PITHIA e-Science Centre Privacy Policy

Name of the Service

PITHIA e-Science Centre

Description of the Service

The PITHIA e-Science Centre, an integrated environment with a Web-based portal and underlying e-infrastructure resources to provide centralised access to all Datasets and Models/Applications associated with the PITHIA-NRF community, and to facilitate the integrated use of those for cross-national and cross-disciplinary use cases.

Data controller and a contact person

  • Organisation: ETHNIKO ASTEROSKOPEIO ATHINON (NOA)
  • Address: LOFOS NYMFON, ATHINA 11810, GREECE
  • Contact person: Anna Belehaki
  • Email: pp_controller@pithia-nrf.eu

Jurisdiction and supervisory authority

  • Jurisdiction: GR, Greece
  • NOA's lead supervisory authority is the Greece Data Protection Authority. They can be contacted at: https://www.dpa.gr/en.

Personal data processed and the legal basis

The e-Science Centre may process the following personal data:

  • Identification numbers (as provided by identity providers like a home institution)
  • E-mail address
  • Affiliation
  • Country
  • IP address
  • Name
  • Given Name
  • Family Name
  • User’s email
  • User’s ID
  • Affiliation
  • Membership information (roles, groups, and communities)

Purpose of the processing of personal data

The purpose of the collection, processing and use of the personal data mentioned above is:

  • To provide the service functions, i.e. to identify, authenticate, and authorise users for accessing the e-Science Centre, as a member of one or more groups or communities identified by Check-in
  • Some personal data may be accessed in case a technical issue needs to be investigated (to ensure the performance and security of the e-Science Centre)

Third parties to whom personal data is disclosed

Based on the consent of the user, the personal data mentioned above are forwarded to e-Science Centre and processed by these service providers, according to their service-specific privacy policies.

In addition, for the purpose given in this privacy policy, personal data may be passed to the following third parties within the EU / EEA:

  • EGI Cloud Service providers, to provide compute resources for the e-Science Centre
  • EGI DataHub, to provide storage for the e-Science Centre (settings, backups, user datasets, etc.)
  • Group managers
  • The records of your use and technical log files produced by the e-Science Centre may be shared for security incident response purposes with other authorised participants in the academic and research distributed digital infrastructures via secured mechanisms, only for the same purposes and only as far as necessary to provide the incident response capability where doing so is likely to assist in the investigation of suspected misuse of Infrastructure resources.

How to access, rectify and delete the personal data and object to its processing

  • To access and delete the personal data, reach out to the data controller contact listed above.
  • To rectify the data released by your Home Organisation, contact your Home Organisation’s IT helpdesk.

Data retention

Your personal data associated with your account is kept as long as your Check-in account is active. Your account can be deactivated on request.

The records of your use and technical log files produced by the Check-in service components will be deleted or anonymised after, at most, 18 months.

Data Protection Code of Conduct

The PITHIA e-Science Centre is conforming to the GEANT Code of Conduct and your personal data will be processed in accordance with the GEANT Code of Conduct for Service Providers and the EGI Policy on the Processing of Personal Data.