List of active policies

Full policy

Skills4EOSC training platform collects information through the use of "cookies" or similar technologies. Cookies are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

The table below explains the main cookies set by the Skills4EOSC training platform and their purpose.

Service	Cookie Name	Purpose
PHP	PHPSESSID	This session cookie, provided by the The PHP Group, stores and tracks data for a user while travelling through a series of pages on the site
Moodle	MoodleSession	The session cookie, set by Moodle, is used to maintain a user’s login while they navigate through series of pages on the site.
	MoodleSessionTest	The session cookie, set by Moodle, is used to check if the ‘MoodleSession’ cookie is being created.
	MOODLEID	This persistent cookie is used to remember the username, so that when a visitor revisits the site, their username will be populated in the username field of the login page.
BigBlueButton	SESSION	The session cookie, set by BigBlueButton, is used to maintain a user’s login while they are using the conference system.

 

Full policy

Skills4EOSC ‘Skills for the European Open Science commons: creating a training ecosystem for Open and FAIR science’ is funded by the European Commission Horizon Europe programme (GA 101058527). Coordinated by Consortium GARR and supported by 44 partners in 18 European countries, Skills4EOSC will set up a pan-European network of competence centres to speed up the training of European researchers and harmonise the training of new professional figures for scientific data management.

The Skills4EOSC project is bound by the European Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR).

Skills4EOSC uses the Moodle learning platform as part of its training services for relevant stakeholders training activities. More information about Moodle can be found on: https://docs.moodle.org/37/en/Main_page. The Moodle instance used by Skills4EOSC is maintained and managed by GARR. The instance and all of its third-party plugins is hosted on the institutions own web servers. Thus, when using the Skills4EOSC training platform, GARR is responsible for protecting your personal data.

Please read this Privacy Notice carefully – it describes why and how we collect and use personal data and provides information about your rights. It applies to personal data provided to us, both by individuals themselves or by third parties and supplements any other Skills4EOSC privacy notices which may apply, for example the privacy notice applicable when you visit the Skills4EOSC website (https://www.skills4eosc.eu/privacy).

Purposes of data use

The Skills4EOSC project will process the personal data of trainers and trainees for the following purposes:

• provide access to the learning platform
• provide an online training service 
• track student progress 
• enable teachers to communicate with learners
• in order to compile statistical reports about the training events. 

All processed data will be published in a summarized fashion, completely anonymized.

Legal basis for the use of personal data

All personal data stored and used is necessary for the legitimate interest of the service provider in ensuring the security of the platform for all users and in fulfilling the contractual obligations of the Skills4EOSC project in the area of training material production and training services.

Personal data that we keep about you

The user profile created for you on this training platform stores the following mandatory information:

• User ID
• Name and Surname
• Email address

In order to enroll in any course that is offered through this training platform, this information is required to create an account. An account is needed to have access to all training materials. 

As part of its operation, Moodle logs user activity. We will gather the following data via these logs:

• IP address
• User ID
• Moodle Course ID
• Time stamp of activity
• Action type
• Moodle object the action was on e.g. Quiz

From these logs Moodle generates a number of reports that are accessible to the administrators on each Moodle course (training) that you participate in. These Moodle reports enable course administrators to monitor the activity in the training and to see what resources are or are not being accessed. These may be used by the training teams to support your training and learning.

Third party plugins

As part of the webinar types of training a BigBlueButton instance hosted by GARR will be used (https://bigbluebutton.org/). It is a GDPR compliant third-party service, developed in Canada as an open source web conferencing solution for online learning that provides real-time sharing of audio, video, slides, whiteboard, chat and screen. In order to facilitate the service provided identifiable data, in particular full name, IP address and meeting ID, is shared between the Skills4EOSC Moodle instance and the BigBlueButton service is hosted by GARR.

Please note that when participating in a webinar training your full name will be visible to all participants. In addition your IP address and meeting ID will be stored in logs related to the webinar.

Sharing information

GARR and Skills4EOSC do not provide your information to third parties. Your information, whether public or private, will not be sold, exchanged, transferred, or given to any other third party for any reason whatsoever, without your consent, other than for the express purpose of delivering the training requested.

The email address you provide may be used for purposes including but not limited to, sending you information and updates pertaining to your registered training course and Skills4EOSC news.

Training participants

When the Moodle training platform is accessed via self-enrollment for online only training offers the user will need to fill out the user profile on the platform itself.

All feedback from assessments will also be stored in the Moodle database along with the user activity logs.

Where required to either provide support or to investigate an issue, the Moodle database may also be accessed by GARR IT administration staff.

Trainers

Moodle reports enable course administrators to monitor activity in the training and to see what resources in the course are or are not being accessed. These may be used by training teams to support your teaching and learning and must be used in compliance with the privacy policy for trainees.

The processing of trainer personal data that takes place when using BigBlueButton is:

• recording the live training session
• storing, editing (for example by the addition of any questions or notes) and making available online to trainees registered on that course of the recording
• recording and making available any online comments added by the trainer.

In addition, the use of the Moodle platform entails storing the following data:

• Background information: given name, family name, email address, username, Moodle role
• Details about your courses: the modules on which you a trainer
• Details of all your activity in Moodle: e.g. logins, deletions, edits.

This data will be used in compliance with GDPR.

Data security

To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information collected in Moodle database. 

Moodle also has safeguards in place. Feel free to visit their site policy   (https://docs.moodle.org/dev/Moodle_security_procedures ).

Data retention

We will keep your personal data for no longer than 6 months after the project ends

Cookies Policy

Please refer to the Cookies Policy.

Your rights

You may have the following rights under data protection laws in relation to your personal data:

• Right to request access to your personal data;
• Right to request correction of your personal data;
• Right to request erasure of your personal data;
• Right to object to processing of your personal data;
• Right to request restriction of the processing your personal data;
• Right to request the transfer of your personal data; and
• Right to withdraw consent.

If you wish to exercise any of these rights, please contact the assigned Data Controller using the details set out below.

Contacting us

If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, please contact GARR’s Data Controller using the details set out below:

Data Controller
Consortium GARR
mail: privacy@garr.it

Data Protection Officer
Davide Vaghetti
email: dpo@garr.it