Preamble
Région Normandie undertakes to ensure that the processing of personal data carried out on platform.eciv.eu complies with the General Data Protection Regulation (GDPR) and with the French Data Protection Act of 6 January 1978 as amended.
This data protection policy applies to the processing of data carried out via the website platform.eciv.eu.
It informs you about the purposes of the processing carried out, the legal basis for the processing, the recipients of the data as well as their retention period, the security measures, the possible existence of data transfers outside the European Union or automated decision-making, the use and management of cookies.
For information on your rights and how to exercise them, please consult the Rights management page.
Who is responsible for the processing of data carried out by this website?
The person responsible for the processing of data carried out by the website platform.eciv.eu is the organisation Région Normandie located at Région Normandie, Abbaye-aux-Dames, Place Reine Mathilde,14000 Caen, France.
For more information, see the Legal notice.
Does this site collect personal data ?
According to Article 4.1 of the GDPR, personal data is any information that can identify you either directly or indirectly. This site collects personal data via its various forms [contact form, application form, evaluation form] - examples: contact form, application form, demonstration request form, grant request form, etc.].
Personal data are freely communicated to Région Normandie by the persons concerned by consenting to the processing and by taking note of the information displayed under the various forms. The data collected is adequate, useful, necessary and limited to the strict minimum.
This includes data :
1. Organizational Data (Non-personal)
These are typically considered non-personal data, but may still be subject to GDPR if linked to identifiable individuals or used in profiling.
Field | GDPR Qualification |
Project name / acronym | Not personal data |
Lead partner organisation name | Not personal data |
Website | Not personal data |
VAT number | Not personal data (unless sole proprietorship) |
PIC number | Not personal data |
Street, number, city, ZIP, country | Not personal data (unless linked to a person) |
County/State/Region | Not personal data |
2. Personal Data
These fields contain identifiable personal information and are subject to GDPR.
Field | GDPR Qualification |
Contact person (name) | Personal data |
Email address | Personal data |
Phone number | Personal data |
These are considered standard personal data, not sensitive under GDPR, but still require:
lawful basis for processing (e.g., consent, contract, legitimate interest),
transparency (privacy notice),
data minimization and security.
3. Project Content (Narrative Fields)
These fields may contain indirect personal data (e.g., names, roles, achievements) if individuals are mentioned.
Field | GDPR Qualification |
Project summary, relevance, novelty, work plan, team, risk analysis, impact sections | May contain personal data if individuals are named or described
|
What are the purposes of data collection?
The processing of personal data collected from the platform in the context of the various forms has the following purposes:
Why do we process your Personal Data? | What data do we collect? |
Project Evaluation: To assess the eligibility, relevance, and quality of your project proposal. | Direct Personal Data · Full name of the contact person · Email address · Phone number |
Communication: To contact you regarding your submission, request clarifications, or provide updates. | Indirect Personal Data (if individuals are mentioned) · Team members’ names, roles, and experience · Employment data (e.g., number of full-time employees) · Financial data (e.g., total sales) |
Contractual Obligations: If selected, your data may be used to prepare funding agreements or partnership contracts. | Organizational Data (not personal unless linked to individuals) · Organisation name, address, VAT number, PIC number · Website · Project name and acronym · Project content (summary, relevance, novelty, etc.) |
Transparency and Dissemination: Some project details (e.g., summaries) may be published for public awareness. | |
Legal Compliance: To meet obligations under EU funding regulations and audit requirements |
What is the legal basis for the processing carried out by this site?
The processing of your personal data by Région Normandie is based on :
Either on your consent in all cases where you yourself entrust your personal data to Région Normandie.
The performance of a contract to which you are a party or the execution of pre-contractual measures taken at your request.
Or to comply with a legal obligation, in particular with regard to the exercise of your rights under the RGPD and the Data Protection Act.
Or on the basis of legitimate interests pursued by Région Normandie.
Who are the recipients of the data processed by this site?
Your personal data is primarily intended for Région Normandie, Regional Public Authority. It is processed by the staff of the 8 ECIV funding organisations concerned by your requests :
- Government of Navarra (Spain)
- Northern Netherlands Region Alliance (Netherlands)
- Region of Dalarna (Sweden)
- Region of Värmland (Sweden)
- Region of Gävleborg (Sweden)
- Innovation Agency of Lithuania (Lithuania)
- Scottish Enterprise (United Kingdom)
- Région Normandie (France).
They are processed solely for the purposes indicated above. Your personal data is hosted exclusively in France by a subcontractor of our Service Provider (within the meaning of Article 4.8 of the RGPD) in a strictly controlled manner. They are never communicated to third parties for commercial purposes.
Is personal data transferred outside the European Union?
Personal data collected by this site is transferred to Scottish Entreprise, actor located outside the European Union. In case of contractual transfer of personal data, Région Normandie ensures that the recipients are based in the European Union and Scotland.
How is personal data processed by this site secured?
Région Normandie is committed to protecting the personal data processed on this site in accordance with the state of the art.
The indications below are the main security measures to protect your personal data:
all the pages of the site are under the hhtps protocol;
logging of connections;
user blocking when a hacking attempt is detected;
erasure of Personal Data is carried out at the request of the person concerned or at the end of the retention period;
the data is stored on data servers respecting the maximum technical security;
How long will personal data processed by this site be kept?
European Commission can carry out its own audit which may be launched at any time and up to 5 years after the end of ECIV project. Therefore, all ECIV supporting documentation has to be kept up to 5 years after payment of the balance (until 31/12/2034).
Does this site use cookies?
When you visit this site, two (2) session cookies are placed on your computer, tablet or mobile phone.
These allow the site to function properly and greatly improve your user experience.
The session identifier has a major advantage: if you open several windows of the same web page, they are attributed to a single session.
This makes it possible to launch several requests at the same time without losing important personal information.
Session cookies are therefore used to store information about the current session.
Other information, such as login details or previously completed online forms, is also stored during the session.
However, if you end your browsing session, the session ID and all other stored data will be deleted. This means that when you open the same web page in a new browser window, you will be considered a new visitor.
For more information on cookies, you can consult our Cookie policy or visit the CNIL website.
Can I object to these cookies?
Yes, and in several ways. If you do not want this site to place cookies on your computer, you can block them:
by using a browser which, by default, refuses cookies;
by configuring your browser appropriately or by installing an additional component on your browser specifically designed to manage cookies.
This website respects your choice.