Scope
This policy describes how we, the JOHN project website, use your personal data when you visit the JOHN project website www.john-project.eu.
Who is responsible for my data?
ICOS ERIC, a JOHN project partner, is the data controller. That means we are responsible for collecting your data and looking after it.
What data is used?
The JOHN project may collect data for event registration purposes. These event registrations will occur through project partners’ websites, and their privacy policy applies for data collection and usage purposes. Within this website itself, if any data is collected, we will process the data provided by you based on your consent per EU GDPR regulation, Art. 6 (1)(a) DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient.
We use Matomo to monitor and analyze the use of our site. It uses cookies to distinguish you from other site visitors. Processing is based on your consent.
Who gets my data?
Personal data will be used for the purpose it was first collected for. We won’t transfer your personal information outside of JOHN project partners (https://john-project.eu/about/project-partners/) unless otherwise mentioned.
If you sign up for the newsletter, we transfer your email address to MailerLite, the service we use to distribute our newsletter. For MailerLite’s privacy policy, please see here www.mailerlite.com/legal/privacy-policy.
Data security
Our websites and services use SSL encryption. All services run through a reverse proxy, which only allows the programmatic access built into the application programming interface of the services.
What rights do I have?
Unconditional rights by law
Access to the personal data. You have the right to a copy of your processed data, so you can check the data itself.
Rectification. You have the right to have incorrect data corrected.
Complaint. You have the right to lodge a complaint with your national supervisory authority. In Finland you can contact the Finnish Data Protection Ombudsman: https://tietosuoja.fi/en/contact-information.
Object to processing. Where processing data is based on our legitimate interests, you have the right to object to the processing. The processing stops until we demonstrate compelling legitimate grounds for the processing. A document assessing our legitimate interests and their relationship with you will be provided to you.
Conditional rights
These rights apply if certain conditions are met.
Erasure. You might have the right to have your data removed from our storage, for example when you withdraw consent for processing. If there are grounds for erasure, we will take reasonable steps to have it erased from third party databases as well.
Restriction of processing. You might have the right to have us restrict the processing of your data, for example when we don’t need the data anymore, but you require it for a legal claim.
Portability. You have the right to have your data transmitted to another controller without hindrance when the processing is based on your consent or a contract between you and us.
Exercising your rights
If you have a question regarding our privacy policy, wish to exercise any of your rights, or feel dissatisfaction with our use of your data, please contact ICOS ERIC Data Protection Officer by sending email to dpo@icos-ri.eu. We will perform our duties without undue delay within one month of your request. That period may be extended by two further months where necessary, considering the complexity and number of the requests.
For further information about your rights and exercising them, please see here https://tietosuoja.fi/en/know-your-rights.
Changes to this policy
We will inform you of any material changes to this policy with a notice on our website.
This policy has been last updated on October 23, 2026.