All information sent to us using the application forms for the “Project Development Assistance services (PDA services)” will be collected, stored and processed on behalf of the Fuel Cells and Hydrogen 2 Joint Undertaking (FCH 2 JU). the Specific Privacy Statement is published in the “Download” section of this website under GDPR Agreement.

During the evaluation process, personal information (contact name, email address, phone number) will not be disclosed to people or parties outside Spilett or FCH 2 JU. All other information of the application will be subject to an evaluation process that is implemented by the consortium implementing the PDA services. Information from your application (which may include personal data – such as for example the contact person for your entity) will be available only to the controller and to the processor.

The collection, processing and use of personal data takes place within the framework of what is necessary for the fulfilment of the application process and in accordance with the principles of data proportionality and data minimisation.

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

Information about:

• The browser type and the version used
• The operating system
• The internet service provider
• The IP address
• The date and time of access
• The amount of data sent in bytes
• Visited website from which the user’s system accesses our website
• Websites accessed by the user’s system via our website Access data

We collect data about accesses to the site and store these as “server log files”. We use this information to prepare aggregated, anonymous statistics reports of visitors’ activity and to improve the website.
Such data is kept for a period of 5 years. These data are not stored together with other personal data of the user.

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.

The legal basis for the temporary storage of data and log files is Article 6 (1) GDPR.

Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user visits a website, a cookie can be stored on the user’s operating system.

This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

1. Log-In information
2. Entered search terms

The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data are not stored together with other personal data of the user.

If you do not want to be recognized again, you should delete all cookies when leaving the Internet. In addition, common browsers offer the option not to accept cookies.

Note: It is not guaranteed that you can access all functions of this website without restrictions if you make the appropriate settings.

Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Article 6(1) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is Article 6(1) GDPR if the user has given his consent.

Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a page change. The user data collected by technically necessary cookies are not used to create user profiles. In these purposes also our legitimate interest lies in the processing of personal data according to Article 6(1) GDPR.

Duration of storage, possibility of objection and removal

Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. As part of the registration process, the user’s consent to the processing of this data is obtained.

Legal basis for data processing

The legal basis for the processing of personal data using cookies for analysis purposes is Article 6(1) GDPR if the user has given his consent.

Purpose of data processing

Registration does not serve to conclude a contract with the user and is also not required for the provision of certain content and services on our website.

Duration of storage

The data will be deleted as soon as they are no longer required for the purpose of their collection. This is the case for the data collected during the registration process if the registration on our website is cancelled or modified.

Possibility of opposition and removal

As a user you have the possibility to cancel the registration at any time. You can change the data stored about you at any time.

If you contact us through the contact options offered, your details will be stored so that they can be used to process and respond to your enquiry. This data will not be passed on to third parties without your consent.  If you provide us with your e-mail address, we will communicate with you via e-mail. If you no longer wish to receive e-mails from us, you can cancel these at any time.

Legal basis for data processing

The legal basis for the processing of the data is Article 6(1)(a) GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6(1)(f) GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) GDPR if the user has given his consent.

Purpose of data processing

If you contact us by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended.
The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

Objection and removal possibility

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of establishing contact will be deleted in this case.

If personal data is processed by you, you are the data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the person responsible.

Your rights when we process your personal data

When your personal information is processed by the Spilett n/t GmbH as a contractor of FCH 2 JU, you have the right to know about it.

• You have the right to access the information and have it rectified without undue delay if it is inaccurate or incomplete.
• You can request that we communicate, as possible, any changes to your personal data to other parties to whom your data have been disclosed.
• You have also the right not to be subject to automated decisions (made solely by machines) affecting you, as defined by law.
• You have, in any case, the right to have recourse to a supervisory authority. In this case the EDPS acts as the supervisory authority.

Under certain conditions, you have the right to ask that we delete your personal data or restrict its use. Where applicable, you have the right to object to our processing of your personal data, on grounds relating to your particular situation, at any time, and the right to data portability. We will consider your request, take a decision and communicate it to you without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary.

You rights on your personal data are stated in Articles 17 to 24 of Regulation (EU) 2018/1725.

How to exercise your data protection rights at the EDPS

If the FCH 2 JU the controller or the Spilett n/t GmbH as the processor is processing your personal data and you would like to exercise your data protection rights, please send us a written enquiry.

In principle, we cannot accept verbal enquiries (telephone or face-to-face) as we may not be able to deal with your request immediately without first analysing it and reliably identifying you.
You can send your request to the FCH 2 JU by post in a sealed envelope or contact our data protection officer via email.
Your request should contain a detailed, accurate description of the personal data you want access to.
You must provide a copy of an identification document to confirm your identity, for example, an ID card or passport. The document should contain an identification number, country of issue, period of validity, your name, address and date of birth.
Any other data contained in the copy of the identification document such as a photo or any personal characteristics, may be blacked out.

Our use of the information on your identification document is strictly limited: we will only use the data to verify your identity and will not store them for longer than needed for this purpose.

In principle, we will not accept that you use other means to give evidence of your identity. Should you wish to propose alternatives, we will assess their adequacy on a case-by-case basis.