Privacy statement scientific research partners

Overview

Context

When you take part in scientific research organised by imec, imec will process your personal data to conduct this scientific research. In doing so, imec always adheres to the applicable Belgian and European legislation.

This short summary of the privacy statement outlines the way in which imec processes your personal data when you take part in scientific research.

Want to know more? Read the full privacy statement, which explains everything in detail. You can also consult the specific privacy statement of the research or study you take part in, which will explain in more detail exactly what personal data processing will take place.

What personal data does imec collect from people participating in scientific research?

• Identification data, such as your name and surname, gender, age, photographs or video images
• Contact details, such as your e-mail address, address and telephone number
• Data required to conduct the scientific research concerned: you can find more information on what personal data this concerns in the specific privacy statement for the research

For what purposes does imec collect this personal data?
We collect your personal data to be able to identify and contact you in relation to the scientific research you are participating in and to be able to conduct this scientific research effectively, as well as to be able to extract certain conclusions and reports from this research.

How long do we store this personal data?
Imec processes and stores your personal data for as long as it is legally obliged to do so or for as long as necessary for the purposes of the processing. If you do not wish your personal data to be stored for this period of time, you may exercise your right to erasure in certain cases.

Who has access to this personal data?
Within imec, your personal data will only be accessible to employees who need this access to ensure that imec is able to conduct the scientific research in accordance with the scientific and ethical standards in force. Imec may also provide your personal data to specific third parties as necessary to conduct this scientific research.

Imec will neither sell, lease, distribute nor in any other way make your personal data available to third parties for commercial gain, unless expressly provided for in this privacy statement or with your express consent.

How do we protect this personal data?
You can find a description of the technical and organisational security measures that imec takes [here].

What are your rights as the data subject?
You may exercise the following rights for any processing of your personal data by contacting the researcher responsible (while the research is ongoing), using the contact details to be found in the specific privacy statement, or by contacting the Privacy Office using the contact form (when the research is complete).

• Right of access: you have the right to ask for a copy of your personal data that imec stores and processes;
• Right to rectification: you have the right to have your personal data rectified if it is incorrect;
• Right to object to processing: you can ask imec to put a stop to certain processing at any time;
• Right to withdraw consent: you have the right to withdraw consent you had formerly granted for processing.
• Right to submit a complaint to the competent data protection authority: you have the right to lodge a complaint with the competent data protection authority if you suspect that your personal data has not been processed appropriately by imec;
• Right to erasure: you can ask imec to erase your personal data;
• Right to restriction of processing: you can ask imec to restrict the processing of your data.

The researcher responsible and the Privacy Office will handle your request as best they can and facilitate the exercise of your rights within the possibilities available, depending on the nature of the personal data and your request.

Any questions?
While the scientific research is underway, you may direct all your questions to the researcher responsible. You can also contact the Privacy Office if you have any questions about imec’s privacy statement. Send an e-mail to privacy@imec.be, fill in the contact form or send a letter to the Privacy Office:

imec
FAO Privacy Office
Kapeldreef 75
3001 Leuven 

Privacy statement scientific research partners

Article I - General

I.I.     Purpose of the privacy statement

Protecting your data is very important to imec. This privacy statement informs you of how imec handles your personal data (hereinafter: “personal data”) when you take part in scientific research organised by imec.

You are recommended to read this privacy statement carefully to have an overview of your rights and obligations vis-à-vis imec. For each scientific research project, you will also be provided with a more detailed privacy statement explaining the specific processing of personal data for the scientific research in which you are taking part. If you have any questions about how your personal data is handled during the scientific research, or about imec’s privacy statement, you can contact the researcher responsible. Once the scientific research is complete, you can contact the Privacy Office using the contact form or by sending an e-mail to privacy@imec.be.

Imec always processes your personal data in accordance with EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation - GDPR) and other applicable legislation.

I.2.    Amendments

This privacy statement may be amended or added to. You are therefore recommended to check regularly for amendments that are or could be relevant to you.

Article II – Personal data collection

Imec collects certain personal data from participants in our scientific research. Specifically:

• Identification data: your name and surname, gender, age, photographs or video images
• Contact details: your e-mail address, address and telephone number
• Data required to conduct the scientific research concerned: you can find more information on what personal data this concerns in the specific privacy statement for the research

Article III - Purposes of processing

Imec collects your personal data as a subject of scientific research for the following reasons:

• To be able to identify and contact you in relation to the scientific research you are participating in.
• To be able to conduct this scientific research effectively, as well as to be able to extract certain conclusions and reports from this research.

Article IV – Storage period

Imec processes and stores your personal data for as long as it is legally obliged to do so or for as long as necessary for the purposes of the processing. You can find the specific storage periods that apply to the scientific research in which you are participating in the information brochure or on the consent form.

Article V – Access to and transfer of personal data

V.1.    Access to personal data

Within imec, your personal data will only be available to employees who need this access to ensure that you are able to get the best service from imec. Your personal data can also be shared within the imec group. As a result, your personal data may be shared within the imec group to entities outside the EU. This always occurs in accordance with the rules that apply under the GDPR.

You can find more information about how imec protects your personal data in Article VI of this privacy statement.

V.2.    Transfer to third parties

Imec may call on third parties to process your personal data as part of the scientific research in which you are participating. This includes other research institutes, universities and colleagues, public bodies, hospitals or companies engaged in conducting scientific research.

Imec will neither sell, lease, distribute nor in any other way make your personal data available for commercial gain to third parties not involved in conducting the scientific research, unless you have given your express consent.

To have the scientific integrity of the research verified by an objective external party, imec may be obliged to share your personal data with the ethics committees or the editors of scientific journals.

Imec has implemented all suitable technical and organisational measures to prevent unauthorised access and use. Imec also guarantees a similar level of protection of your personal data by enforcing contractual obligations on the third parties that are equivalent to those in this privacy statement.

In the event of full or partial reorganisation, entailing imec reorganising or transferring its activity, or if imec is declared bankrupt, your personal data may be transferred to new entities or third parties. Imec will inform you of this in advance.

V.3.    Legal obligations

In rare instances, imec may have to reveal your personal data pursuant to a court order or to comply with other binding laws or regulations. Imec will make all reasonable efforts to inform you of this in advance, unless this is subject to legal restrictions.

Article VI - Security measures

Imec has taken various technical and organisational measures to ensure that your personal data is protected against unauthorised access and unauthorised amendments, publication or deletion.

The main technical and organisational measures are:

• Imec undertakes to protect information that it possesses or produces, as well as the information that our partners entrust to imec, on the condition that this information must be stored confidentially and/or may only be used in certain circumstances.
• Imec has incorporated security, data protection by design, and data protection by default into its internal procedures for new initiatives. In that way, imec ensures that security and data protection risks are addressed from the outset.
• Imec regularly audits and assesses its methods to prevent the loss of personal data.
• Imec has applied various security technologies and techniques to defend it against internal and external attacks.
• Imec regularly evaluates its working methods with regard to the collection, storage and processing of information, including physical and logical security measures, such as protection against unauthorised access to systems and IT.
• Imec’s employees receive regular training about how to handle personal data in their day-to-day work, about the privacy and security policy, and about the privacy and security processes used within imec.

Imec gets regular audits on the implementation of these measures, from both an internal and external standpoint. If the audit concludes that certain aspects of imec’s policies, processes or procedures do not comply with these standards, we take immediate measures.

Article VII - Your rights

VII.1. Right of access

You have the right to enquire at any time as to what personal data of yours imec has, and the use imec makes of your personal data.

VII.2. Right of rectification, erasure and restriction

You are free to share certain personal data with us or not, and you have the right at all times to ask us to rectify your personal data if you believe that your personal data is inaccurate, and you subsequently inform imec of this.

You may also request a restriction of the processing of your personal data, where possible. Moreover, you have the right to ask imec to erase your personal data insofar as imec is unable to anonymise it. Imec may, however, no longer be able to offer you certain information or services, in whole or in part, if you refuse to share certain personal data or if you ask us to erase it.

VII.3. Right to object

You have the right to object to the processing of your personal data for compelling and justifiable reasons.

VII.4. Right to withdraw consent

You have the right to withdraw any previously granted authorisation for the processing of your personal data. If withdrawing consent constitutes a risk to yourself or to the scientific research, imec cannot comply with your request to withdraw consent. Imec will also inform you as to why it is not possible in the context of the specific research.

VII.5. How to exercise your rights

If you wish to exercise your rights as the data subject, you may, while the scientific research is ongoing, contact the researcher responsible or imec’s Privacy Office.

If you wish to exercise your rights with regard to scientific research that is complete, you can contact imec’s Privacy Office, which will handle your enquiry by the deadlines established by law.

VII.6. Complaints to the competent data protection authority

If you think that imec has not adequately addressed – or has incorrectly handled – your request to exercise your rights as a data subject, you may lodge a complaint with the Belgian Data Protection Authority, or the Dutch Data Protection Authority (DPA). This is without prejudice to your civil rights. You can find all the information regarding starting mediation or lodging a complaint with the Dutch or Belgian DPA on their respective websites.

Data Protection Authority
Drukpersstraat 35
1000 Brussels
Tel +32 (0)2 274 48 00
Fax +32 (0)2 274 48 35
e-mail: contact@apd-gba.be

Data Protection Authority
Hoge Nieuwstraat 8
2514 EL The Hague
Tel +31 (0)88 1805250
Fax +31 (0)88-0712140
https://autoriteitpersoonsgegevens.nl/en/contact

If you are from an EU Member State other than Belgium or the Netherlands, you may also submit a complaint to your national data protection authority (you can find a list of all data protection authorities in the EU).