Privacy Statement for the Green Innovation Compass

This Privacy Statement informs you about the processing of personal data through the website greeninnovationcompass.eu (the "Website") of Havenbedrijf Rotterdam N.V. ("Port of Rotterdam Authority"). Through this Website, visitors can access the Green Innovation Compass knowledge base, which is was funded, developed and made available under the MAGPIE project - which has received funding from the European Union’s Horizon 2020 (MFF 2014-2020) research and innovation programme under Grant Agreement 101036594 - to facilitate knowledge sharing among ports and other interested stakeholders.

Port of Rotterdam Authority is the data controller within the meaning of the General Data Protection Regulation ("GDPR").

This Privacy Statement applies exclusively to the processing of personal data in connection with the use of the Website greeninnovationcompass.eu and the Green Innovation Compass knowledge base.

We may process personal data for purposes unrelated to the Website. Such processing activities are not covered by this Privacy Statement and may be subject to separate privacy statements or notices. For more information about how Port of Rotterdam Authority processes personal data in the context of its other activities, please refer to the general privacy statement available through the Port of Rotterdam website.

Contact Details Havenbedrijf Rotterdam N.V. Wilhelminakade 909 3072 AP Rotterdam The Netherlands

Data Protection Officer E-mail: FG@portofrotterdam.com If you have any questions regarding this Privacy Statement or would like to exercise your privacy rights, please contact: E-mail: privacy@portofrotterdam.com

Your privacy is important to us. We handle the personal data you provide to us with care and in accordance with applicable privacy and data protection legislation. This Privacy Statement explains which personal data we process when you use the Website, for what purposes we use this data, and what rights you have regarding your personal data.

Port of Rotterdam Authority itself does not collect personal data through forms, user accounts or registration functionality on this website.

The only processing of personal data on this website occurs when embedded content from YouTube is displayed and you consent to the placement of YouTube cookies.

Depending on your interaction with the embedded YouTube content, the following information may be processed by YouTube: • IP address; • Browser and device information; • Information regarding your visit to the website; • Cookie identifiers; • Usage information relating to the embedded video. This data is collected and processed by YouTube and its affiliates in accordance with their own privacy policies.

The processing takes place solely for the purpose of: • displaying embedded video content; • enabling the functionality of YouTube videos on the website; • improving the performance and user experience of YouTube services.

The legal basis for the processing of personal data through YouTube cookies is your consent. YouTube cookies will only be placed after you have provided consent through the cookie banner or consent management tool on the website, where required by applicable law. You may withdraw your consent at any time by changing your cookie preferences.

We do not actively share personal data collected through the website with third parties.

However, by interacting with embedded YouTube content after providing consent, information may be transmitted directly to YouTube LLC, Google Ireland Limited, and/or other companies within the Google group in accordance with YouTube's own privacy practices.

We do not control over the processing activities carried out by YouTube once data is transmitted to YouTube's systems.

For the technical management and maintenance of the Website, we use the services of: • Norday B.V.

To the extent that Norday processes personal data on behalf of Port of Rotterdam Authority, such processing is governed by a data processing agreement containing appropriate provisions regarding the security and confidentiality of personal data.

We do not retain personal data resulting from YouTube cookies. Retention periods applicable to data collected through YouTube cookies are determined by YouTube and governed by YouTube's own privacy documentation.

Unless otherwise stated, we do not transfer personal data to countries outside the EEA. If transfer is nevertheless necessary, we apply the safeguards required by the GDPR, such as standard contractual clauses or an adequacy decision by the European Commission.

We have implemented appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unlawful disclosure, and other forms of unlawful processing.

Under the GDPR, you have, among other things, the right to: • Access your personal data; • Correct inaccurate personal data; • Request deletion of your personal data; • Restrict the processing of your personal data; • Receive your personal data in a portable format; • Object to processing based on legitimate interests; • Withdraw your consent where processing is based on consent. You may submit a request by contacting privacy@portofrotterdam.com.

Port of Rotterdam Authority may amend this privacy statement from time to time, for example in connection with changes in legislation and regulations or adjustments to our working methods. The most recent version will always be published on greeninnovationcompass.eu.