1. Guestroam Access: request & account
Belnet facilitates the management of guest accounts for the institutions that have already joined the govroam / eduroam services. Those institutions will enrol guest users as temporary eduroam/govroam users via a web interface provided by Belnet.
Three different actors are distinguished here, each with their own specific role:
- The visitor who fills in a guestroam request to receive a temporary guestroam account.
- Belnet who has the role of guestroam identity provider to give the visitor the option to request a temporary guest account and to receive this account from an organisation that is a member of the govroam/eduroam service that he or she wishes to visit.
- The organisation to be visited is responsible itself for validating the guestroam account so that the visitor can use the roaming free of charge (hereinafter referred to as Visiting resource roaming provider).
The mutual rights and obligations between Belnet and the Visiting resource roaming provider have been laid down in an agreement for access to Belnet’s eduroam/govroam service.
This policy lays down the mutual rights and obligations between the visitor and Belnet.
2. Processing of Personal Data of the Guestroam Visitor
Controller: Belnet
As the provider of the service, Belnet will fulfil the role of controller of the personal data pertaining to the client's registered users as designated below.
Belnet is a State service with separate management, established within the Federal Science Policy. Its registered offices are located at Boulevard Simon Bolivar 30, 1000 Brussels, Belgium, tel. +32 (0)2 790 33 33, fax +32 (0)2 790 33 34.
Data Protection Officer
The Data Protection Officer at Belnet will be the point of contact for all matters relating to the processing of personal data in general and for this policy for the processing of personal data pertaining to the client's registered users in particular. The Data Protection Officer can be contacted via dpo@belnet.be.
Purposes of Processing and the Legal Basis for Processing
(i) Purposes of ProcessingThe above personal data are only collected and processed for the purpose of providing the guest account for eduroam/govroam requested by the user.
(ii) Legal Basis for ProcessingWhen filling in the guestroam request we ask the visitor to fill in a number of personal data. These personal data are necessary to provide the guestroam service.
Categories of personal data
• name
• email address
• personal username and a code (password)
• mobile telephone number
• logs
Recipients of personal data
Belnet limits access to personal data to employees, subprocessors and recipients of personal data to the minimum required. Belnet only provides access to employees for whom access to the personal data is required.
Access to personal data stated in the guestroam request is restricted to authorized Belnet staff for this purpose.
The disclosure of personal data is limited to the persons of the visiting organisation registered and authorised for this purpose at Belnet and authorised persons from the visited institution.
Period of saving
The personal data are kept for 1 month from the expiry of the end date of the temporary guestroam account.
Rights of the data subject and exercising the rights
(i) Rights of the Data SubjectThe data subject has the right to send a request to Belnet to view, change or erase personal data or to restrict its processing. The data subject also has the right to object to processing and the right to transfer the data.
(ii) Exercising Data Subjects’ RightsData subjects can exercise the above rights by mail sent to dpo@belnet.be.
In accordance with the stipulations in the regulation, Belnet will act upon this request no later than within a month of receipt of the request. The period can be extended by two months if required depending on the complexity of the request and the number of requests.
Withdrawal of permission
When the data subject has given permission for the processing of his/her personal data for one or more processing purposes, the data subject can withdraw his/her permission at any time. Withdrawal does not prejudice the legality of processing based on the permission before its withdrawal.
Submission of a complaint by the data subject
To submit a complaint, the data subject can send a request to the Data Protection Authority at the follow address:
Gegevensbeschermingsautoriteit
Drukpersstraat 35
1000 Brussels
E-mail: contact@apd-gba.be
No automated individual decision-making
No automated individual decision-making takes place with the processing of these personal data by Belnet.
Technical and organisational measures
Belnet binds itself to take appropriate technical and organisational measures with the collection and processing of personal data, and this in accordance with the principles of the General Data Protection Regulation to guarantee a security level commensurate with the risk.
With the assessment of the appropriate security level for processing personal data, account is taken of the processing risks such as the consequence of the destruction, the loss, the changing of or unlawful access to sent and saved processed personal data, that either accidentally or wrongfully can take place.
3. Acceptable Use Policy
Responsibility for the identification data
The user who submits a guestroam request and receives a guestroam account is responsible for the use of his/her guestroam identification data.
Permitted use
The user who receives a guestroam account must comply with the regulations for acceptable use of the Visiting resource roaming provider.
Misuse
The user who receives a guestroam account should, if he/she suspects that his/her eduroam/govroam identification data have been misused, inform Belnet and the Visiting resource roaming provider of this (risk of) misuse immediately.
Logs that are kept
Belnet also collects information in log files. The logs that are kept only contain traffic data. This information is used by Belnet for internal purposes and traffic analysis. The logs are kept for 1 month.
4. Disputes
Belgian law applies to disputes relating to (non)compliance with this guestroam access policy. The courts of Brussels have jurisdiction.
5. Changes to the Guestroam Policy
Belnet retains the right to change this policy. The amended policy will be published on this site and will take effect thirty days after the initial notification.