Last Updated: 12th May 2022

DEMETER is a Horizon 2020 project (Grant Agreement No 857202) supported by the European Union. The project coordinator, Kevin Doolin, and the project members involved in the platform development are constantly committed to protect the online privacy of the platform users. This document was drafted pursuant to art. 13 of EU Regulation 2016/679 (hereafter: "GDPR") in order to let you know our privacy policy, to understand how your personal data is being handled when you use the DEMETER Platform, in all its applications. The information and data supplied by you or otherwise acquired as part of the use of the DEMETER applications, - such as: access to the reserved area of the DEMETER Applications - will be processed in compliance with the provisions of the GDPR.
According to the rules of the GDPR, in particular to the Article 5, the treatment carried out by DEMETER will be based on the principles of lawfulness, correctness, transparency, purpose and storage limitation, minimization of data, accuracy, integrity and confidentiality.

1. About the DEMETER ecosystem

The DEMETER ecosystem offers the following core applications:
  • Access Control Server (ACS) for pilot user account registration and access to the other core applications;
  • Brokerage Service Environment (BSE) for service registration, discovery and ultimately communication process for pilot DEMETER-enabled resources in a secure and privacy preserving manner;
  • DEMETER Enabler Hub (DEH) for resource registration and discovery;
  • DEH-Client for resource consumption metrics monitoring.
  • Stakeholders Open Collaboration Space (SOCS) for collaboration, sharing knowledge and best practices, and participating in the co-creation processes;
This privacy policy covers the data handling by these applications. Other components, offered through the DEH, may have their own privacy policy.

1. About the Data Controller

For any information concerning the processing of your personal data within the DEMETER platform, you can write to the project coordinator Kevin Doolin, using this address: kevin.doolin@waltoninstitute.ie. You can also use the following address about how the personal data are processed by the core applications:
  • ACS: Raul Orduna (rorduna@vicomtech.org)
  • BSE: Yannis Oikonomidis (yannis.oikonomidis@netcompany-intrasoft.com)
  • DEH: Antonio Caruso (antonio.caruso@eng.it)
  • DEH Client: Sundaresan Venkatesan (Sundaresan.Venkatesan@waltoninstitute.ie)
  • SOCS: Francesca Cantore (francesca.cantore@eng.it)

2.About the information we collect

Through the use of the DEMETER platform by its users, we are collecting your contact information, such as full name and email address, your username and password, when you access the DEMETER applications. However, some specific applications might ask for additional information which are optional after the registration.

3. Purpose of the treatment

The treatment we carry out has the following purposes:
  a. Enable you to access and use the Platform applications,
  b. Enable you to communicate and share with other users,
  c. Provide customer service and respond to requests for assistance or information, whenever you contact us,
  d. Operate, protect, improve, and optimize the Platform and your user experience.

4.Legal basis for the processing

We process the information detailed in Section 2 for the adequate performance of offering to you the services related to the purposes (a), (b) and (c). Also, given our legitimate interest in providing and improving the functionalities of the DEMETER Platform and our users’ experience with it, for the purpose (d).

5. The recipients of the personal data

Your personal data will only be shared, for the purposes referred to in Section 3 above, with persons authorized by DEMETER to the processing of personal data necessary to carry out activities strictly related to the provision of the services, which are committed to or have an appropriate legal obligation of confidentiality.

6. Transfer of personal data to a third country or international organisation

DEMETER confirms that it will not transfer your personal data to a third country or international organization.

7. Data retention

The personal data processed for the purposes set out in Section 3 will be kept for the time strictly necessary to achieve those same purposes. Your personal data will be kept as long as the DEMETER Platform will be operation and the provision of service will be performed. Also, your personal data will be kept as long as you are a user of the DEMETER Platform – you can require in any moment the cancellation of your account and all your personal data linked to it will be cancelled.
Further information about the data retention period and the criteria used to determine this period may be requested by writing at: kevin.doolin@waltoninstitute.ie

8. Data subject rights

You have the right to ask at kevin.doolin@waltoninstitute.ie at any time, in application of Articles 15-22 of GDPR, to access to your personal data, to rectify or cancel them, and to request the limitation of processing in the specific cases detailed under art. 18 of the GDPR. Also, you have the right to obtain, in a structured, commonly used and machine-readable format the personal data provided by you and have the right to have these data transmitted to another organization.
In any case, you are always entitled to lodge a complaint to the Supervisory Authority, pursuant to art. 77 of the Regulations, if you believe that the processing of your personal data is not complaint to the GDPR.

9. Changes to this Privacy Policy
This privacy policy is effective from 12th May 2022.
We reserve the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will post the revised Privacy Policy on the DEMETER Platform and update the “Last Updated” date at the top of this Privacy Policy. We will also provide you with notice of the modification by email before they become effective. If you disagree with the revised Privacy Policy, you may cancel your Account. If you do not cancel your Account before the date the revised Privacy Policy becomes effective, your continued access to or use of the DEMETER Platform will be subject to the revised Privacy Policy.