Privacy Policy – EPUM Platform

Privacy Policy

Categories of personal data we collect

On the EPUM Platform, we collect and process only data that is strictly necessary for the use of the available services. This data is username, e-mail address, password, full name, organization/institution, role, IP address and log files.

Categories of personal data such as username, password, full name, email address, organization/institution and role are required to be provided, so you can register and use the platform. The processing of IP address and log files is also necessary in order for you to use the services available on the platform.

By giving your agreement on the Privacy Policy of the EPUM Platform automatically you are giving your agreement on the processing of your personal data.

Purpose of collecting and processing your personal data

The purposes for which the EPUM Consortium processes the personal data are the provision of services on the EPUM e-Learning Platform and reporting the implementation of the project to the European Commission. Moreover, reproducing and proving the electronic statement made by the user in the event of occurrence of a legal dispute and in cases where the reproduction or proving an electronic statement is necessary for fulfillment of the obligation of the Consortium in conformity with the applicable law, for meeting its obligations provided by law, for realization and protection of its rights and interests protected by law.

EPUM Platform services

All personal data on the EPUM Platform is processed for the purpose of integrating different, often isolated urban form research and teaching approaches through pedagogic innovation and Information and Communication Technology (ICT). It aims to develop an innovative, open and inclusive system of teaching and training in urban form from a multidisciplinary perspective, which is capable of enabling the current and future generation of planning and design professionals to address comprehensively and effectively the variety of issues and challenges faced by contemporary cities.

Personal data might be processed in an event where a legal dispute occurs.

Data controller

The data controller of the EPUM Platform is University of Cyprus. The data controller can be contacted on the following address:

University House “Anastasios G. Leventis”
1 Panepistimiou Avenue
2109 Aglantzia, Nicosia
P.O. Box 20537, 1678 Nicosia, Cyprus
Tel.: (+357) 22894000
E-mail: info@ucy.ac.cy

Legal basis for data processing on the platform

The legal basis for all data processing operations on the platform is performance of a contract. EPUM Platform offers services in researching and teaching approaches through pedagogic innovation and Information and Communication Technology (ICT). In order to access this services by registering the user concludes an electronic contract with the EPUM Consortium regulated by the Terms of Use.

The personal data input by the user for registration is processed on the same basis as being a part of the steps at the request of the user before concluding the contract, finalizing the registration.

In the event of a legal dispute, the personal data is processed for the purposes of the legitimate interests of the University of Cyprus.

Third parties we share your data with

There aren’t any third parties that are involved in the data processing activities on the EPUM Platform. Only admins and other users on the EPUM Platform are engaged in data processing.

Access to your personal data

The data processed on the EPUM Platform is accessed solely by the admins. When the users initiate and participate the researching and teaching process, personal data is processed by the other user participating in this process, either as a teacher or student.

Time period we retain your data

The personal data is stored on the EPUM Platform as long as the user is registered. After the user account is deleted, all personal data is immediately erased.

Physical storage of personal data

All personal data processed on the EPUM Platform is physically stored on a server located at the University of Cyprus.

Rights you have over your data as data subject

The EPUM Platform user is entitled to the following rights:

  • the right to information – whether personal data about him/her is being processed on the platform.
  • the right to access to his/her personal data processed on the platform.
  • the right to correct and update his/her personal data processed on the platform.
  • the right to request deletion – this right could be exercised in cases where the personal data is no longer necessary, the personal data processing is unlawful, the personal data is collected and processed on the basis of a parental consent.
  • the right to request restriction of the processing of his/her personal data – this right could be exercised where the user has contested the accuracy of the personal data process, where the processing is unlawful, the data is no longer necessary for the purposes of processing by the user requires its storage for the establishment, exercise or defense of legal claims.
  • the right to data portability – essentially to receive the personal data, which he/she has provided to the University of Cyprus, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the University of Cyprus.

Exercise your rights as a data subject

The user can exercise his/her right to request deletion by using the automated functionality of Account Deletion from the account settings.

The user can exercise his/her right to request restriction of the processing of his/her personal data by using the automated functionality of Account Restriction from the Platform’s account menu.

The user can exercise his/her right to data portability by using the automated functionality of Personal Data Export from the Platform’s menu.

In order to exercise the rest of the rights listed above, the user has to send a message to the following e-mail address:  epumconsortium@gmail.com

Besides that, any user has the right to submit a complaint to its national data protection authority, if he/she deems that their data is processed in unlawful way.