The purpose of this privacy policy (“Privacy Policy”) is to inform about the principles of data processing in connection with the performance of tasks under the project financed by the European Commission under the Internal Security and Police Fund under the name “Protection System for large gatherings of People in Religious Sites “(hereinafter: PROSPERES).

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on the protection of data, “GDPR”), we would like to inform you that:

1. Joint Controllers

The joint controllers of the personal data of individuals participating in research and events organized as part of the PROSPERES project are its Consortium Partners:

1. UNIWERSYTET LODZKI (UL), established in UL PREZYDENTA GABRIELA NARUTOWICZA 68, LODZ 90 136, Poland, VAT number: PL7240003243, Data Protection Office contact e-mail: iod@uni.lodz.pl (further herein: Joint Controller 1)
2. DYNAMIC SAFETY CORPORATION SP.ZO.O. (DSC), established in DWORKOWA 11/20, WARSZAWA 05077, Poland, VAT number: PL5211011948, (further herein: Joint Controller 2)
3. ISEM-INSTITUT PRE MEDZINARODNU BEZPECNOST A KRIZOVE RIADENIE, NO (ISEMI), established in VYSOKOSKOLAKOV 41, ZILINA 010 08, Slovakia, VAT number: SK2024121704, Data Protection Officer: Lubomir Zapotocny e-mail:zapotocny@isemi.sk (further herein: Joint Controller  3)
4. KENTRO MELETON ASFALEIAS (KEMEA), established in P KANELLOPOULOU 4 ST, ATHINA 10177, Greece, VAT number: EL999333507, (further herein: Joint Controller 4)
5. AKADEMIA WSB (WSB), established in ULICA ZYGMUNTA CIEPLAKA 1C, DABROWA GORNICZA 41 300, Poland, VAT number: PL6291088993, (further herein: Joint Controller 5)
6. STICHTING DUTCH INSTITUTE FOR SAFE & SECURE SPACES (DISSS), established in WALPOORT 10, ‘S-HERTOGENBOSCH 5211 DK, Netherlands, VAT number: NL863898269B01, (further herein: Joint Controller 6)
7. HELLENBERG INTERNATIONAL OY (HELLENBERG), established in KLAARANTIE 4 A 9, HELSINKI 00200, Finland, VAT number: FI21667664, (further herein: Joint Controller 7)
8. CARDET CENTRE FOR THE ADVANCEMENT OF RESEARCH & DEVELOPMENT IN EDUCATIONAL TECHNOLOGY LIMITED (CARDET), established in LYKAVITOU AVENUE 29 1ST FLOOR ENGOMI, LEFKOSIA 2401, Cyprus, VAT number: CY10153022T, Data Protection Officer: Marios Pitsillides., e-mail: dpo@cardet.org (further herein: Joint Controller 8)
9. ARCHIDIECEZJA LODZKA (Archdioce. Lodz), established in IGNACEGO SKORUPKI 1, LODZ 97 458, Poland, VAT number: PL7251981714, (further herein: Joint Controller 9)
10. FUNDACJA OBSERWATORIUM SPOŁECZNE (Social Obser.), established in UL. PL. KATEDRALNY, NR 1, WROCLAW 20 329, Poland, VAT number: PL8982211380, (further herein: Joint Controller 10)
11. IERA MITROPOLIS IOANNINON (HMI), established in PATRIARXOU IOAKEIM G10, IOANNINA 452 21, Greece, VAT number: EL090163448, (further herein: Joint Controller 11)
12. GMINA WYZNANIOWA ŻYDOWSKA W WARSZAWIE (GWZ Warsaw), established in TWARDA 6, WARSZAWA 00 950, Poland, VAT number: PL5252133200, (further herein: Joint Controller 12)
13. KOMENDA WOJEWÓDZKA POLICJI W ŁODZI (KWP Lodz), established in Lutomierska 108/112, Lodz 91-048, Poland, VAT number: PL726-000-44-58, (further herein: Joint Controller 13)
14. KOMENDA STOLECZNA POLICJI (KSP), established in Nowolipie 2, Warszawa 00-150, Poland, VAT number: 5251930070, (further herein: Joint Controller 14)
15. KOMENDA WOJEWÓDZKA POLICJI WE WROCLAWIU (KWP Wroclaw), established in Podwale 31-33, Wrocław 50-040, Poland, VAT number: PL 896 000 47 80,  (further herein: Joint Controller 15)
16. HELLENIC POLICE (HELLENIC POLICE), established in 4 KANELLOPOULOU AVENUE, ATHENS 101 77, Greece, VAT number: 090169846, (further herein: Joint Controller 16)
17. CENTRUM BADAŃ KOSMICZNYCH POLSKIEJ AKADEMII NAUK (SRC PAS), established in BARTYCKA 18 A, WARSZAWA 00 716, Poland, VAT number: PL5250009499, Data Protection Officer: Igor Zaleski e-mail: iod@cbk.waw.pl (further herein: Joint Controller 17)
18. THE MAIN SCHOOL OF FIRE SERVICE (SGSP), established in SLOWACKIEGO 52/54, WARSZAWA 01-629, Poland, VAT number: PL1180035927, Data Protection Officer: Tomasz Zwęgliński e-mail: tzweglinski@sgsp.edu.pl (further herein: Joint Controller 18).

hereinafter collectively referred to as “Joint Controllers”).

2. Common arrangements between the Joint Controllers

As part of the Consortium Agreement concluded between the co-administrators, we agreed on the scope of our responsibility regarding the fulfillment of obligations under the GDPR, including in particular we agreed that:

1. Joint Controller 1 is responsible for the overall processing of personal data needed for the performance of all project tasks;
2. Joint Controller 1 is responsible for ensuring a dedicated IPR and Data Management Coordinator who will act as the Data Protection Officer for the purposes of the PROSPERES project. IPR and Data Management Coordinator will act as a shared contact point for all PROSPERES data protection queries. IPR and Data Management Coordinator can be reached at prosperes@uni.lodz.pl;
3. Joint Controller 1 is responsible for providing a dedicated website on which this Privacy Policy will be posted;
4. Co-administrators 1 through to 18 are responsible for the processing of personal data as part of their respective project tasks, described in the Annex B to the Grant Agreement with the European Commission.
5. Co-administrators 1 through to 18 are responsible for fulfilling the information obligation towards individuals participating in PROSPERES research and/or events and for enabling them to exercise their rights related to the processing of their data by the Joint Controllers.

3. Categories of Personal Data

The joint controllers process the following categories of personal data:

• In the case of PROSPERES events: name, surname, telephone number, e-mail address, image;
• In the case of PROSPERES research: identification and contact details (first name / names, surname, telephone number, e-mail address, correspondence address), professional affiliation, area of professional expertise including relevant prior experience;

hereinafter referred to as “Personal Data”.

4. Purposes and legal grounds for the processing of Personal Data

Personal data of persons participating in PROSPERES research and events will be processed by the Co-administrators for the purposes of:

1. recruitment to PROSPERES events,
2. organizing and conducting PROSPERES events,
3. issuing documents confirming participation in PROSPERES events,
4. dissemination and outreach activities in line with the overall PROSPERES aims, which include:

• increasing the level of protection in places of worship
• forming an outstanding cooperation of scientists, security experts and practitioners, public services and religious institutions
• preparing a comprehensive protection system, increasing prevention, protection, deterring and responding to various types of terrorist threats and incidents that may occur in religious places, including attacks with chemical, biological, radiological and nuclear agents.

Personal data of persons participating in PROSPERES events and research will be processed in line with purposes a) -d) for the purpose of performing the contract with the European Commission.

The Joint Controllers will not process personal data for other purposes incompatible with the purposes described above, unless such processing is required by law or unless the Joint Controllers are authorized to do so by persons participating in PROSPERES events or research, respectively.

5. Enabling Third Party Access

For the purposes indicated in this Policy, Joint Controllers may transfer Personal Data to the following categories of third parties:

• external contractors providing tools for rendering services, testing deliverables or management and sharing data, to achieve the purposes indicated in para 4 above, to whom the Joint Controllers entrust processing based on data processing agreements;
• entities and bodies authorized to receive Personal Data from Joint Controllers or authorized to request access to Personal Data on the basis of generally applicable provisions of law.

6. Period of personal data storage

Personal data of subjects participating in PROSPERES events or research will be kept by each of the Joint Controllers for the duration of the project or consent to use the image, and after this period for the period and to the extent necessary to pursue a legitimate interest Co-administrators, which is defense against potential claims related to the performance of the contract.

7. Your rights

Individuals participating in PROSPERES research or events have the following rights related to the processing of their Personal Data by the Joint Controllers:

(i) the right to access and obtain a copy of the Participant’s personal data,

(ii) the right to rectify, delete and limit the processing of the Participant’s data,

(iii) the right to object to the processing, (iv) the right to transfer data, (v) the right to lodge a complaint with the President of the Office Personal Data Protection – on the terms set out in the GDPR. In the case of data processing on the basis of consent, persons participating in PROSPERES research and events have the right to withdraw it.

8. Requirement to provide data

Providing the Joint Controllers with personal data for the purpose of participating in PROSPERES research and events is voluntary, but necessary to take part in the relevant event or research.