Privacy Policy

This Privacy Policy outlines the regulations and principles observed by the EUROCYBER NEXUS project concerning the processing of personal data of users of the EUROCYBER NEXUS website.

Collection and Processing of Personal Data

Data Controller

The EUROCYBER NEXUS project, proposal number 101304810, is a Horizon Europe Coordination and Support Action (HORIZON-CSA) entitled “European Interconnected Innovation Ecosystems for Cybersecurity Readiness.” The project has an 18-month duration and brings together organisations from Finland, Italy, Romania and Bosnia and Herzegovina.

The project coordinator is FRIULI INNOVAZIONE – Società Consortile a Responsabilità Limitata, Via Jacopo Linussio 51, 33100 Udine, Italy.

For the purposes of this Privacy Policy, the organisation legally responsible for determining the purposes and means of processing personal data should be identified in accordance with the applicable data-processing arrangements of the EUROCYBER NEXUS project.

This Privacy Policy is intended to provide users with information concerning the purposes and modalities of the collection and processing of personal data through the EUROCYBER NEXUS website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).

Purpose of the Processing

Personal data may be processed for the following purposes:

- responding to enquiries and requests submitted through contact forms
- sending newsletters and other communications concerning the EUROCYBER NEXUS project
- informing users about project activities, events, publications, results and other relevant initiatives
- organising and communicating information about conferences, workshops, meetings and other project activities
- managing participation and engagement in project-related activities
- maintaining and improving the website and its functionality
- andcomplying with applicable legal and contractual obligations.

The legal basis for processing will depend on the specific purpose and may include the user's consent, the performance of a task carried out in the public interest, compliance with a legal obligation, or the legitimate interests of the responsible organisation, where applicable.

Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable legislation or contractual obligations.

Where processing is based on consent, users may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

International Transfers

EUROCYBER NEXUS involves organisations from several European countries, including Finland, Italy, Romania and Bosnia and Herzegovina.

Any transfer of personal data outside the European Economic Area will be carried out only where permitted by applicable data-protection legislation and, where required, subject to appropriate safeguards.

Data Processors

Service providers may have access to personal data where this is necessary to provide services supporting the EUROCYBER NEXUS website or project activities. Where such providers process personal data on behalf of the controller, appropriate contractual arrangements and safeguards will be established in accordance with the GDPR.

User Rights

Under the GDPR, users may have the right, subject to applicable conditions and limitations, to:

- obtain confirmation as to whether their personal data are being processed
- request access to their personal data
- request rectification of inaccurate or incomplete data
- request erasure of personal data
- request restriction of processing
- object to certain processing activities
- request data portability where applicable
- withdraw consent where processing is based on consent

Users may exercise their rights by contacting the relevant data controller using the contact details provided on the EUROCYBER NEXUS website.

Information Provided by Users

Where users submit personal information through website forms, they should provide accurate and up-to-date information.

Information that is necessary to respond to a request may be marked as mandatory on the relevant form. Other information may be optional.

Personal data will not be disclosed to third parties unless such disclosure is necessary for the purposes described in this Privacy Policy, required by law, necessary for the implementation of the project, or otherwise authorised by the user where consent is required.

Security Measures

The organisations involved in EUROCYBER NEXUS will apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Personal data will be processed in accordance with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality established by the GDPR.

Cookies

What Are Cookies?

The EUROCYBER NEXUS website may use cookies and similar technologies. Cookies are small files stored on a user's device that can support website functionality, remember preferences and, where applicable, provide information about how the website is used.

How Cookies Are Used

Cookies may be used to:

- ensure the technical operation of the website
- remember user preferences
- support newsletter or subscription functionality
- improve website functionality and user experience
- andobtain statistical information about website use where analytics tools are implemented.

Where consent is legally required, non-essential cookies will only be placed after the user's consent.

Managing Cookies

Users can manage or disable cookies through their browser settings. Disabling certain cookies may affect the functionality of parts of the website.

If the EUROCYBER NEXUS website uses analytics or other third-party cookies, information concerning those services, their purposes and the applicable privacy choices will be provided through the website's cookie settings or cookie notice.

The Website

The website is operated in the context of the EUROCYBER NEXUS project, proposal number 101304810, funded under the Horizon Europe programme. The project is coordinated by FRIULI INNOVAZIONE and involves partners including Haaga-Helia University of Applied Sciences, EIT Manufacturing South SRL, Regional Development Agency of the West Region Romania, International University of Sarajevo and AREA di Mauro Adriano SAS, together with associated organisations.

The purpose of the website is to provide non-contractual information concerning the EUROCYBER NEXUS project, its organisation, activities, outputs and results.

The website may be updated or amended from time to time in order to reflect developments in the project or changes to applicable requirements.

Intellectual Property Rights

Unless otherwise indicated, the content published on the EUROCYBER NEXUS website, including text, graphics, photographs, illustrations, logos, documents and other materials, is protected by applicable intellectual-property laws.

Where specific content is made available under a Creative Commons or other open licence, the applicable licence conditions will apply.

External Links

The EUROCYBER NEXUS website may contain links to external websites operated by third parties.

These websites are independent from EUROCYBER NEXUS. The project and its partners are not responsible for the privacy practices, content, security, cookies or other elements of external websites.

Users are encouraged to consult the privacy policies of external websites before providing them with personal information.

Liability

The information published on the EUROCYBER NEXUS website is provided for general information purposes.

The project and its partners will make reasonable efforts to ensure that information published on the website is accurate and kept up to date. However, no guarantee can be given that all information will always be complete, accurate or current.

The project and its partners shall not be liable, to the extent permitted by applicable law, for any loss or damage arising from the use of, or inability to use, the website or information made available through it.