INFORMATION

Pursuant to Article 12 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”), we would like to inform you about the principles of processing of the personal data provided by you, in the context of your application for the GIJC25 Fellowships, to the extent that GDPR is applicable in your case.

1.Joint Controllers

The Joint Controllers of the Personal Data are as follows:

a) Global Investigative Journalism Network 2336, Wisconsin Ave NW, PO BOX 32322, Washington, DC, 20007, USA [[email protected]]

b) iMEdD – incubator for Media Education and Development Non-Profit Civil Law Partnership, 3A Stadiou str., Athens, Greece [[email protected]]

c) The Joint Controllers have entered into a joint controllership agreement, according to Article 26 of GDPR, defining their respective roles and responsibilities in the context of the evaluation of the applications for the GIJC25 Fellowships.

2. Purpose of the Processing

Your personal data will be processed solely for the purpose of assessing your eligibility and evaluating your application for the GIJC25 Fellowships.

3. Legal Basis

The legal basis for the processing of your personal data is Article 6(1)(b) of GDPR, in the context of the provision to you of the relevant service as well as Article 6(1)(f) of GDPR, in the context of the legitimate interest of the Joint Controllers in conducting a fair and transparent selection process of the GIJC25 Fellowships.

4. Categories of collected Personal Data

The personal data to be collected by the Joint Controllers include:

• Identification and contact details (first name, last name, gender, nationality, profession, place of residence and/or work, email etc.)
• Professional details (CV, links to past work, work samples, etc.)
• Motivation statements or essays
• Any other personal data you voluntarily submit via the application form

5. Data Recipients

Access to your personal data will be limited to the authorized personnel of the Joint Controllers involved in the process of evaluation and selection of the applications.

In case of selection of your application, your personal data may be accessed by the Joint Controller’s partners for the purpose of evaluating applications, conducting travel and accommodation bookkeeping, registration and logistics related matters, according to the provisions of the GDPR.

6. International Data Transfers

As the processing of your personal data involves organizations based in the European Union and the United States, your personal data may be transferred to the United States. Such transfers are bases on appropriate safeguards in accordance with Chapter V of the GDPR.

7. Data Retention

Your personal data will be retained solely for as long as necessary to fulfill the purpose for which it was collected, i.e. the process of the evaluation of your application, and in any case no longer than twelve (12) months following the conclusion of the process of the selection of the GIJC25 Fellowships, unless otherwise required by law. The collected personal data will not be used for any other purposes than those specified herein.

8. Your rights according to GDPR

As data subject, you shall be entitled to the rights available to you pursuant to the GDPR, including as follows:

a) to access your personal data and to obtain the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored or the criteria used to determine that period; the existence of the right to have the personal data corrected, erased or to restrict the processing of personal data and the right to object to the processing of the personal data (Article 15 of GDPR);

b) to obtain a copy of the personal data being processed. the first copy is free of charge and for any further copies requested by the you, the controller(s) may charge a reasonable fee based on administrative costs (Article 15 par.3 of GDPR);

c) to have inaccurate or incomplete personal data corrected (Article 16 of GDPR);

d) to have your data deleted if a Data Joint Controller no longer has a legal basis to process the data or the data are no longer required to comply with the objectives of processing (Article 17 of GDPR);

e) to have the processing restricted in case you question the accuracy of the personal data – for a period allowing the Joint Controller to verify the accuracy of the data; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; the Joint Controller no longer needs the personal data but they are required by you for establishment, exercise or defense of legal claims; you have objected to processing pending verification as to whether the legitimate grounds of the Joint Controller override those of yours (Article 18 of GDPR);

f) to data portability. As Data Subject, you shall have the right to receive the personal data concerning you, which he you have provided to a Joint Controller, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller if the processing is based on your consent or on a contract concluded with you  and when the processing is carried out by automated means (Article 20 of GDPR);

g) the right to object to processing of their personal data for legitimate objectives of the Controller(s) on grounds relating to their particular situation, including profiling. The Joint Controller(s) will have to demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defense of legal claims. If, following such review, the interests of the Data Subject override the interests of the Controller(s), the Controller(s) shall be obliged to discontinue the processing of the data in connection with objectives (Article 21 of GDPR);

h) the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data does not comply with of GDPR (Article 77 of GDPR),

i) the right to withdraw my consent at any time (Article 7 of GDPR).

To exercise any of the above rights, you may contact either of the Joint Controllers using the contact details provided under (1).