List of active policies

Full policy

Privacy Policy

About the Service

This Moodle platform is operated by the Galicia Supercomputing Centre (CESGA) as the technical Service Provider for the Radiography4Future Erasmus+ project.

The platform supports the activities of the Radiography4Future Consortium, coordinated by the University College of Northern Denmark (UCN) and co-funded by the European Union under the Erasmus+ Programme.

Access to the platform is restricted to authorised participants from consortium partner institutions. Authentication may be performed through the eduGAIN identity federation to enable secure access using the users' home institutional credentials.

Where necessary for the implementation of the project, authorised consortium partners may access personal data available within the platform for purposes including:

• project administration and coordination
• management of learning activities
• monitoring project participation and outcomes
• preparation of project reports required by the Erasmus+ Programme;
• scientific research and dissemination activities related to the project, where applicable and in accordance with applicable data protection legislation

Access is granted only to authorised personnel and only to the extent necessary for the performance of their duties.

Service Provider and Platform Operator

Galicia Supercomputing Centre (CESGA) is responsible for the technical operation, maintenance and security of this Moodle platform.

• Entity: Galicia Supercomputing Center
• Address: Avenida de vigo S/N - Santiago de Compostela - SPAIN
• Data Protection Officer: dpo@cesga.es

Project Coordinator

University College of Northern Denmark (UCN) acts as coordinator of the Radiography4Future Erasmus+ Consortium.

• Entity: University College of Northern Denmark
• Address: Professionshøjskolen UCN, Selma Lagerløfs Vej 2, 9220 Aalborg Ø
• Data Protection Officer: ucn-dpo@ucn.dk

Data Controllers

Personal data are processed by CESGA and, where applicable, by the consortium partners in accordance with their respective roles and responsibilities under the General Data Protection Regulation (EU) 2016/679.

Purpose of processing

The personal data received through the eduGAIN identity federation is used exclusively for:

• Authenticate the user.
• Authorise access to the resources and services of the Radiography4Future training platform.
• Manage the user account.
• Record the activity necessary to ensure the security of the service.
• Comply with applicable legal obligations.

The data will not be used for commercial purposes or for profiling for advertising purposes.

Personal data processed

Depending on the information sent by the Identity Provider, the following attributes may be processed:

• Persistent user identifier.
• Name.
• Surnames.
• Email address.
• Organization of belonging.
• Affiliation (student, faculty, staff, researcher, etc.).
• Primary identifier (when required).

Only the attributes necessary for the operation of the service will be requested and processed, following the principle of data minimisation.

Legal basis

The treatment is carried out on the basis of:

• The execution of the existing relationship between the user and the responsible entity.
• Compliance with legal obligations.
• The legitimate interest in guaranteeing the security and correct functioning of the service.

Data retention

Personal data will be kept only for as long as necessary to:

• Maintain the user account.
• Provide the requested service.
• Comply with legal obligations.
• Resolve security or audit incidents.

Once these purposes have been completed, the data will be deleted or anonymized in accordance with the applicable regulations.

Data transfer

Personal data may be shared with authorised consortium partner institutions where this is necessary for the implementation and management of the Radiography4Future Erasmus+ project, including reporting, quality assurance and research activities related to the project. Such sharing is limited to the data necessary for these purposes and is carried out in accordance with the GDPR and applicable contractual arrangements.

Personal data will not be communicated to third parties unless when there is a legal obligation.

Security

Appropriate technical and organisational measures are in place to protect personal data agains unauthorised access, alteration, loss or destruction.

Rights of data subjects

Under the General Data Protection Regulation (EU) 2016/679 (GDPR), users have the right to:

• Access their personal data.
• Request the rectification of inaccurate or incomplete data.
• Request the erasure of their personal data where applicable.
• Request the restriction of processing under certain circumstances.
• Object to the processing of their personal data where applicable.
• Receive their personal data in a structured, commonly used and machine-readable format (data portability), where applicable.

Requests concerning the processing of personal data within this Moodle platform may be addressed to:

• E-learning support: e-learning@cesga.es
• Data Protection Officer (CESGA): dpo@cesga.es

Where the request relates to personal data originally provided by the user's home institution through the eduGAIN federation (for example, identity attributes such as name, email address or affiliation), users may also need to contact their home institution (Identity Provider), which remains responsible for the accuracy and management of those identity records.

Where personal data are processed by consortium partners for project management, reporting or research purposes, requests may also be forwarded to the relevant consortium partner responsible for that specific processing activity (UCN)

Users also have the right to lodge a complaint with the competent supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement.

Contact

For any queries regarding data protection, you can contact:

• Technical Manager: E-learning Department
• Email: e-learning@cesga.es