This policy covers the personal data collected by the hajde4eu.org website. It is written to be read, not to be survived: every category of data below says why it is held, on what basis, and exactly how long it is kept.
Who is responsible
Awaiting confirmation from the Project. The legal identity and registered address of the data controller for this website, and the contact point for data protection questions, are being confirmed with the Project and with the contracting authority. Until they are, write to info@hajde4eu.org and your request will be routed to the right person.
What is collected, and why
This website has no public sign-up, registration or request form. It asks visitors for nothing, and there is no way to submit personal data to it without an account. Two categories exist, and both of them belong to accounts.
The restricted-area access log
Where a document is not public, we record which account opened it and when. That record is itself personal data and is named here for that reason: an audit log that nobody declares is a log nobody can ask about. The basis is our legitimate interest in being able to show who saw a non-public document.
How long: 365 days, after which each entry is deleted automatically.
Accounts
Accounts are issued to approved users only. We hold the account name, email address and role, and — because the restricted area requires it — a second authentication factor. Sign-in attempts are rate-limited per account and per address.
How long: for as long as the account is needed. An account that is closed is removed with the personal data held on it; the access-log entries it produced expire on their own schedule above.
Cookies and consent
Before you answer the consent notice, this site sets nothing at all — not an analytics cookie, not a session cookie, and it makes no request to any third party. That is a design decision and it is tested on every build.
Two first-party cookies exist once you have answered. One records which categories you accepted. The second records the same set with the date and time you chose, because documenting when consent was given is part of what consent means. Neither carries an identifier and neither follows you to another site. If you refuse everything, no record is kept at all.
You can change or withdraw your choices at any time through the Cookie settings link in the footer of every page.
Embedded material from other platforms — video, social feeds — loads only after you accept that category. Until then you see a placeholder and a link to the same material on the platform itself, and nothing has been requested on your behalf.
Who else sees it
Awaiting confirmation from the Project. The hosting provider for this website, and any other processor acting on our behalf, will be listed here once the hosting arrangement is confirmed. No personal data collected by this site is sold, and none is passed to a third party for marketing.
Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to erase it, object to our holding it, or withdraw a consent you have given. Withdrawing a consent does not affect anything done before you withdrew it.
Write to info@hajde4eu.org. You also have the right to complain to a supervisory authority.
Changes to this policy
If this policy changes in a way that affects what we do with data already collected, we will say so on this page and, where the change concerns something you consented to, we will ask you again rather than assume.