Header
EN_Co-fundedbytheEU_RGB_NEG
Header

Privacy Policy

1. Data Controller
The Data Controller is Caleidoscopio, in the context of communication and dissemination activities related to the project GENERATIVE AI - Youth Sector Challenges and Impact, co-funded by the Erasmus+ / European Union programme.
For any information regarding the processing of personal data, the Data Controller can be contacted at: dir.caleidoscopio@gmail.com
2. Types of data processed
The website processes only the following categories of data:
  • Browsing data
    During their normal operation, the computer systems and software procedures used to operate the website acquire certain technical data whose transmission is inherent to Internet communication protocols (e.g. IP addresses, domain names of the devices used, request times).
    These data are not collected to be associated with identified individuals.
  • Data voluntarily provided by users
    The voluntary sending of emails to the contact addresses published on the website entails the acquisition of the sender’s data, limited to the purpose of replying.

The website does not provide user registration, restricted areas, or authentication systems.

3. Purposes and legal basis of processing
Personal data are processed exclusively for the following purposes:
  • ensuring the proper technical functioning of the website;
  • allowing access to informational and educational content;
  • responding to requests voluntarily submitted by users;
  • analysing aggregated website usage statistics through Google Analytics 4, in order to understand how users interact with the website and improve its content and usability;
  • complying with legal obligations or requests from competent authorities.
The legal basis for statistical and analytical processing is the user’s explicit consent, collected through the cookie consent banner managed via CookieYes.
Google Analytics is used exclusively for statistical purposes and is not used to associate browsing data with information provided through contact forms, comments, or other interactive features.
No marketing, profiling, or automated decision-making activities are carried out.
4. Cookies and tracking tools
The website uses technical cookies and, subject to the user’s prior consent, analytical cookies.
Website traffic analysis is performed using Google Analytics 4, a service provided by Google Ireland Limited, which collects information in aggregated form. IP anonymisation and other data protection measures are applied in accordance with Google’s data protection settings.
Detailed information on the categories of cookies used, their purposes, and how to manage consent is available in the Cookie Policy, including specifics on third-party embedded content such as Instagram and other social media embeds.
5. Third-party content
The website may include embedded content from third-party platforms, such as Instagram and YouTube. These embedded elements are provided directly by the respective platforms and may process user data and set cookies when displayed.
Embedded social media content is shown only after the user has given explicit consent through the cookie consent banner. Before consent is given, no data is transmitted to third parties and no related cookies are set.
Any personal data collected by third-party services through embedded content is processed in accordance with the privacy policies of the respective providers (e.g., Meta for Instagram, Google for YouTube). Users should consult those external privacy policies to understand how their data may be used by those third parties.
6. Data transfers outside the EU
Where third-party services are used, data may be transferred to countries outside the European Union.
Such transfers are carried out in compliance with the safeguards provided by Regulation (EU) 2016/679 (GDPR), including Standard Contractual Clauses or adequacy decisions.
7. User-generated content and contact forms
The website may, in the future, allow users to interact by submitting comments, messages, or enquiries through contact forms or similar communication tools.
In such cases, the personal data provided by users (such as name, email address, and message content) will be processed exclusively for the purpose of managing the interaction, responding to requests, or moderating user-generated content.
The provision of such data will always be voluntary. Personal data will not be used for marketing purposes, profiling, or automated decision-making.
The legal basis for this processing will be the user’s explicit consent or, where applicable, the performance of a pre-contractual request initiated by the user.
If commenting features are enabled, any personal data voluntarily provided within comments may be publicly visible and will be processed solely for moderation and content management purposes.
8. Data retention
Personal data are retained only for the time strictly necessary to achieve the purposes for which they were collected, in accordance with the principles of data minimisation and storage limitation.
Personal data submitted through contact forms or user-generated content will be deleted once the request or interaction has been completed, unless longer retention is required by law.
9. Data subject rights
Data subjects may exercise, within the limits and under the conditions provided by the GDPR, the following rights:
  • access to personal data;
  • rectification or erasure of data;
  • restriction of processing;
  • objection to processing;
  • withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
  • lodging a complaint with the competent Data Protection Authority.
Requests may be submitted to the Data Controller using the contact details provided above.
10. Updates to this Privacy Policy
This Privacy Policy may be subject to updates. Users are encouraged to review it periodically.
Scroll to Top