Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). The legislative text is available here.
As you are probably aware, European Union legal requirements for processing personal data change on 25th May due to the entry into force of the General Data Protection Regulation (GDPR). This applies new obligations on persons or organisations that collect and process personal data, while giving individuals new rights over how their data is handled.
The Impact Assessment Institute collected and processes personal data to use for activities related to its scrutiny and training activities. We contact persons using that data to inform of the results of our studies and on occasion to invite to training seminars on Impact Assessment. We wish to continue to communicate this valuable information. This constitutes a legitimate interest under the GDPR, as provided for in Article 6 §1(f) of the legislative text and expanded in Recital 47.
The Impact Assessment Institute collects and processes the following kinds of personal data:
• Given name(s);
• Email addresses;
The GDPR also defines the rights of individuals whose personal data is held by organisations (data subjects). The GDPR defines a number of rights of data subjects as follows:
The right to be informed about the collection and use of his/her personal data;
The right to access his/her personal data;
The right to rectify his/her personal data if the personal data is incorrect or incomplete;
The right to make a request for erasure of his/her personal data;
The right to object to the processing of his/her personal data;
The right to receive his/her personal data in a structured, commonly used and machine-readable format and have the right to transmit those personal data to another controller. This right can be effectively exercised only when the processing of the personal data is based on consent or on a contract;
The right to secure the restriction of processing of his/her personal data. This right only applies in certain circumstances. He/she will have the right to request restriction of the processing of his/her personal data in the following circumstances:
he/she contests the accuracy of the personal data;
the processing of his/her personal data is unlawful and he/she opposes the erasure of the personal data and requests the restriction instead;
the organisation no longer needs his/her personal data for the purposes of the processing, but the personal data are required by him/her for the establishment, exercise or defence of legal claims;
he/she has objected to processing and are pending the verification whether the legitimate grounds of our organisation override his/hers.
Personal data is stored and processed carefully and securely by the Impact Assessment Institute. It is used exclusively for the Institute’s own purposes and these personal data will not be shared with any third parties or be passed on outside the EU. Data is held until such time as the Impact Assessment Institute ceases to exist, or until the data subject requests erasure, whichever is the sooner. If you do not wish to receive Impact Assessment Institute communications and/or wish your data to be erased from our records, you may inform us at any time or unsubscribe using the link provided on our emails.
The name and Address of the data controller:
Impact Assessment Institute
Rue Africaine 68
Phone: + 32 474 352632
Contact person: Erik Akse (Vice-Chairman and Director of Training)