Personal Data

While using our project website, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personal identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City
• Cookies and Usage Data
• Technical information associated with the device you use, such as your IP-address, browser type, geographical location and operating system;
• Information concerning your browsing behaviour, such as how long you visit, what links you click on, what pages you visit and how many times you visit a page. 

When you fill out a contact form on our website, register for our newsletter or contact us in another way, we collect:

• Basic identity information you provide to us (such as your name, your e-mail address);
• The content of your communication and the technical details of the communication itself (with whom you correspond at our end, date, time, etc.);
• Your choice to receive our newsletter;
• Any other personal data you choose to provide to us. 

We receive all personal data mentioned above directly from you. It may happen that we receive additional information about your surfing behaviour from partners such as Google. If you require more information about the personal data these parties process about you and make available to others, you are kindly requested to consult their respective privacy policies.

 

Location and Transfer

We process your personal data within the European Economic Area (EEA). However, in order to process your personal data for the purposes outlined in Article 3 above, we may also transfer your personal data to third parties who process on our behalf outside the EEA.

Each such partner outside the EEA that processes your personal data will be bound to observe adequate safeguards with regard to the processing of your personal data. Such safeguards will be the consequence of:

The recipient country having legislation in place which may be considered equivalent to the protection offered within the EEA; or

A contractual arrangement between the MAGDA project coordinator and that entity. 

 

Data Security

Whilst making every attempt to secure personal data, MAGDA cannot accept responsibility for any unauthorised access or loss of personal information that is beyond the control of MAGDA.

The organisational and private information that you share will be published on the project website with your consent.

The project website shares knowledge and materials between all kinds of stakeholders, therefore MAGDA recommends you to not submit any information on the project website that you consider confidential.

The MAGDA project website infrastructure, including Customer Data and regular back-ups of Customer Data, is located in a secure environment. The MAGDA project website systems are behind a stateful firewall. 

The data in transit is encrypted using the most current version of HTTPS/TLS. In addition, we encrypt all backups of our customers’ data using secure Bcrypt hashing and Message Digest Algorithm 5 (MD5) encryption. 

Whilst precautions are taken to detect computer viruses and ensure security, MAGDA cannot guarantee that the project website is virus-free and secure. MAGDA shall not be liable for any loss or damage which may occur as a result of any virus or breach of security. 

 

Disclaimer of liability

The material and information contained on this project website is for general information purposes only. You should not rely upon the material or information on the project website as a basis for making any business, legal or any other decisions. Whilst we endeavour to keep the information up to date and correct, MAGDA makes no representations or warranties of any kind, express or implied about the completeness, accuracy, reliability, suitability or availability with respect to the project website or the information, products, services or related graphics contained on the project website for any purpose. Any reliance you place on such material is therefore strictly at your own risk.

Although every effort is made to keep the project website up and running smoothly, due to the nature of the Internet and the technology involved, MAGDA takes no responsibility for and will not be liable for the project website being temporarily unavailable due to technical issues (or otherwise) beyond its control or for any loss or damage suffered as a result of the use of or access to, or inability to use or access this project website whatsoever.

To the extent not prohibited by law, in no circumstances shall MAGDA be liable to you or any other third parties for any loss or damage (including, without limitation, damage for loss of business or loss of profits) arising directly or indirectly from your use of or inability to use, this site or any of the material contained in it.

 

External Links

Certain links in this project website will lead to websites which are not under the control of MAGDA. When you activate these, you will leave the MAGDA project website. MAGDA has no control over and accepts no liability in respect of materials, products or services available on any website which is not under the control of MAGDA.

 

Restrictions

You are specifically restricted from all of the following:

• publishing any of the project website material in any other media;
• selling, sublicensing and/or otherwise commercializing any of the project website material;
• publicly performing and/or showing any of the project website material;
• using this project website in any way that is or may be damaging to this project website;
• using this project website in any way that impacts user access to this project website;
• using this project website contrary to applicable laws and regulations, or in any way that may cause harm to the project website, or to any person or business entity;
• using this project website to engage in any advertising or marketing. 

General Data Protection Regulations (GDPR) 

The entity assuming the role of data processing and controller for the purpose of General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is: 

MINDS & SPARKS GmbH

Gumpendorfer Straße 73/17, 1060 Vienna, Austria 

1060 Wien

Austria

office@mindsandsparks.org 

The project website MAGDA collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems. 

When using these general data and information, MAGDA does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, MAGDA analyses anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

Our main policy and procedure document for data protection does meet the standards and requirements of the EU GDPR. Accountability and governance measures are in place to ensure that we understand and adequately disseminate and evidence our obligations and responsibilities with a dedicated focus on privacy by design and the rights of individuals.

The legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Article 6(1) lit. of GDPR our legitimate interest is to carry out our business in favour of the well-being of all our consortium, employees and the shareholders.

 

Use of Data

• MAGDA uses the collected data for various purposes:
• To provide and maintain the Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so
• To provide customer care and support
• To provide analysis or valuable information so that we can improve the Service
• To monitor the usage of the Service
• To detect, prevent and address technical issues

 

Disclosure of Data

• MAGDA may disclose your Personal Data in the good faith belief that such action is necessary:
• To comply with a legal obligation
• To protect and defend the rights or property of MAGDA
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability 

 

Contact possibility via project website

The project website https://magdaproject.eu/ contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.

Routine erasure and blocking of personal data

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to.

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.  

 

Protection of citizen’s right

I. Right of confirmation. Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.

II. Right of access. Each data subject shall have the right granted by the European legislator to obtain from the controller, free information about his or her personal data stored at any time and a copy of this information.

III. Right to rectification. Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.

IV. Right to erasure (Right to be forgotten) Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary:

1. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
2. The data subject withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
3. The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
4. The personal data have been unlawfully processed.
5. The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
6. The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR. If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by https://www.magda.eu, he or she may, at any time, contact any employee of the controller.

V. Right of restriction of processing. Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:

1. The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
2. The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use.
3. The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
4. The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

VI. Right to data portability. Each data subject shall have the right granted by the European legislator, to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used and machine-readable format. He or she shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.