Thank you for visiting the LUCIA website. This website is dedicated to the dissemination of the LUCIA project, funded by the European Commission’s Horizon Europe research and innovation program under grant agreement No. 101096473. This privacy notice concerns the processing of personal data that occurs in connection with the operation of the LUCIA website.

In particular, in this privacy notice you will find information on:

• Who is legally responsible for the data processing (data controller).
• The data collection and processing that we carry out when you visit our website, contact us via the contact form, sign up for our newsletter or communicate with us.
• Your rights as a data subject.

We also use cookies on our website, please see our cookie notice below for more information.

Who are we?

LUCIA is a research and innovation project, which seeks to discover and understand new risk factors that contribute to lung cancer development. The core objective of LUCIA is to create a toolbox for analysing personal and external risk factors and to translate the results of LUCIA’s research into policymaking recommendations for lung cancer screening. The LUCIA Consortium consists of 19 partner organisations representing 6 countries across Europe, plus Israel, the UK and Turkey. The project has been funded by the European Union’s Horizon Europe research and innovation programme, under grant agreement No. 101096473. It is coordinated by the Israel Institute of Technology (Technion). HOPE (The European Hospital & Healthcare Federation) is the LUCIA partner responsible for the dissemination and communication efforts of the project and the administrator of this website. “We”, “us”, or “our” in this privacy notice refers to HOPE.

We are committed to processing personal data responsibly, securely, and proportionally throughout our activities in compliance with the EU General Data Protection Regulation (GDPR) 2016/679.

For the purposes of this website, the responsible data controller is HOPE, registered in Belgium with the company number 457663618, with registered office at Avenue Marnix 30, b17, 1000 Brussels, Belgium.

You can contact us by using the contact form on our website.

In certain circumstances, third parties may (also) be responsible for the processing of your personal data. For example, if you click on a link and leave our website or if you use our social media and have your own social media account. We have no control over the data social media providers collect about you. In that case, we recommend that you consult the privacy policies of these third parties.

Which personal data do we process and why?

When you use our website

When you use the LUCIA website or any other digital communication channel or sign up for our newsletter, we collect and use the following personal data:

• To ensure the most fault-free operation of our website and to detect and prevent malware, illegal content and conduct and other forms of potential abuse, we process technical information (e.g. server log files) about your visit and the device you use (e.g. IP address, time, visited webpage, operating system, browser type and version and location based on the IP address). We cannot identify you based on this information, but third parties may be able to identify you (e.g. your internet service provider).

We base ourselves on our legitimate interest in keeping our online presence safe for processing your personal data for this purpose.

• For statistics and to improve the content of and general experience on our website and social media, we process information about your browsing behaviour, how you use our website and the device that you use (e.g. number of visitors, number of sessions, average session duration, visited web pages). We cannot identify you based on this information, but third parties may be able to identify you. We collect this information through cookies. For more information about this, please see our cookie policy.

We base ourselves on your consent for processing your personal data for this purpose.

• To send you our newsletter, we process your email address and name.

We base ourselves on your consent for processing your personal data for this purpose.

When you communicate with us

When you communicate with us via our contact form, social media (Twitter, LinkedIn, Instagram), email or any other digital communication channel, we collect and use the following personal data:

• To enable communication between you and us (e.g. when you use our contact form, send us a message through social media, or contact us via telephone or email), we process identity and contact details you provide (e.g. name and email address), the content of the communication and its technical details (e.g. date and time).

We base ourselves on our legitimate interest in being able to respond to requests, questions or comments or to contact you proactively for processing your personal data under this purpose.

In all of the above cases

We will also process all personal data that we collect in the above circumstances in the following cases:

• To comply with our legal obligations or to comply with any reasonable request from competent police authorities, judicial authorities, government institutions or bodies, including competent data protection authorities.

We base ourselves on our legal obligation for processing the personal data mentioned above for this purpose.

• To prevent, detect and combat fraud or other illegal or unauthorized activities.

We base ourselves on our legal obligation for processing the personal data mentioned above for this purpose.

With whom do we share your personal data?

In principle, we do not share your personal data with anyone other than the persons who work for us, consortium partners, as well as with the suppliers who help us process your personal data. Anyone who has access to your personal data will always be bound by strict legal or contractual obligations to keep your personal data safe and confidential.

We may share your personal data with consortium partners located outside the European Economic Area (EEA) (the European Economic Area consists of the EU, Liechtenstein, Norway, and Iceland), specifically Israel. We will take adequate safeguards to protect your personal data when we transfer it, such as an adequacy decision.

We may share your personal data with service providers located outside the EEA, specifically Mailchimp in the US. We will take adequate safeguards to protect your personal data when we transfer it, including standard data protection clauses adopted by the European Commission.

How long do we keep your personal data?

We will delete or de-identify your personal data when it is no longer needed for the purposes described above, when you withdraw your consent if we have asked for your consent, or when the retention period mentioned below has expired. However, we cannot delete your personal data if there is a legal or regulatory obligation or a court or administrative order preventing us from doing so.

• We retain technical information such as our server log files until after your visit to our website. We retain information about your browsing behaviour until [5 years] after your visit to our website.

We retain messages that you send us via the contact form or through our social media, and your identity and contact and technical details related to the message, as long as necessary to handle and follow up your question or other input. We will not retain this data longer than [5 years] after your message.

How do we keep your personal data secure?

The security and confidentiality of the personal data we process are very important to us. That is why we have taken measures to ensure that all personal data processed is kept secure.

These measures include technical and organizational measures to protect our systems and processes, internal policy measures, limiting the processing of the personal data necessary for the fulfilment of the purposes, minimising the processing of personal data, pseudonymising personal data as soon as possible, transparency with regard to the functions and processing of personal data, enabling the data subject to exercise control over the processing of information, enabling the controller to create and improve security features, securing access to our offices, sites or facilities, restricting access to personal data based on roles, taking backups of personal data and periodically evaluating our security measures.

What are your data protection rights?

When we process your personal data, you can exercise a number of rights as described below. We may ask you for proof of identity when you want to exercise a right, to ensure that no personal data is disclosed to anyone who has no right to receive it.

• Access: You may ask us to provide information about the personal data we hold about you or request a copy of it. Please indicate for which processing activities you wish to have access to your personal data.
• Data portability: If we process your personal data on the basis of your consent, you may ask us for a copy in a structured, widely used and machine-readable format of any personal data that you have provided to us.
• Rectification: You may ask us to correct the personal data we process about you if you can demonstrate that it is inaccurate, incomplete, or out of date.
• Object: When we process your personal data on the basis of our own legitimate interests, you have the right to object to this processing. Please describe your specific circumstances that give rise to a request, so that we may balance your circumstances against our interests. When we process your personal data on the basis of your consent, you have the right to withdraw this previously given consent.
• Restriction: You may ask us to restrict the processing of your personal data when:
  • we are reviewing your request for rectification of your personal data,
  • we are reviewing your objection to the processing of your personal data,
  • such processing was unlawful, but you prefer a restriction to erasure,
  • we no longer need your personal data, but you need them for the establishment, exercise, or defence of any legal action.
• Erasure: You may ask us to erase your personal data if these personal data are no longer necessary for the purposes for which we collected them, if their collection was unlawful, or if you have successfully exercised your right to withdraw your consent or your right to object to the processing of your personal data. We will erase your personal data immediately in those cases unless legal obligations or administrative or judicial orders prohibit us from doing so.

You can exercise any of these rights by using the contact form on our website. Please make sure that we can clearly identify you and that you mention the right you want to exercise.

If you are not satisfied with our response, you may lodge a complaint with the competent data protection authority, the Belgian supervisory authority (https://www.dataprotectionauthority.be/).

Do we change this privacy notice?

We regularly review this privacy notice and will post any updates to it on this webpage. This privacy notice was last updated on [9 May 2023].

Do you have any questions?

Should you have any further questions about the processing of your personal data, please do not hesitate to contact us by using the contact form on our website.

COOKIE NOTICE

In addition to the privacy notice above, this cookie notice informs you about the use of cookies and similar technologies on the LUCIA website. It was last updated on [9  May 2023].

By continuing to use this website after you have been informed of our use of cookies and have been given the opportunity to change your cookie settings, you agree that you have read all information about such use and that you unambiguously consent to that use of the selected cookies as set out in this cookie policy below.

What are cookies?

Cookies are small text files that are stored on your device and contain certain information or personal data. We classify cookies according to their origin, purpose and lifespan:

• Origin (who places cookies):
  • first party cookies are placed and managed by us,
  • third party cookies are placed and managed by a third party.
• Purpose:
  • strictly necessary cookies are essential in order to use our website,
  • functional cookies collect information about your preferences to improve the functioning of our website to you,
  • analytical cookies collect information about the use of our website to improve our website to the benefit of all visitors,
  • marketing cookies collect information about your browsing behaviour to make content and advertising more relevant to you.
• Lifespan (how long are cookies stored):
  • session cookies are stored in your browser during the session and are deleted when closing your browser,
  • persistent cookies are only deleted when they have reached their expiry date, a new version of the cookie is placed or the cookie is deleted manually.

Which cookies do we use?

When you visit our website, cookies are placed on your device. These cookies usually allow us or third parties to identify you, and we use this information to understand how our website is used, to improve its operation and content, and to ensure that it is secure. Except for strictly necessary cookies, we will always ask your consent for the functional cookies and analytical cookies we place. You can choose to give your consent on your first visit of our website. We will remember this choice for [6 months] and ask for new consent afterwards. You can also withdraw your consent at any time (see “What if you don’t want cookies?”).

We use Piwik PRO for analytics, which is a privacy friendly alternative to other analytics tools. Piwik PRO is self-hosted and your data is not transferred outside the EEA. To find out more information about the cookies placed through Piwik PRO, please see https://help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwik-pro/.

What if you don’t want cookies?

• Browser settings: You can adjust your browser settings to prevent cookies from being placed or to manually delete cookies placed on your device. You can learn more about how you can adjust the cookie settings per browser through the following links: Google Chrome, Mozilla Firefox, Microsoft Internet Explorer, Microsoft Edge, Apple Safari (iOS) and Apple Safari (MacOS).
• Private browsing: You can use the private browsing mode of the browser that you are using so that the cookies placed will be deleted when you close the browser.

Caution: Please note that changing the browser settings or deleting cookies may result in certain parts of our website no longer working properly.

Do you have any questions?

Should you have any further questions about the processing of your personal data or about our use of cookies, please do not hesitate to contact us using the contact form on our website.