LEGAL DISCLAIMER
Data Privacy Information according to Art. 13 GDPR

1. Why do we need your personal data (purpose of and legal basis for processing your data)

Subject to your voluntary consent,

  • Sushi Dev GmbH, Wiedner Gürtel 28/6, 1040 Vienna, Austria (pirker-ihl@sushi.dev)
  • University of Deusto (“DEUSTO”), Avda. Universidades, 24, Deusto, 48007 Bilbao, Bizkaia. (dpo@deusto.es)
  • VRVis Zentrum für Virtual Reality und Visualisierung Forschungs-GmbH, Donau-City-Straße 11, 1220 Vienna, Austria (wolosiuk@vrvis.at)

intend to process the categories of personal data listed below for the following purposes:

GREENGAGE platform collects sociodemographic (which in basic terms means the study of humans) data. We collect the profiles of the Citizen Observers engaged in our project. This information is processed and aggregated anonymously, around categories or groupings, to do with individuals’ backgrounds (known as ‘socioeconomic and demographic’ data). GREENGAGE is committed to values around social inclusion, including everyone of all walks of life and experience. As such, we need to know that we are involving as many different types of people as possible in GREENGAGE-supported Citizen Observatories. This is known as aggregated data (raw data such as your level of formal education) which can be summarised to make sure we include, for example, a variety of age groups, work backgrounds and genders. The project’s “Terms of Use” explain how terms and conditions of using GREENGAGE Engine and data collection. It also refers to relevant data privacy and legal disclaimer documents.

The GREENGAGE App processes the following data (depending on the missions and the users’ input):

  • Username
  • Firstname
  • Lastname
  • Email
  • ID (Keycloak)
  • GPS track information (optional) in form of AIT Mode Binary data (which will be transformed into GeoJSON)
  • Geographical GPS Coordinates (eg. Spots)(optional)
  • Uploaded Images
  • Survey Submissions
  • Avatar
  • Photos
  • Mission related data (user inputs)

Reasons for data collection within the GREENGAGE App:

  • The GREENGAGE app is part of the Horizon Europe GREENGAGE project. The project is about building citizen observatories for GREENGAGE pilot cities. The purpose of citizen observatories is to gather environmental, infrastructure and contextual data that can help pilot cities in decision making or/and policy making. The GREENGAGE app allows to capture the data on pre-defined topics and tasks through surveys. It also allows to track GPS location for use of mobility mode (walking, cycling, motorised etc) through the MODE library.
  • The GREENGAGE app requires a user account and hence email address and names are required. Further, to perform socio-demographic analyses and measure Key Performance Indicators, basic socio-demographic data is collected through KeyCloak and only the KeyCloak ID is shared with the GREENGAGE app.
  • The GREENGAGE app needs the personal data to enable logging in using email address, and display name and avatar for better user experience.
  • Only GREENGAGE ID associated to every Citizen Observatory participant is stored in the centralized store. Personal data is stored in KeyCloak and is fully decoupled from the data stored whilst participants take part in thematic co-explorations.

According to Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR) your personal data will be processed for this purpose if you give your express consent.

If you have given your express consent your data will also be processed on the legal basis of legitimate interest according to Art. 6 para. 1 lit. f GDPR for the purpose of proving compliance with due diligence obligations such as the guidelines for good scientific practice.

Furthermore, your data may be processed by AIT Austrian Institute of Technology GmbH („AIT“) and the GREENGAGE consortium according to Art. 2d para. 3 Forschungsorganisationsgesetz (FOG) for other scientific research purposes relating to GREENGAGE project if these are not aimed at producing person-related results.

2. Data controller

The following organizations are responsible as joint controllers for processing:

  • Sushi Dev GmbH
    Wiedner Gürtel 28/6, 1040 Vienna, Austria, support@sushi.dev, +43 1 934 6339 210The contact details of the Data Protection Officer are:
    Wiedner Gürtel 28/6, 1040 Vienna, Austria, pirker-ihl@sushi.dev
  • DEUSTO
    24, Universidades Avenue – Bilbao (CP-48007)The contact details of the Data Protection Officer are:
    24, Universidades Avenue – Bilbao (CP-48007), Mikel García Llorente, Internal Audit and Control Manager as a Data Protection Officer (DPO),  dpo@deusto.es, +34 94 413 94 30

 

  • VRVis Zentrum für Virtual Reality und Visualisierung Forschungs-GmbH
    Donau-City-Straße 11, 1220 Vienna, AustriaThe contact details of the Data Protection Officer are:
    Donau-City-Straße 11, 1220 Vienna, Austria, wolosiuk@vrvis.at, +43 1 908 98 92 314

3. Which of your data will be processed (type of personal data)

The following data will be collected and processed:

  • Username
  • Firstname
  • Lastname
  • Email
  • ID (Keycloak) – referred in the project as GREENGAGE ID
  • GPS track information (optional) in form of AIT Mode Binary data (which will be transformed into GeoJSON)
  • Geographical GPS Coordinates (eg. Spots)(optional)
  • Uploaded Images
  • Survey Submissions
  • Avatar
  • Photos
  • Mission related data (user inputs)

4. Data processed in the GREENGAGE App

A user can sign-up to the GREEN ENGINE by creating a log-in on the website https://me.greengage-project.eu/ which allows users to sign-in to the GREENGAGE tools. The GREENGAGE App gathers task and missions’ data and stores them on SushiDev’s servers. For further analysis of the data by the GREENGAGE Citizen Observers, the collected data is then pseudonymised and transferred to a Druid storage (also part of the GREEN Engine platform) which is GREENGAGE project’s central data repository. The data will then be analysed by different tools e.g., textual analytics tools and visualised in Superset (also part of the GREEN Engine platform). The results will be completely anonymous and all the data shared through different repositories will be in anonymised form.

5. Recipients of your personal data

By signing the Declaration of Consent (i.e., ticking the consent box at the bottom of the GREENGAGE sign-up page) you agree that your data processed as part of this study will be disclosed to the following recipients:

  • Consortium Partner Sushi Dev GmbH
    Wiedner Gürtel 28/6, 1040 Vienna
    Austria
  • Consortium Partner DEUSTO
    Universidades, 24, Deusto, 48007 Bilbao, Bizkaia
    Spain
  • Consortium Partner VRVis
    Donau-City-Straße 11, 1220 Vienna
    Austria
  • Consortium Partner MindEarth
    Reitschulstrasse 5, 2502 Biel,
    Switzerland

GREENGAGE App API Infrastructure

GREENGAGE’s app back-end infrastructure is hosted on German Servers belonging to DigitalOcean. This includes the following technological components:

  • Database
  • Kubernetes Cluster
  • Filestorage (S3 Buckets) – also part of the CDN from DigitalOcean.

Further information about DigitalOcean can be found under the following url https://www.digitalocean.com/legal

Collaborative Environment and Keycloak

These tools and their databases are hosted in AWS servers located in Stockholm, Sweden. Together with GREENGAGE app, the Collaborative Environment shares the single sign on (SSO) system provided through Keycloak. All the tools below share this SSO solution.

Discourse

This tool is hosted at University of Deusto’s servers located in Bilbao, Spain. The community participating in the missions of the GREENGAGE app may be contacted and discuss common issues through this solution.

Apache Superset

This tool is hosted at VRVIS’s self-managed computing infrastructure located in Vienna, Austria. Data gathered at GREENGAGE app (anonymized, only providing the GREENGAGE ID associated to a user) may be processed with this tool.

Apache Druid

This tool is hosted at VRVIS’s self-managed computing infrastructure located in Vienna, Austria. This is the tool where data for ulterior processing is stored centrally.

Apache NiFi

This tool is hosted at VRVIS’s self-managed computing infrastructure located in Vienna, Austria. Workflows of data may be generated through this tool, some of its data is coming from GREENGAGE app.

Datahub

This tool is hosted at VRVIS’s self-managed computing infrastructure located in Vienna, Austria. Datasets and visualizations generated in thematic co-explorations are published here.

Data Quality Dashboard

This tool is hosted at VRVIS’s self-managed computing infrastructure located in Vienna, Austria. Data gathered with GREENGAGE app is curated and improved through this tool.

MODE library   

AIT’s MODE library is embedded into the GREENGAGE App and is collecting GPS tracks which are then analysed to detect the mobility mode the person tracking themselves was using. This data is stored on Sushi Dev’s back-end servers located in Germany.

6. Storage period of your personal data

After completion of the GREENGAGE project (December 2025) your personal data will be retained for as long as necessary to provide evidence of compliance with good scientific practice in accordance with the relevant guidelines. Research data must currently [2] be retained for a period of ten years in principle. If this period changes in the future your data will be stored for a correspondingly shorter or longer period.

7. Automated individual decision-making, including profiling

The GREENGAGE tools gather qualitative data provided by the users/Citizen Observers. The App processes data but it does not create an explicit profile of its users.

8. What rights do you have and how can you contact us

Under the corresponding data protection conditions, you are entitled:

  • to request information about your processed data;
  • to ask for incorrect data to be corrected or deleted;
  • to ask for restriction of your processed data;
  • to object to the processing of your data;
  • to withdraw your consent and
  • to ask for transfer of your data.

You can withdraw your consent to not participate further in the data collection of the GREENGAGE project. Your withdrawal will be through https://me.greengage-project.eu. However, the withdrawal of consent does not affect the lawfulness of processing based on the consent before its withdrawal.

In cases of suspected violation of the data protection provisions please contact the GREENGAGE coordinator (jan.peters-anders@ait.ac.at). Furthermore, you can contact the Austrian Data Protection Authority (www.dsb.gv.at).

If you require further information about your rights as a GREENGAGE App user itself, or if you have further questions, or wish to exercise your rights or abort your GREENGAGE Citizen Observatory participation, please contact manuel.pirker-ihl@sushi.dev or jan.peters-anders@ait.ac.at .

9. Obligation to provide data

You are not obliged to provide your data, this is voluntary, but in this case the GREENGAGE App cannot be used.

10. Related documents

 

 

[1] as of 04/2023.