Privacy Policy Statement
This notice is provided in accordance with Article 13 of EU Regulation 2016/679 for the protection of personal data. The data processed will be those of web users.
The Data Controller is:
Imperial College London, School of Public Health
St Mary’s Campus, W2 1PG, London (UK)
info@ghru@southasia.org
Nature of data provision
The provision of data is optional. Refusal to provide the data will result in the impossibility of being contacted for the purposes stated below. Providing data for marketing purposes is optional and will not prevent being contacted for other purposes.
Providing us with your personal data is optional but if you don’t give us your details and your consent to use them, we will not be able to contact you or to send you any promotional offers.
Purpose of processing and legal basis
Personal data is processed for the following purposes:
-
The personal data provided by users may be used for us to contact you following a request made in the contact form;
-
fulfilment of obligations pursuant to the law, regulations or Community legislation and defence before the courts;
Regarding purposes sub a) and b), please note that the processing and communication of your personal data by the Data Controller do not require your consent as it is necessary for the execution of obligations arising from the contract itself and/or for the performance of services requested by you prior to the conclusion of the contract, as well as to comply with legal obligations.
Legitimate interest
The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.
Data processing methods
The collected data will be processed using computer tools.
Appropriate security measures are observed to prevent data loss, illicit or inappropriate use and unauthorized access.
Who processes your data
The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the Data Protection Officer (DPO).
Data transfer
The data will only be transferred only within the EU. Some data may be transferred to the USA to those companies that are certified under the Data Privacy Framework.
Data conservation period
The retention time of the user’s choices relating to cookies is six months as required by the measures.
The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.
Personal data processed for contact or economic purposes will be processed for the times mandatory under the laws of competence.
Data subject rights pursuant to art. 15 eu 2016/679
Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation). Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.
Right to complain
Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).
