PRIVACY NOTICE AND CONSENT FORM FOR ESA BSGN INDUSTRY ACCELERATOR ON AGRICULTURE AND FOOD


The European Space Agency (herein the “Agency” or “ESA”) is an intergovernmental organisation established by its Convention opened for signature in Paris on 30 May 1975 having its headquarters located at 24 rue du Général Bertrand, CS 30798, 75345 Paris Cedex 07, France.

Protection of Personal Data is of great importance for ESA, which strives to ensure a high level of protection as required by the ESA Framework on Personal Data Protection (herein the “ESA PDP Framework”) which applies in this field. ESA implements appropriate measures to preserve the rights of data subjects, to ensure the processing of personal data for specified and legitimate purposes, in a not excessive manner, as necessary for the purposes for which the personal data were collected or for which they are further processed, in conditions protecting confidentiality, integrity and safety of personal data and generally to implement the principles set forth in the PDP Framework, available at:
http://www.esa.int/About_Us/Law_at_ESA/Highlights_of_ESA_rules_and_regulations

ESA PDP Framework is composed of the following elements:

• the Principles of Personal Data Protection, as adopted by ESA Council Resolution (ESA/C/CCLXVIII/Res.2 (Final)) adopted on 13 June 2017;
• the Rules of Procedure for the Data Protection Supervisory Authority, as adopted by ESA Council Resolution (ESA/C/CCLXVIII/Res.2 (Final)) adopted on 13 June 2017; and
• the Policy on Personal Data Protection adopted by Director General of ESA on 5 February 2018 and effective on 1 March 2018 (PDP).

This notice is intended to inform you, as data subject, about:

• the identity of the data controller and contact details of ESA Data Protection Officer (“DPO”);
• the type of personal data which is collected and processed;
• the modalities of collection of personal data;
• the purpose of the collection and processing;
• the recipients (if any) to whom the personal data of the data subject shall be disclosed;
• the time-limits for storing the personal data;
• the practical modalities of exercising the rights of the data subject under the ESA PDP. This notice also enables ESA to obtain your consent relating to the collection and further processing of your personal data, under ESA PDP Framework.

This privacy notice was last updated on: 2022-04-14


1 - Who is the Data Controller and for which purposes?

1.1. Your personal data mentioned in point 3 below are collected and further processed for the ESA BSGN Industry Accelerator on Agriculture and Food. For these purposes only as well as for the purposes mentioned in Article 5 of ESA Policy on Personal Data Protection, ESA is Data Controller.
ESA does not instruct any third party – to conduct any web analytics, profiling or any other processing on ESA’s behalf, other than as indicated in this privacy notice. ESA does not consider your personal data as an asset for sale or for commercial exploitation on behalf of ESA.
LinkedIn refers to LinkedIn (https://www.LinkedIn/privacy-policy/) and acts as a separate Data Controller upon an independent decision of LinkedIn and/or its sub-contractors, if you link your personal data to your LinkedIn profile pod on the ESA BSGN Industry Accelerator for Agriculture and Food Community Platform. If you use LinkedIn, the privacy notices of LinkedIn will apply and ESA and SCE will have no liability whatsoever in connection with the collection and processing of your personal data by LinkedIn as separate Data Controller.


2 - What are the contact details of ESA Data Protection Officer?

Concerning the collection or processing of your Personal Data on ESA’s behalf: according to ESA PDP Framework, your first point of contact is the ESA Data Protection Officer (“DPO”), who may be contacted at DPO@esa.int.


3 - What kind of personal data about you are collected and further processed?

As Data Controller, ESA has only authorised Space Cooperative Europe as Processor to collect and process:

• First name
• Last Name
• Email address
• Phone number
• Links to internet resources
• Photo (optional)
• IP (internet protocol) address and data about your [system activity, hardware settings, browser settings, date and time of your request…]
• Essential and/or functional cookies
• Other information that you provide and which may directly or indirectly identify you;

as entered by the data subject in their profile pod, only for the authorised purposes of registration and sharing the profile if they choose to. You are required not to send the Agency or any separate Controllers or Processors or subprocessors any sensitive information (including information that indicate, directly or indirectly, the personnel’s ethnic origin, political opinions, adhesion to unions, parties etc., health situation, sexual orientation).



4 - To whom might we disclose your personal data?

The Agency may disclose your personal data as shown in this Privacy Notice as defined in the Terms and Conditions for the ESA BSGN Industry Accelerator on Agriculture and Food, to:

Recipient acting as…	Servers of the recipient are located in:
Processor: Space Cooperative Europe / https://bsgn.spacecoop.eu/imprint.html	France
Separate Controller: LinkedIn	https://www.linkedin.com/legal/privacy-policy

5 - For which legitimate purpose and legal basis are your personal data processed?

The legal basis for processing your personal data under PDP 5.2 is the performance of an activity carried out by the Agency within its purpose and in the framework of, and in conformity with the ESA Convention, the “Agreement between the States Parties to the Convention for the establishment of a European Space Agency and the European Space Agency for the protection and the exchange of classified information” done in Paris on 19 August 2002, and the applicable rules and procedures, including ESA Security Regulations and Directives; this includes Processing necessary for the Agency’s management and functioning, Dispute Resolution Procedure, and or Investigation Procedures.
The legitimate purposes for processing your personal data are:

• to register on the ESA BSGN Industry Accelerator on Agriculture and Food Community Platform, which aims at facilitating interaction amongst entities interested in the activities of the ESA BSGN Industry Accelerator on Agriculture and Food;
• to send you newsletters in relation with the ESA BSGN Industry Accelerator for Agriculture and Food;
• to enable your participation in events;
• to send you notifications in connection with relevant events (co-)organised by ESA, including conferences, seminars, webinars and training courses;
• to conduct surveys.

6 - For how long are Your personal data retained on ESA’s behalf?

For the duration of the use of the ESA BSGN Industry Accelerator for Agriculture and Food Community Platform, and the management of the follow-up activities, as long as you remain registered on the platform. Records of consent are maintained five years after the end of the processing and shall be deleted thereafter.



7 - How can you erase, rectify, complete or amend your personal data?

The Agency is keen to collect and process accurate personal data and to keep it up to date. You may request the erasure, rectification, completion or amendment of your personal data if, and to the extent that it is inaccurate or incomplete, having regard to the purposes for which they are collected and processed, or if they are processed in violation with the principles referred in ESA PDP Framework.
If you choose to make a request for the erasure of your personal data:

At ESA: please send an email to: dpo@esa.int copy to bsgn@esa.int

At ESA BSGN Industry Accelerator for Agriculture and Food Community Platform: please login to your account scale.community.spacecoop.eu and delete your personal data

At SCE: please send an email to: dpo@esa.int

At LinkedIn: please follow the instructions provided by LinkedIn as separate Controller.

8 - What could you do in case of a data protection incident?

In case of a data protection incident, contact the ESA DPO by sending an email to: dpo@esa.int In case you wish to submit a complaint, you are required to comply with the Rules of Procedure of the Supervisory Authority set forth by ESA PDP Framework. You will be required to demonstrate that a data protection incident occurred in relation to your personal data, following a decision of the Agency or at least to justify serious reasons to believe that such incident occurred.


9 - Your consent

For those cases where your consent was not already obtained by ESA (including by other modalities) or data processing is not already permissible under other rules and is required under the ESA Framework on Personal Data Protection, you agree with the collection and further processing {add link}.
The Terms & Conditions of the ESA BSGN Industry Accelerator on Agriculture and Food contain the option that Space Cooperative Europe SCE will take over the operation of the platform at a later stage. In this case the data controller will change as per the Terms and SCE will issue you a new data privacy notice that will then be subject to the GDPR (EU Regulation 2016/679 and the German Bundesdatenschutzgesetz (BDSG), which is the governing set of rules for data protection by SCE.
You will be able to withdraw your consent depending on the modality used to collect your personal data, or via sending an e-mail with your request to bsgn@esa.int.