user on the platform are secret, i.e. other participants cannot see how a user voted.\
cbased bears the right to appoint Third Parties with the provision of its services, either partially or as a whole. BEREC Office will be informed in advance about any change in appointing Third Parties with the provision of services. In this case the ToS remain applicable.
cbased reserves the right to change the ToS at any time without prior notice. BEREC Office will be informed in advance before any change in ToS will be effected. Users will be informed by email and through publication on the website four weeks before changes will come into effect.
Recipients or categories of recipients of the data are BEREC and cbased.
Communication of the personal data are voluntary. Failure to reply will not enable the user to use the platform.
Uploaded comments and ideas cannot be altered by the user. Any rectifications have to be sent to firstname.lastname@example.org. Votes can be altered as long as the process concerned is active.
Registered user can delete their account and all other related data at any time. The data is stored until the user decides to delete his/or her data.
After de-registration the stored user data, such as name, address and IP address, will be deleted within 30 days. Messages, posts, comments and votes will be made anonymous and will remain accessible in the course of the services provided by discuto. The email address will be stored until revocation of the desired information emails.
Participants (i.e. registered users that took part in ideation or crowdsourcing processes) have the right to access and rectify the data concerning him or her on the user profile by submitting an email to email@example.com. Their request will be treated as soon as possible and not later than 15 working days following the date of its recording.
The legal basis of the processing operation is Regulation (EC) No 1211/2009 of the European Parliament and of the Council of 25 November 2009 establishing the Body of European Regulators for Electronic Communications (BEREC) and the Office, and in particular Article 6(2) thereof.
This processing operation is lawful under Article 5 (a) of Regulation (EC) No 45/2001 2009 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data.
The candidates have the right to have recourse at any time to the Data Protection Officer (DPO) of the BEREC Office firstname.lastname@example.org and to the European Data Protection Supervisor (EDPS) email@example.com.