Information for Data Subjects

According to Article 12 of the EMBL Internal Policy 68 (equiv. to Article 13 of Regulation (EU) 2016/679)

The personal data you provide to the European Molecular Biology Laboratory (EMBL) upon registering for or expressing interest in attending a course or a conference as a member of the audience or invited speaker will be processed under the control of the EMBL Course and Conference Office (CCO) for the purpose of allowing you to attend the event and to manage your participation, of documenting these events with photos and video recordings and make these publicly available to promote EMBL activities, and of informing you of relevant upcoming courses and conferences organised by EMBL thereafter.

CCO will be processing your personal data to fulfil its mandate given by the agreement establishing EMBL in 1973 (link, provision of advanced training and teaching in molecular biology). An additional legal basis with regard to attending a course or a conference is the need to perform the service contract arising between you and EMBL when you register for one of the events.  When individually depicted in photographs or video recordings the legal basis is your consent.

You are not obliged to provide your personal data to the controller. However, without it, CCO will not be able to facilitate your taking part in its courses or conferences.

Your personal data may be disclosed to recipients as and when set out below:

  1. If you choose to register for an event - to Ungerboeck Systems International GmbH, a German company which provides EMBL’s events software and operates the technical infrastructure for the database in which the data will be stored.
  2. If you choose to pay the fees to attend the courses and conferences organised by the controller with a credit or debit card, your card details will be transferred to WorldPay Limited, a UK company used by EMBL to securely process payments online.
  3. If you take part in a conference organised by the controller – to CVent Inc., a US company participating (link) in the EU-US Privacy Shield and providing, directly or through its subsidiaries, the software for the EMBL Events app.
  4. If you opt to receive newsletters – to The Rocket Science Group LLC d/b/a MailChimp, a US company participating (link) in the EU-US Privacy Shield and providing the software and hardware that EMBL uses to send out communications about its training programme.
  5. If you take part in a training course – to Slack Technologies, Inc., a US company participating (link) in the EU-US Privacy Shield and providing software for team collaboration.
  6. After you have attended a course or conference – to SurveyMonkey Inc., a US company participating (link) in the EU-US Privacy shield and providing software for the surveys that give us your feedback.
  7. If you are participating in a course of conference – companies providing to the controller the following, or similar, types of services: catering, accommodation, security, transport and travel.
  8. During training events you may have access to additional community resources in which you may choose to provide personal data. You will not be obliged to do so but if you choose to do so you should be aware that your personal data will be shared with other course participants.
  9. If you submit an abstract to present at a conference or apply for financial assistance, your abstract and personal data will be shared with a committee of scientists, some of whom will be external to EMBL, for an evaluation and selection process.
  10. If you attend an EMBO Practical Course or an EMBO Workshop, your personal data will be shared with EMBO as part of the funding reporting and for surveys that give them your feedback.
  11. If you take part in a course or conference organised by the controller, your data will be shared with other participants of this course or conference, even with those that reside outside of the EEA.
  12. To EMBL Photolab, for the purpose of providing photos and video recordings.
  13. To general public via press releases, printed materials or published materials on EMBL`s website or intranet site, Youtube channel, social network channels (via LinkedIn, Facebook, Twitter, Instagram), EMBL Events Blog and EMBL Mediasite.
  14. To online channels and social media service providers such as YouTube LLC, LinkedIn Corp., Facebook Inc., Twitter Inc., all US companies, participating in the EU-US Privacy Shield.
  15. To Sonic Foundry Inc., providing EMBL Mediasite service, a US company participating in EU-US Privacy Shield (link).
  16. To Automattic Inc., offering blogging platform Wordpress to provide EMBL Events Blog (https://blogs.embl.org/), a US company participating in EU-US Privacy Shield (link).

Your personal data will be stored for as long as you may have an account on the controller’s registration system. Published data on EMBL Internet site, EMBL intranet site, EMBL social media accounts, EMBL Mediasite and EMBL Blog will be kept for as long as the controller has the account open. Photos and video recordings will be stored for as long as it is necessary for the purpose of the CCO activity.

You may address to the Head of CCO a request to exercise your rights, e.g. to access, rectify, erase your personal data or to object to its processing. You may also lodge a complaint with the administrative authority supervising data protection at EMBL.

The Head of CCO can be contacted by webform here: link, by telephone at +49 6221 387 8797 or by post at EMBL Heidelberg, Course and Conference Office, Meyerhofstraße 1, 69117 Heidelberg, Germany.

The Data Protection Officer of EMBL can be contacted by email at dpo@embl.org, by telephone at +49 6221 387-8590 or by post at  EMBL Heidelberg, Data Protection Officer,  Meyerhofstraße 1, 69117 Heidelberg, Germany.

You may also lodge a complaint with the administrative authority supervising data protection at EMBL, Data Protection Committee, reached by post at EMBL Heidelberg, Meyerhofstraße 1, 69117 Heidelberg, Germany, or by E-mail dpo@embl.org.