1. Introduction

This Privacy Policy explains how greenmascot.eu (“the Website”) collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

The Website is developed and maintained within the framework of an Interreg project, funded by the European Union. We are committed to ensuring transparency, accountability, and the lawful processing of personal data.

By using this Website, you agree to the terms of this Privacy Policy.

2. Data Controller

The Data Controller responsible for processing your personal data is:

[Organization Name] Address, Email, Phone

If multiple partners manage the Website, the above organization acts as the primary contact point.

3. What Personal Data We Collect

We may collect the following categories of personal data:

3.1 Data you provide directly

• Name
• Email address
• Subject and message (via contact forms)
• Any information voluntarily submitted through forms or email communication

3.2 Automatically collected data

When you visit the Website, we may collect:

• IP address (anonymized where possible)
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website

This data is collected through cookies, analytics tools, and server logs.

3.3 Data from third‑party services

If you interact with embedded content, these services may collect data:

• YouTube (videos)
• Google Maps (maps)
• Google Fonts (font loading)
• CDN providers
• Social media platforms, if integrated

These third parties act as independent data controllers.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Article 6(1)(a) GDPR – Consent For contact forms, analytics cookies, and third‑party integrations.
• Article 6(1)(e) GDPR – Public interest As the Website is part of an Interreg project aimed at public communication and dissemination.
• Article 6(1)(f) GDPR – Legitimate interest For ensuring website security, preventing misuse, and maintaining functionality.
• Article 6(1)(c) GDPR – Legal obligation When required to comply with EU or national regulations.

5. How We Use Your Data

We use your personal data for the following purposes:

• Responding to inquiries submitted via contact forms
• Managing project communication and dissemination activities
• Improving website performance and user experience
• Ensuring website security and preventing abuse
• Complying with reporting obligations under Interreg programme rules
• Statistical analysis (anonymized where possible)

We do not use your data for commercial advertising.

6. Cookies and Tracking Technologies

The Website uses cookies to:

• Ensure proper functionality
• Enable embedded content (YouTube, Maps)
• Provide anonymized analytics (if enabled)

Non‑essential cookies are only activated after you provide consent. For detailed information, please refer to our Cookie Policy.

7. Data Sharing and Transfers

We may share your data with:

• Interreg project partners (for project‑related communication only)
• IT service providers (hosting, security, analytics)
• EU institutions if required for project reporting
• Third‑party services embedded on the Website (YouTube, Google Maps, etc.)

Some providers may process data outside the EU. In such cases, transfers are protected by:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Other GDPR‑compliant safeguards

We never sell or rent personal data.

8. Data Retention

We retain personal data only for as long as necessary:

• Contact form submissions: up to 12 months
• Analytics data: up to 14 months
• Server logs: up to 12 months
• Project‑related communication: according to Interreg programme rules

After these periods, data is securely deleted or anonymized.

9. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with your national Data Protection Authority

To exercise your rights, contact us at: [insert email]

10. Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption
• Secure hosting environment
• Access control and authentication
• Regular security updates
• Data minimization practices

11. Links to External Websites

Our Website may contain links to third‑party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes in legislation
• Updates to the Website
• Interreg programme requirements

The latest version will always be available on this page.