NOTIFICATION AND CONSENT OF TREATMENT OF PERSONAL DATA

ACCORDING TO ART. 13 OF EU REGULATION GDPR (General Data Protection Regulation) N. 679/2016 – 27 APRIL 2016

This notification is issued according to art. 13 of EU Regulation GDPR 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and in compliance with the legislation on the processing of personal data, as well as on the free movement of such data.

1. Data controller and contact

ONE TEAM SRL e-mail contact: privacy@oneteam.it .

2. Internal responsible person

Riccardo Perego e-mail contact privacy@oneteam.it role: CEO
Address: Via Winckelmann 2 – 20146 Milano (Italia)

The data will be processed by other authorized subjects and for this purpose instructed in compliance with current legislation.

3. Responsible of personal data protection and contact point

Riccardo Perego, e-mail contact privacy@oneteam.it, Address: Via Winckelmann 2 – 20146 Milano (Italia)

4. Purposes of processing, legal basis, data categories and storage period

By agreeing this notification, you accept to participate to BIM4EEB, an h2020 research project that aims at creating a “BIM-based fast toolkit for Efficient rEnovation in Buildings” and to utilise the BIMMS (BIM Management System) tool. For the purposes of the application of European and national legislation on the matter (EU Regulation 679/2016, from now on Regulation).

Table 1 - Purposes of the processing of personal data, legal basis of the treatment, categories of personal data to be processed, period of retention of such data

Purposes of the processing of personal data	Legal basis of the treatment	Categories of personal data to be processed	Period of retention of personal data
1. Registration, login, and the utilization of BIMMS (BIM management system)	Consent (Article 6(1)(a) of the Regulation)	Username E-mail	Stored until he end of the project BIM4EEB planned on30June 2022),
2. If you are an inhabitant of Finnish, Polish, or Italian demo building taking part to demonstration activity, storage and use of the survey data to demonstrate automatic mapping of geometrical data using augmented reality mapping tool and related performance.	Consent (Article 6(1)(a) of the Regulation)	Geometric dimensions of the rooms Surveys of indoor spaces Content elements in the walls (electricity and water pipe)	Stored until 1 year after the end of the project (June 2023)
3. If you are an inhabitant of Polish or Italian demo building taking part to demonstration activity, storage of data collected by sensors, storage and use of data collected by them for the validation of the KPI (Key Performance Indicators) of comfort identified for the BIM4EEB project	Consent (Article 6(1)(a) of the Regulation)	Temperature Relative humidity Occupancy Luminance CO2 concentration PM2.5 concentration PM10 concentration VOC concentration Absorbed electric power Electric power consumption Methane gas consumption	Stored until 1 year after the end of the project (June 2023)
4. If you are an inhabitant of Polish or Italian demo building taking part to demonstration activity, storage of the feedback about indoor comfort of temperature, air quality and luminance for the demonstration of comfort quality	Consent (Article 6(1)(a) of the Regulation)	Score of temperature, luminance and air quality	Stored until 1 year after the end of the project (June 2023).
5. If you are an inhabitant of Polish or Italian demo building taking part to demonstration activity, the usage of your data mentioned for purpose 2, purpose 3, and purpose 4, in anonymized form for scientific publications and dissemination activities of project results and for sharing with the scientific communities.	Consent (Article 6(1)(a) of the Regulation)	All above data mentioned for Purpose 3, Purpose 5 and Purpose 6	Stored until 1 year after the end of the project (June 2023)

5. Nature of data provision

The provision of data is optional. Refusal to provide data makes it impossible to carry out the purposes indicated in the above table. Failure to communicate and / or any refusal to respond makes it impossible to be involved voluntarily in the activities of the BIM4EEB research project.

6. Particular categories of data

The acquisition of personal data belonging to particular categories (ref. art. 9 of the Regulation) is not expected. The accuracy of gathered data does not allow to uniquely identifying a natural person.

7. Processing methods

The data processing for all the purposes indicated above can be carried out both digitally, and / or with electronic or, in any case, automated tools, including in-house databases. All data for Purpose 1, Purpose 2, Purpose 3 and Purpose 4 will be collected digitally by partners of the consortium without any personal identifiers, stored digitally in repositories compliant with GDPR or commercial services provided by third parties compliant with GDPR. For Purpose 2, RI.SE will collect the data with mapping tool, and data will be stored in BIM Management System (BIMMS) of One Team. For Purpose 3, sensors and meters data will be collected by "the organization of the data controller", store temporary in network services of "Name of the network operator", stored in the BIM Management System, and used by BIMcpd of UCC and BIM4Occupants of Suite5 to estimate the building comfort levels and energy requirements. For Purpose 4, your scoring about temperature, air quality and luminance will be collected by BIM4Occupants of Suite5 and stored in the BIM Management System. Access to the data acquired for all the aforementioned purposes is allowed to duly authorized personnel.

8. Profiling

The data of temperature, relative humidity, presence, illuminance, CO2 concentration, PM2.5 concentration, PM10 concentration, VOC concentration, absorbed electrical power, electricity consumption, methane gas consumption will also be processed according to an automated process by Suite5 , also for profiling purposes exclusively for the purposes related to the performance of the scientific objectives of the BIM4EEB project .

9. Categories of recipients

For the above listed purposes, data for

• Purpose 3 may be communicated pseudonymised to the following members of the BIM4EEB Consortium:
  • Suite5 as explained in Section 8 above ,
  • UCC (University College Cork)
• Purpose 2; despite geometric data of your flat collected during the survey of your flat mentioned at Purpose 2 are not personnel data, for sake of completeness we would like to inform you that these data are received by RI.SE (Research Institute of Sweden) and CGI or by the ALER for Italian building or SOLINTEL for Polish building and CAVERION for Finnish demo site. These are stored in BIMMS managed by One Team, and may be communicated with VTT (Technical Research Centre of Finland), TUD (Technische Universitaet Dresden), Suite5 (SUITE5 Data Intelligence Solutions), UCC (University College Cork) to demonstrate the project objectives. All these organizations are partners of the consortium.

For the above listed purposes, data for Purpose 2, Purpose 3, Purpose 4 can be communicated anonymously to the members of the BIM4EEB Consortium, to the third parties involved and the members of the designated Advisory Board. In relation to the purposes indicated, your personal data may also be communicated anonymously to the European Community and other public administrations if they have to process the same for any procedures within their own institutional competence as well as to all those public subjects to whom, in the presence of the related assumptions, the communication is compulsorily required by provisions of the European legal system, laws or regulations, as well as insurance bodies for any accident practices. Finally, these data can be shared anonymously to the scientific communities for research purpose and used for scientific publications and dissemination material to document project activities and results.

10. Period of retention of personal data

At the end of the period indicated in TABLE 1, once the limitation periods for the protection of the data subject's rights have elapsed, the data will be deleted or made anonymous.

11. Transmission to non-EU country

Personal data will not be transferred to non-EU countries.

12. Rights of data subject

The data subject can ask in any moment the following:

• confirmation of the existence or not of own personal data;
• access to own personal data and information relating to them; the correction of inaccurate data or the integration of incomplete data; the cancellation of own personal data (upon the occurrence of one of the conditions indicated in art.17, paragraph 1 of the Regulation and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of own personal data (when one of the hypotheses indicated in art.18, paragraph 1 of the Regulation occurs), the transformation into anonymous form or the blocking of data processed in violation of the law, including those of which it is not conservation required in relation to the purposes for which the data were collected or subsequently processed;

As data subject you have the right to object in whole or in part:

• for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
• the processing of personal data concerning him for the purpose of promoting communication and dissemination initiatives of the BIM4EEB project.

The data subject can withdraw the consent for identification and personal data processing by sending an email to: privacy@oneteam.it.

If the data subject considers that their rights have been compromised, they can lodge a complaint with the Data Protection Authority and / or other competent supervisory authority pursuant to the Regulation.

By selecting the appropriate box "I consent", you expressly provides the free and full consent to the processing of data according to the purposes indicated in this notification and within the limits required by the law, as well as their communication within the recipients above indicated.

We inform you that as a data subject you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before the revocation. Before expressing his/her consent, the interested party is informed of this. Consent is revoked with the same ease with which it is granted.