# Terms and conditions

The terms and conditions have changed since your last visit. Please read the new terms and conditions carefully before proceding.

The OiRA tool is an instrument put at your disposal by the European Agency for Safety and Health at Work (EU-OSHA). This Privacy Policy applies to all products, services and websites offered by EU-OSHA in the framework of the OiRA (Online interactive Risk Assessment) tool.

Your personal data is processed in line with Regulation (EC) N° 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data. Further details of the privacy policy of EU-OSHA and the full text of the Regulation can be accessed at: http://osha.europa.eu/en/privacy-policy.

## The Information we collect and for what purposes

The kind of information we collect: when you sign up for an OiRA account and you put in data into the Online interactive Risk Assessment tool we are asking you for the following information:

- Email account: this is necessary to access the online tool, edit the input data, and delete the OiRA account. You can enter any valid e-mail address. Email addresses will not be used for commercial purposes.
- Any information you provide in the free text fields of the tool and in the action plan - (e.g. when you input a measure to tackle a risk, the person responsible for that measure, etc). The input of information in the free text fields is voluntary.
- Cookies – When you visit the site and select a language, we send a cookie to your computer or other device to store your language selection. This cookie stays in your browser until you close it. When you visit the site and log in, we send a cookie with your login information to keep you logged in during your visit. This cookie stays on your computer until you close your browser. Most browsers are initially set up to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features and services may not function properly if your cookies are disabled.
- Log information – When you access the service, our servers automatically record information that your browser sends whenever you visit a website. These server logs may include information such as your web request, your interaction with a service, browser type, browser language, the date and time of your request. IP addresses are not stored in the system.

In addition to the above mentioned purposes, we may use the information we collect to:

- Provide, maintain, protect, and improve our services and develop new services.
- Build statistics, by using exclusively aggregated and anonymous data on the risks of a sector. These statistics will be passed on exclusively to the developers of the tool.

In any case no personal data will be used for processing of data.

## Data controller

The data controller is Andrew Smith, European Agency for Safety and Health at Work, Bilbao.

## Conservation and processing of information

We keep your data which is inaccessible for external users until you delete your account and your session(s).

EU-OSHA stores data on our servers in Halle, Germany.

## Reviewing and removing your information

You can use the Account settings and your saved OiRA Session(s) to review, control and delete the information stored in your Account and in your Session(s).

## Information security

We restrict access to personal information to authorised user. We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption of communication and physical security measures to guard against unauthorized access to systems where we store personal data. Data are not accessible to anybody by any means. IP addresses are not saved so that end-users can not be identified through their access.

## Contact information

EU-OSHA regularly reviews its compliance with this Privacy Policy. Any inquiries and complaints regarding our privacy policy can be sent to the DPO of EU-OSHA at DPO@osha.europa.eu or to the EDPS at edps@edps.europa.eu.

1. Voorbereiden
2. Inventariseren
3. Evalueren
4. Plan van aanpak
5. Rapporten