July 27, 2022
WHAT IS THE PURPOSE OF THIS PRIVACY POLICY AND WHO IT IS INTENTED TO?
We, Royal Melbourn Institute of Technology university (RMIT), acting according the law of Australia, and Mykolas Romeris university (MRU), acting according the law of Lithuania and EU (both parties acting as joint controllers), respect your privacy and make every effort to ensure the security and confidentiality of your personal data and other information.
The purpose of this Privacy Policy is to inform you of:
- The types of personal data which we may collect about you and how it may be used;
- Any disclosure of personal data to third parties;
- Your ability to correct, update and delete your personal data;
- The security measures we have in place to prevent the loss, misuse, or alteration of personal data under our control;
- Retention period of personal data.
DEFINITIONS:
Private Information: information which personally identifies you and is collected and used by RMIT and MRU as set out in this Privacy Policy and/or as otherwise permitted by law.
User: a person or legal entity who register on their own or on behalf of an entity or organization to use the Service provided via Platform.
Site: www.alcrn.com operated by RMIT and MRU.
ALCRN – Australian-Lithuanian Cyber Research Network.
HOW ARE PERSONAL DATA PROCESSED?
Joint controllers manages your personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) and other legislation regulating the protection of personal data.
When processing your personal data, joint controllers follow the following principles of personal data processing:
- Your personal data are processed only to the extent necessary to achieve the relevant, clearly defined and legitimate purposes, taking into account the protection of your privacy;
- Your personal data are processed accurately, fairly and lawfully and only for purposes that are consistent with the purposes for which your personal data were collected prior to collection;
- Your personal data are processed strictly in accordance with the statutory requirements for clear and transparent processing of personal data;
- Your personal data will be processed only in a form that identifies you for no longer than it is necessary for the purposes for which the personal data are processed;
The processing of your personal data is subject to relevant technical and organisational measures to ensure the security of personal data, including protection against unlawful data processing and unintentional loss, destruction and damage.
WHAT ARE THE PURPOSES, LEGAL BASIS OF PERSONAL DATA PROCESSING AND RETENTION PERIOD?
A) For the purpose of using this Site:
(i) to become corporate member of ALCRN:
| Categories of personal data | Name, email of representative of legal person. |
| Legal basis of data processing | Personal data are processed in accordance with point (f) of Article 6 (1) of the Regulation (based on legitimate interests, related to representation of legal entity). |
| Retention period | While active membership lasts, and 2 years from the moment of termination of membership. |
(ii) to become individual member of ALCRN:
| Categories of personal data | Name, city, country, email, Linkedin profile |
| Legal basis of data processing | Personal data are processed in accordance with point (a) of Article 6 (1) of the Regulation (based on consent). |
| Retention period | While active membership lasts, and 2 years from the moment of termination of membership. |
B) For the purpose of processing your requests and (or) queries:
| Categories of personal data | Name, email |
| Legal basis of data processing | Personal data are processed in accordance with point (a) of Article 6 (1) of the Regulation (based on consent). |
| Retention period | While processing your request and (or) query. |
C) For the purpose of processing in order to inform about ongoing events, meetings, other initiatives:
| Categories of personal data | |
| Legal basis of data processing | Personal data are processed in accordance with point (f) of Article 6 (1) of the Regulation (based on legitimate interests as it relates to the network’s interest in informing about ongoing initiatives in the field of cyber security). It is possible to opt out by notifying at least one of the specified e-mail addresses. |
| Retention period | While active membership lasts. |
WHO IS YOUR PERSONAL DATA PROVIDED TO?
In order to ensure a continuous operation and the proper provision of services, we may disclose your personal data to our employees, managers, suppliers, subcontractors, and service providers, if reasonably necessary to achieve those purposes.
We have the right to transfer your personal data to state institutions and bodies (e.g. the Financial Crime Investigation Service) in order to properly implement the legal requirements. In addition, your personal data may be transferred to the persons providing legal services where such personal data need to be disclosed in order to identify, implement or defend your rights and legitimate interests.
WHAT RIGHTS DO YOU HAVE AND HOW DO YOU IMPLEMENT THEM?
As a data subject, you have the following rights:
- request to access your personal data and obtain a copy;
- request to rectify or restrict any inaccurate or incomplete your personal data;
- request to delete or restrict your personal data, when personal data are excessive or processed unlawfully;
- request to transfer your personal data in a systematic, computer-readable format (right to data portability);
- the right to withdraw your consent at any time (when personal data are processed based on your consent);
- object to the processing of your personal data;
- Submit a complaint to the State Data Protection Inspectorate (www.vdai.lrv.lt) and (or) The Office of the Australian Information Commissioner (OAIC)( https://www.oaic.gov.au/).
In order to exercise your rights, you should contact us. However, we would like to point out that, in exercising your rights, you must properly verify your identity. Therefore, when you submit your application, you must confirm your identity in the manner prescribed by law use electronic means of communication that allow to identify you).
HOW DO WE CARE ABOUT THE SECURITY OF YOUR PERSONAL DATA?
We have implemented security measures to ensure the confidentiality of your Personal Information and to protect your Personal Information from loss, misuse, alteration or destruction.
We implement a variety of security measures to maintain the safety of your personal information when you submit a request, place an order or access your personal information. These security measures include: SSL (Secure Sockets Layered) technology to ensure that your information is fully encrypted and sent across the Internet securely and other measures to protect our servers from hackers and other vulnerabilities.
Only authorised personnel of ALCRN have access to your Personal Information, and these personnel are required to treat the information as confidential. The security measures in place will, from time to time, be reviewed in line with legal and technical developments.
WHAT ARE DUTIES AND RESPONSIBILITIES?
By using the Site, you assume full responsibility for the correctness and accuracy of your personal data provided. By providing personal data, you assume full responsibility for the lawfulness of the submission of your personal data and are responsible for the unlawful loss of our and/or third parties personal data that may result from such personal data processing.
WHO SHOULD YOU APPLY TO, IF YOU HAVE ANY QUESTIONS?
You can contact us by email for any questions you may have at :
CHANGES:
Our Site policies, content, information, promotions, disclosures, disclaimers and features may be revised, modified, updated, and/or supplemented at any time and without prior notice at the sole and absolute discretion of joint controllers. If we change this Privacy Policy, we will take steps to notify Users by a notice on our Site and will post the amended Privacy Policy on the Site.