Privacy Notice
Introduction
In accordance with Articles12, 13 and 14 of the EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter the “GDPR”), this Privacy Notice (hereafter “the Notice”) explains how the C2DH of the University of Luxembourg collects, processes and protects Personal Data in relation with the Historesch Gesinn project. The Historesch Gesinn project collects scans of photographs and stories that relate to the history of Luxembourg. The aim is to present a multi-narrative and inclusive story about the country through the collection on this website and projects runs by researchers from the C2DH as well as our cultural partners.
What data do we collect and process?
The personal data we process includes:
- name, surname
- e-mail address or phonenumber
- photos (optional)
- audio recordings (optional)
- written statements
We collect personal data directly from you through either the online collection form or with written consent forms during our in-person events.
All necessary procedures and precautions will be taken to maintain the confidentiality of research participants.
Why do we collect and use your personal data?
We collect and use your data to address the research questions that the Research Project aims to tackle; this may involve writing dissertations or reports, storing and analysing the data and publishing our research results.
The CD2H runs the Historesch Gesinn platform for the collection and processing of images and recordings of memories to present a multi-narrative and inclusive story about the Luxembourg in collaboration with cultural institutions. The CD2H wants to offer the users of the platform a way to contribute their memories and photographs to ongoing historical research projects.
Personal data is processed within the Historesch Gesinn project for two reasons: first of all, we collect and use the e-mail address or phone number of users to get in touch with them in case we want to include in our project or want to invite them for a full interview. Furthermore, we collect contributions by our users through uploads that can take the form of text, images, or audio recordings that we make available online.
What is our legal basis for processing the data?
Your personal data relating to the Research Project will be processed in accordance with the General Data Protection Regulation (GDPR) and the Luxembourg Act of 1 August 2018 on Data Protection. The legal basis for the processing of your personal data in the context of the Research Project is laid down in Article 6 (1) GDPR a: the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
The research mission of the University is laid down in the Act of 27 June 2018 concerning the organisation of the University of Luxembourg.
Who is responsible for the processing of my personal data?
The Data Controller in respect of the processing of your data is the University of Luxembourg, a public institution for higher education and research, whose registered office is at 2 avenue de l’Université, L-4365 Esch-sur-Alzette, Luxembourg, acting for the Department of the Center for Contemporary and Digital History (C2DH).
For any concerns concerning the processing of your personal data you can contact the University of Luxembourg’s Data Protection Officer by email at dpo@uni.lu, or by post at the following address:
UNIVERSITÉ DU LUXEMBOURG
Data Protection Officer
Maison du Savoir
2, Avenue de l’Université
L-4365 Esch-sur-Alzette
How do we protect your personal data? Who can access my data?
In order to protect the confidentiality of your data, only researchers assigned to the research theme will be able to access the personal data. Contributors can decide if they want their real names published and choose a nickname/pseudonym. Their contributions (texts, images, and audio recordings) will be published according to the consent form to all visitors of the website Hisoresch Gesinn.
How long is your personal data stored for?
The Personal Data provided by you are kept for a duration of 10 years which are necessary to conduct the research project.
Do we transfer data outside the European Union?
Your personal data will only be processed within the European Union.
What are your rights under the General Data Protection Regulation?
You will have the right to access and rectify your personal data. In certain cases (in accordance with the conditions set out by the General Data Protection Regulation (Regulation (EU) 2016/679)), you will also have the right to object to the way in which your data is used, to request that your data be deleted, to ask to restrict certain aspects of the processing of your data and to retrieve your data to forward it to a third party (right to data portability).
You also have the right to withdraw your consent to the use of your data at any time. This applies both to the use of your data in this Research Project and to their use in other research. But please note that if you withdraw your consent once the investigators have already collected data for research, they are still allowed to use this information.
If you wish to exercise your rights, you should contact the principal investigator or his/her designated representative. He/she will liaise with the University of Luxembourg’s Data Protection Officer to handle your request. You can also contact the Data Protection Officer by email at dpo@uni.lu (the DPO will liaise with the PI of the Research Project to handle your request) or by post at the following address:
UNIVERSITÉ DU LUXEMBOURG
Data Protection Officer
Maison du Savoir
2, Avenue de l’Université
L-4365 Esch-sur-Alzette
You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) regarding the processing of your personal data. Further information is provided at http://www.cnpd.lu. You can also use the CNPD contact form at https://cnpd.public.lu/fr/support/contact.html.