Laboratories Europe GmbH - Data-Privacy Notice

Data Controller and DPO

Data Controller is NEC Laboratories Europe GmbH, Kurfürsten-Anlage (NLE) 36, D-69115 Heidelberg e-mail: privacy@neclab.eu. The Controller appointed a Data Protection Officer that can be contacted at this e-mail address: dsb@neclab.eu

Information on data processing

The required data for contacting and authenticating the user will be stored on our internal directory server.

Categories of Personal Data and source Purposes of processing Legal basis of data processing Data retention
Contact and Account (Login) Information including:
  • First Name
  • Last Name
  • E-Mail Address
Technical Information:
  • IP-Address
  • access times
  • browser type
  • referring website addresses
  • user action logs / audit logs:
    • access granted and revoked timestamps
    • password change timestamps
Legitimate purpose of authenticating and authorizing users. Providing requested services and enforcing security standards. Legal basis is primarily consent. Consent was given when accepting Terms and Conditions during the account invitation and activation. Data is deleted after the account has been deleted. This may happen due to multiple occasions:
  • The Account Holder triggers an account deletion via the Portal Page
  • An Automatic cleanup happens due to one of the following reasons:
    • the account invitation link has not been accepted and therefore the activation of the account did not happen in time.
    • the account is no longer assigned system internally with any NLE provided resource
    • after the account has been inactive and disabled for too long.
    • after the account password has been expired for too long.

Processing procedures

The Controller through its own authorized personnel and data processors carries out the personal data processing. Technical and organisational measures are in place at all involved entities to protect privacy and security of the data.

Disclosure of Personal Data, and transfers outside the European Economic Area (“EEA”)

Data is not disclosed or transferred to anybody outside the EEA

Data Subject Rights

Data subject may exercise his/her rights at any time, and in particular:

  • confirmation of whether personal data concerning him/her are being processed and to obtain access to the data and the following information: purpose of processing; categories of personal data; recipients; storage period; existence of the right to rectification, cancellation and limitation; origin of data not collected from the data subject.
  • the cancellation or rectification of inaccurate personal data concerning him/her and/or the integration of incomplete personal data if he/she so wishes, also by providing a supplementary declaration.
  • the limitation of processing consisting in the blocking of data processing for the period necessary for the required verifications in the hypotheses foreseen by the regulations in force.
  • the portability of the data provided to the Controller including the direct transmission of the data to another data controller, the Controller shall deliver the personal data available on electronic format for common use to allow migration to other media.
  • opposition at any time to processing based on the legitimate interest of the Controller.
  • revocation of consent, where the processing is based on such legal basis.

Exercise of data subject's rights and complaints

Data subject may exercise his/her rights at any time by contacting the Controller by sending an email to the Controller without any formality or payment of any additional cost: privacy@neclab.eu. Every request received by the Controller will be taken into consideration after verifying the identity of the person entitled and safeguarding the rights of third parties. Requests will be satisfied as soon as possible and in any case within thirty days, except in the case of objective difficulties which will be communicated in writing within this period. In case of dissatisfaction on the modalities of processing and complaints and for any clarification data subject may write to the Controller, without prejudice to his right to apply to the Authority responsible for the protection of personal data: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.