Supplement to Data Privacy Notice for COVID-19 Testing
This Notice supplements NYU’s Data Privacy Notices for Students, Employees and Vendors in the E.U. (the “Notices”) by describing the practices of NYU Florence, NYU in London, and NYU Prague (each, a “Site”) with respect to COVID-19 testing. All terms used but not defined herein will have the meanings set forth in the Notices. You can contact the below listed Data Protection Officer (“DPO”) or your local data protection contact as set forth in the Notices with any questions about this notice, our data collection practices, or your rights.
The Information We Process About You
Your Site has engaged a laboratory testing service to collect and diagnose samples from you for the purposes of COVID-19 testing. In order to facilitate testing, your Site may provide limited personal information about you to the designated testing service for your NYU academic center, including your contact information and date of birth. Your Site will also require you to share the results of the testing with either its staff or its occupational doctor in order for you to access campus facilities. This personal information is referred to below as the “Covered Information.” The laboratory testing service will provide you with its own data processing notice with respect to the data that it collects about you and how it will be used.
Purposes and Legal Basis for Processing Your Data
We process the Covered Information for the purpose of determining whether it is appropriate for you to report to work (if you are an employee), for you to attend classes (if you are a student), or for you to perform services on campus (if you are a vendor), or whether you may be sick with COVID-19 and should stay home to maintain a safe and healthy environment for others. The information may also be used to monitor and respond to the presence of the disease on campus and to comply with legal reporting obligations.
Our legal basis for processing the Covered Information is that we have a legitimate interest in maintaining a safe and healthy campus and in complying with laws and regulations that govern our conduct. We may process special categories of data (i.e., health information) because such processing is necessary to protect the health and safety of our employees in the workplace and to comply with laws and regulations issued in response to the COVID-19 pandemic.
Recipients of Your Personal Information
The Covered Information will be received and processed only by employees of your Site or an Occupational Doctor who need access to carry out their job responsibilities. The Covered Information is also processed by the testing service who is required by contract to maintain your personal information confidentially and to comply with applicable data protection laws.
Your Rights
Your rights under GDPR with the respect to the Covered Information are set out in the Notices. Any questions about these rights may be directed to the DPO at:
Tani Raiford
c/o Data Protection Officer’s Office
10 Astor Place, room 502E
New York, NY 10003
+1 212 998 1180
privacy@nyu.edu
Czech Republic (NYU Prague)
Jiri Pehe, Site Director
NYU Prague
Male Namesti #2
Prague, CZ 1100 00
E-mail
+420 2 2422 6874
France (NYU Paris)
Valerie Michelin, Associate Director
NYU Paris
57 Boulevard St. Germain
Paris, FR 75005
E-mail
+33 1 5373 21812
Greece (NYU Athens)
Maria Lampraki
Operations Administrator
Email
34 Tsakalof Str., Kolonaki 106 73, Athens
Phone: +302161001050
Germany (NYU Berlin)
Gabriella Ekmektsoglou, Site Director
NYU Berlin
Schnhauser Allee 3
Berlin DE 10435
E-mail
+49 30 290291006
Italy (NYU Florence)
Lorenzo Ricci, Site Director
NYU Florence
Villa La Pietra
120 Via Bolognese
Florence IT 50139
E-mail
+39 055 5007 205
Barbara Bonciani
NYU Florence
120 Via Bolognese
Florence IT 50139
E-mail
+39 055 5007 201
Czech Republic
The Office for Personal Data Protection
Urad pro ochranu osobnich udaju Pplk. Sochora 27 170 00 Prague 7
Tel. +420 234 665 111
Fax +420 234 665 444
E-mail
Website
Germany
Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Husarenstraße 30 53117 Bonn
Tel. +49 228 997799 0; +49 228 81995 0
Fax +49 228 997799 550; +49 228 81995 550
E-mail
Website
Jurisdiction for complaints is split among different data protection supervisory authorities in Germany. Competent authorities can be identified according to this list.
Spain
Agencia de Protección de Datos
C/Jorge Juan, 6 28001 Madrid
Tel. +34 91399 6200
Fax +34 91455 5699
E-mail
Website
France
Commission Nationale de l'Informatique et des Libertés - CNIL
8 rue Vivienne, CS 30223 F-75002 Paris, Cedex 02
Tel. +33 1 53 73 22 22
Fax +33 1 53 73 22 00
Website
Italy
Garante per la protezione dei dati personali
Piazza di Monte Citorio, 121 00186 Roma
Tel. +39 06 69677 1
Fax +39 06 69677 785
E-mail
Website
United Kingdom
The Information Commissioner’s Office
Water Lane, Wycliffe House Wilmslow - Cheshire SK9 5AF
Tel. +44 1625 545 745
E-mail
Website
This list is provided for your reference, but you may file a complaint with the data protection authority in any Member State where you habitually work, live, or believe an infringement of EU data protection law occurred. You may consult a list of data protection authorities.