The Leprosy Research Initiative (hereinafter: LRI) processes personal data. In this privacy statement, we explain how and to which purposes we process personal data, how you can exercise your privacy rights, and what other information might be important for you to understand. This privacy statement applies to all our services and activities, including our website.
Who is responsible for your personal data?
LRI is responsible for the processing of your personal data as detailed by the GDPR and has its registered office at Wibautstraat 137k, 1097 DN, Amsterdam, The Netherlands.
To LRI, data privacy is of vital importance, and we want to be open and transparent about the processing and protection of the personal data of persons we interact with. Therefore, we elaborate on our privacy policies in this privacy statement. Above all, we comply with the GDPR in all cases.
To which purposes does LRI process your personal data?
LRI processes data of persons with whom it has a relationship. Personal data is also acquired by the filling out of contact forms on the website of LRI.
All processes that deal with personal data are recorded in a register of processing activities. The register provides LRI with a complete and up-to-date overview of all data-handling processes.
The most important purposes for which LRI processes personal data, are:
- The conclusion and execution of contracts with third parties (including but are not limited to partners, co-funders, applicants, and consultants);
- To maintain an external reviewer database
- The administration of LRI funded research projects;
- The participation in or conduct of scientific research;
- Our archives;
- Our grant cycle management and financial administration, including the execution and management of procedures that deal with finances, information technology (IT), legal affairs, and internal and external communication;
- To organize meetings.
Whose personal data does LRI collect?
By the above-mentioned processes, LRI collects data of concerned persons in different categories. These categories are:
- Partners and co-funders;
- Applicants and grantees
- (External) reviewers;
- Committee members;
- Affiliates, including temporary workers, pupils, and students.
What personal data does LRI collect?
LRI collects different types of personal data, which may change per process and category of persons concerned. Among others, LRI collects the following data:
- Name, address, and city;
- Bank account number (IBAN);
- Phone number;
- Date of birth;
- Email address;
- Images (e.g., of research activities).
LRI collects (personal) data directly from you, or via third parties in as far as this is within the confines of the law.
Giving and withdrawing permission
For some activities, LRI needs your permission. Think of the use of your email address or postal address to send information regarding LRI’s activities. We also ask your permission for the use of images. When using your data, we will always inform you about the purpose of this use and the data that is concerned so as to provide clarity about the consent you give. You may still withdraw your permission at a later point.
How does LRI ensure confidential processing of your personal data?
LRI ensures confidential processing of your personal data. LRI takes appropriate technical and organisational measures to protect personal data. LRI will only share personal data conform to this privacy statement and will only share personal data with third parties when this is lawful and done with extreme care.
Sharing data with third parties
LRI may contract service providers to perform parts of its services, for example, to maintain a grant management system. LRI enters into contractual agreements (so-called “data processor agreements”) with these service providers to ensure confidential and careful processing of personal data.
Your personal data is not let to, sold to, or otherwise shared with or provided to third parties. LRI may share your (personal) data with third parties in case you have permitted us to do so.
LRI provides personal data to enforcing authorities or anti-fraud organisations if the law requires this (e.g., in case of a claim).
Transmission of your data outside the European Union (hereinafter: EU)
In a limited number of cases, LRI provides personal data to countries outside the EU. For example, for external review of research proposals.
LRI retains your personal data in compliance with the GDPR. Data is not retained any longer than is strictly necessary for the execution of duties and activities resulting from the relationship LRI has with you.
How can you access or delete your data?
You can send a request to LRI to access or correct your data. Please indicate clearly that your access or correction request is based on the GDPR. You can also request to have your data deleted. However, this will only be possible in so far LRI can meet its legal obligations. Please note that you may be asked to provide a copy of your ID for identity verification.
Furthermore, you have the right to submit a complaint about the use of your data to the Dutch Data Protection Authority (DPA).
If you wish to no longer receive mail from us, you can make this known to us via the above-mentioned (email) address.
To ensure the best possible protection of your personal data against unauthorised access or use, LRI has implemented appropriate protective measures. LRI also takes organisational measures to prevent unauthorised access of personal data.
Cookies and clicking behaviour
Third-party privacy policies
The website of LRI may contain links to other websites that LRI is not affiliated with. LRI is not responsible for the processing of personal data performed by these parties. Therefore, we advise you always to consult the privacy policies of these parties, or to contact them to enquire for additional explanation about their policies regarding personal data.
This privacy statement was last updated on: 30 August 2018
LRI retains the right to change this privacy statement if necessary. You are responsible for remaining up to date of the latest version of our privacy statement. LRI recommends you check on a regular basis if changes have been made.