1. General Remark

This Privacy Policy explains how the H2VE Project (hereinafter “we,” “us,” and “our“) collects, uses, stores and protects your personal data when you visit our website  (“Website“), or otherwise interact with us online. It also sets out your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and any other related regulation, and how to exercise those rights.

2. Who We Are

This website is managed by the Cluster of Bioeconomy and Environment of Western Macedonia (CluBE).

Address: ZEP Area, ZIP Code: 50100, Kozani (Greece)

Website: https://h2ve.eu

You can contact us at info@clube.gr  regarding any questions or requests related to your personal data.

3. What Personal Data We Collect and Why

We may collect and process the following categories of personal data:

• Identification and contact data

We collect your name, email address, and any other information you choose to provide when you:

• Subscribe to our newsletter.
• Submit a contact form on our website.
• Otherwise contact us directly.

This data is used solely to respond to your enquiry or to send you the newsletter you have subscribed to.

• Data collected through cookies

We collect technical data such as IP addresses, device identifiers, session information, and browsing behaviour through cookies and similar tracking technologies. This includes data collected by Google Analytics (website usage analytics) and our cookie consent management plugin. For full details, please refer to our Cookie Policy

• Embedded Content from third-party providers

Some pages on our website include embedded content from third-party providers (e.g., YouTube, X/Twitter). When you interact with such content, those providers may collect personal data about you, including technical identifiers, usage data, and interaction details, and may place cookies or similar technologies on your device. These providers operate independently; please refer to their respective privacy policies for details.

• Newsletters/ Forms

When you subscribe to our newsletter or contact us through a form, your name and email address are processed via Mailchimp (Intuit Inc.), in accordance with their privacy policy. This data is used only for the purpose for which it was submitted.

• Analytics Data

We use Google Analytics to collect anonymised or pseudonymised data on website usage, including IP addresses (anonymised where technically possible), device information, browser type, and website interaction statistics. This data helps us understand how visitors use our website so we can improve it.

• Administrative data

We retain login credentials for website administrators and technical logs. If you request a password reset, your IP address may be included in the reset email for security purposes.

4. Lawful Bases for Processing Personal Data under the GDPR Regulation

We only process personal data, where lawful basis under Article 6 of the GDPR Regulation applies:

• Consent under Article 6 (1) (a) of the GDPR – for newsletter sign-up, cookie tracking, for using non-essential cookies (analytics, preferences etc), for responding to contact form submissions. You may withdraw consent at any time.
• Legitimate interests under Article 6(1)(f)) of the GDPR – to improve website administration and functionality and spam detection.
• Legal obligation under (Article 6(1)(c)) of the GDPR –  to ensure compliance with regulatory requirements.

 We will not sell, rent or lease any personal data collected in the abovementioned framework.

5. Who We Share Your Data With

We may share data with trusted third-party service providers who act as processors such as:

• • Google Analytics – website usage analytics
  • Mailchimp – newsletter subscription management
  • Hostinger – website hosting.

If you request a password reset, your IP address may be included in the reset email.

All third-party processors are GDPR-compliant and provide data safeguards.

We may also disclose data to competent public authorities where required by law.

6. How Long We Retain Your Data

We retain personal data only as long as necessary for the purposes collected, unless longer retention is required by law.

Specifically:

• Newsletter data: retained until you unsubscribe or withdraw consent.
• Contact form data: only for as long as necessary to respond to your inquiry and complete any relevant follow-up, after which they are securely deleted.
• Admin accounts/logs data: retained while account is active, or up to six (6) months after deactivation
• Data from cookies: retained in accordance with our Cookie Policy.

7. Your Rights Under the GDPR Regulation

Under the EU data protection legal framework, you may exercise the following rights at any time:

• Right to be informed about the purposes of processing your data and the identity of the data controller.
• Right to access your personal data and obtain a copy of them. You can make this request by email to info@clube.gr
• Right to erasure or rectification, to correct inaccurate, incomplete or outdated data .
• Right to limit how your data is processed.
• Right to object and withdraw consent at any time.
• Lodge a complaint with your national Data Protection Authority (DPA). More information on the Data Protection Authorities can be found in the following link.

To exercise any of these rights, contact info@clube.gr.

8. International Data Transfers

Our third-party services (e.g., Mailchimp, Google) may store or process your data outside the European Economic Area (EEA).  We ensure that such transfers follow Standard Contractual Clauses (SCCs) or similar safeguards to protect your data.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. The Website is hosted on Hostinger (EU servers) with secure, regularly updated software.

10. Children’s Data

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have inadvertently collected such personal data, we will take steps to delete such information without undue delay. Where consent is the lawful basis for processing, we require that it be given or authorised by the holder of parental responsibility over the child, in accordance with Article 8 of the GDPR Regulation and applicable national law.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page and encourage you to review it periodically.

12. Contact Details

If you have questions or wish to exercise your rights, contact:

CluBE – Cluster of Bioeconomy and Environment of Western Macedonia

Email: info@clube.gr