#  Executive Abstract

The goal of the Data Management Plan (DMP) is to detail the data to be used
and generated by the project. This is a precise requirement since ESPRESSO is
a Pilot on H2020 Open Research Data initiative. Therefore, the ESPRESSO
project will make publicly available the data generated and that will include
data regarding the community of stakeholders, market analysis, best practice
assessment and other activities to be carried on during the CSA. In addition,
corresponding metadata generated within the project will be made available
through open data portals (including the European Open Data Portal). This will
ensure the widest public accessibility as well as long-term preservation.
Indeed, ESPRESSO will ensure that all the data generated is properly collected
accessed, curated, preserved, and eventually made public after any possible
data-ownership issue has been cleared.

For this reason, a specific Data Management Plan is planned. This actual
document is the last of the reports that are due on M06, M14, and M24.

#  Regulation (EU) 2016/679 of the European Parliament and of the Council of
27 April 2016

The ESPRESSO project has worked in accordance with the Regulation (EU)
2016/679 of the European Parliament and of the Council of 27 April 2016, whose
main aims are to:

  * lay down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data, 

  

  * protect fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data, 

  

  * neither restrict nor prohibit the free movement of personal data within the Union, for the management of the data collected. 

  

In particular, the project team has focused on the principles of:

  * “lawfulness, fairness and transparency”, thus processing data lawfully, fairly and in a transparent manner in relation to the data subject; 

  

  * “purpose limitation”, thus ensuring that the data has been collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; 

  

  * “data minimization”, thus ensuring that the collected data has been treated in an adequate and relevant manner and limited to what is necessary in relation to the purposes for which they are processed; 

  

  * “storage limitation”, thus keeping them in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; the only possibility for which the personal data may be stored for longer periods is only for statistical purposes in accordance with Article 89(1) in order to safeguard the rights and freedoms of the data subject; 

  

  * “integrity and confidentiality”, thus processing data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. 

  

#  Data managed through the ESPRESSO website

This section describes the data that are being managed directly by the
ESPRESSO project. The section is subdivided into different groups to cover all
the different types of information collected.

##  Personal Data/registry of SmaCStak participants

The ESPRESSO system collects and stores information about the personal data of
the SmaCStak participants that give their consent to record their personal
data in the project ESPRESSO database. This is done through a form available
from the website at the following address:
_https://espressoprojekt.typeform.com/to/fo1DK0_ and that collects the
following information:

  * Name 

  

  * Surname 

  

  * Email address 

  

  * Company name 

  

  * Company website 

  

  * Country 

  

  * City 

  

  * Nature of the company. Be it: 

    * Public o Private o Industry o Research Institution o University o NGO o SDO o NSB o ESO 

  

    * City/Municipality 

  

    * Regional Planning Association o Other 

  

  

**Figure 1. SmaCStak registration page. Available _here_ .  **

Below, screenshots of the questions for being registered as SmaCStak
participant are presented.

Those registering to the SmaCStak by filling in the form above will have their
personal data stored herewith:  _https://www.typeform.com_ .  To this
database, only Mr. Mario Conci of Trentino Innovation and Mr. Jan-Philipp
Exner of the University of Kaiserslautern have access and can extract regular
copies locally stored for analysis. Names and email addresses are also stored
on Mailchimp.org, used for sending the project ESPRESSO newsletter.

##  Personal Data/registry of participants to the ESPRESSO Atlas of smart
cities and standards

The ESPRESSO system also collects and stores information about the personal
data of the participants to the ESPRESSO Atlas of smart cities and standards
that give their consent to record their personal data in the project ESPRESSO
database. The Atlas is accessible through the website:  _http://www.espresso-
project.eu/_ .

The platform is composed by a multitier architecture, which the presentation
layer, the business logic layer, the service layer, and the data access layer.

The **Presentation Layer** represents the web application through which the
content is available to the end users. It is developed in AngularJS, an open
source framework with Model-View-ViewModel (MVVM) architecture. The UI
component is developed using Angular Material with responsive patterns, in
order to extend the compatibility and ensure the same user experience through
different devices, included the mobile devices. The GIS features and 3D
visualization are developed over the framework NASA Web World Wind, an open
source virtual globe with advanced features for managing and viewing
geometries and display of map layers.

The **Business Logic Layer** is developed in NodeJs, and handles the
manipulation of the Smart Cities data and the related ancillary information
(i.e. geographic information, documents, attributes, sections, etc.). At this
level the permissions and the filters are managed, ensuring data integrity and
proper handling of sensitive and confidential data. Regarding the data
visibility, it handles different types of users with different permissions
associated in order to limit both the visibility of some information and the
operations that can be executed (Note that the data source of the users has
not be defined yet).

The **Service Layer** deals with data exchange with other layers through a
RESTful architecture. In addition, it provides public APIs for a limited data
exposure and for the data insert/update in order to make possible integration
with third-party software. This also ensures a greater facility for importing
data and therefore a benefit for the data population in order to enrich the
platform

Finally, **the Data Access Layer** provides access to the database, for which
it was used PostgresSQL with PostGIS, a relational database with an extension
to provide support for the geo-data.

The Smart Cities data is organized over a dynamic template.

Each Smart City contains a set of basic attributes (i.e. identifier,
coordinates, name, website, etc.) and a set of categories. Then, each category
can contain a set of subcategories or a set of attributes. The template can be
represented as follow:

• Smart City o Basic attributes

  * … 

  

  * Basic attributes o Category A o … 

  

  * Category Z o Sub-Category A o … o Sub-Category Z o Attribute A o … 

  

  * Attribute Z 

  

The architecture allows to customize the smart city template by inserting and
editing of categories and attributes. It means that new categories and new
attributes can be created and added (as well as they can be removed) to
existing smart cities without changing the database structure.

Service Layer

Business Logic Layer

Presentation Layer

Data Access Layer

**Figure 2. Platform diagram.**

##  Personal Data taken within the Conceptual Standards Framework survey

The ESPRESSO system also collected personal data within the survey launched
for identifying the open standards currently being used and most beneficial,
and what gaps and weaknesses there are that could be addressed by the ESPRESSO
project.

The short survey was mainly addressed to the members of the SmaCStak
community. The closing date for taking part was Tuesday 28th June 2016\.

The personal/demographic data collected included:

  * name and surname 

  

  * type of institution/organisation 

  

  * geographical scope of the institution/organisation 

  

  * role/position 

  

  * department/unit 

  

  * location of the institution/organisation 

  

As a disclaimer, at the beginning of the survey it was included the following
privacy statement:

_"All responses recorded, including any personal information you provide, will
be kept strictly confidential. Your input will only be used in combination
with the responses of others participating in the survey. Our research
examines the opinions of groups of respondents. Your individual responses will
not be shown to anyone outside the study team"._

As stated in the above mentioned statement, any personal data has been
included in any ESPRESSO project deliverables. Furthermore, all personal data
collected within this survey will be deleted once the ESPRESSO project comes
to an end.

##  Personal Data taken within the Smart City Standartization survey

The ESPRESSO system also collected personal data within the survey launched
for defining the ESPRESSO’s project CASSIOPEiA (Definition of a ConceptuAl
StandardS InterOPErability frAmework) and to define testbeds.

The link to access the survey is the following one:
_https://sabina24.typeform.com/to/JDjCyI_ .

The ESPRESSO project is conducting a detailed requirements-engineering
campaign in order to establish the baseline for interoperability between the
various Smart City sectors. Indeed, a first step towards the definition of a
Smart City interoperability scope is the identification and selection of Use
Cases of relevance, to be used further real-life test-beds within ESPRESSO.
Those filling in the survey had and will have (since the survey is still
opened) a part in this effort, by sharing needs and requirements for
standardization in Smart City solutions, projects, initiatives, or even by
providing the Consortium with a “best practice” case.

The survey collects the following personal information:

  * Name 

  

  * Company name 

  

  * E-mail address (optional) 

  

Below, screenshots of the questions are presented.

**9\. Conclusion**

Understanding the needs of the stakeholders – as primary input into the
various activities of the project - has been achieved using surveys, polls,
events and webinars.

ESPRESSO will ensure that all the data generated is properly collected
accessed, curated, preserved, and eventually made public after any possible
data-ownership issue has been cleared.