Privacy Policy

Last updated: October 01, 2025

This Privacy Policy describes how TWIN4DEM (“we,” “us,” or “our”) collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection laws.

By accessing or using our website https://twin4dem.eu or related services (the “Services”), you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for processing your personal data within the framework of TWIN4DEM is Diadikasia Business Consulting Symvouloi Epicheiriseon AE.

For privacy inquiries, you may contact: info@twin4dem.eu

2. Categories of Data Collected

We may process the following categories of personal data:

• Identification and contact data (e.g., name, email address, institutional affiliation) provided when you subscribe to newsletters, register for events, or contact us.
• Usage data (e.g., IP address, browser type, operating system, referring URLs, interactions with our website) collected automatically through cookies and similar technologies.

We do not intentionally collect or process special categories of personal data within the meaning of Article 9 GDPR.

3. Purposes and Legal Bases for Processing

We process your personal data only when there is a valid legal basis under Article 6 GDPR. In most cases, this will be based on your consent (Art. 6(1)(a) GDPR), for example when you choose to accept cookies beyond those strictly necessary, subscribe to our newsletter, or agree to receive project communications. In some cases, processing is based on contractual necessity (Art. 6(1)(b) GDPR), such as when you register for events or request access to project resources, where we must process your information in order to provide the service you have requested.

4. Cookies and Similar Technologies

We use cookies to operate our website and improve your browsing experience.

• Necessary cookies (always active): Enable the core functionality of the site, such as secure login and cookie preference management. These do not store personal data.
• Functional cookies: Allow optional features, such as social media integration or collecting feedback.
• Analytics cookies: Collect information on website use (e.g., visitor numbers, traffic sources, bounce rates) to help us improve performance.
• Performance cookies (if enabled): Monitor site speed and functionality to optimise user experience.

You can manage or withdraw consent for non-essential cookies at any time through the consent banner. For more details, see our Cookie Policy see section II below, hyperlink it when it is online and final.

5. Data Sharing and International Transfers

In principle, we do not share your personal data with anyone other than members of the TWIN4DEM consortium and trusted service providers who support the operation of this website. All consortium partners and providers are bound by strict legal and contractual obligations to keep your data secure and confidential.

Your data may be accessed only by:

• You, when exercising your GDPR rights;
• Consortium partners, when this is required for communication or organisational purposes within the project;
• Technical providers, such as hosting and mailing services, who act on our behalf under legally compliant processing agreements.

We do not generally transfer personal data outside the European Economic Area (EEA). If, in limited cases, tools or services used for newsletters, analytics, or similar purposes involve processing outside the EEA, such transfers will be protected through safeguards recognised under EU law, such as adequacy decisions under Article 45 of the GDPR.

6. Data Retention

We will keep personal data only for as long as it is relevant to the purposes described in this Privacy Policy and never beyond the official duration of the TWIN4DEM project. If you subscribe to our newsletter, your details will be stored until you choose to unsubscribe or withdraw your consent. If you register for an event, your information will be used to manage your participation and may be kept for a limited time afterwards unless you ask us to remove it. If you contact us through the website, your details may be retained so that we can respond and follow up with you, unless you request otherwise. Data collected through cookies will be stored according to the technical settings of the tool and your preferences. Each consortium partner may apply their own retention practices in line with GDPR, but in all cases you have the right to request that your information be removed or no longer used. In all cases, personal data that is no longer required for the purposes described above will either be deleted or de-identified, and you retain the right to request that your information be removed or no longer used.

7. Data Security

We implement appropriate technical and organisational measures in accordance with Article 32 GDPR to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

We conduct regular assessments of our technologies, facilities, procedures, and potential risks to safeguard the security and privacy of our users’ data. Personal information will be destroyed or de-identified once it is no longer needed for the purposes outlined in this policy or when required by law.

We are not responsible for the actions, practices, or security measures of any third party in relation to personal information they may collect or process through their websites, services, or other means.

8. Your Rights under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request access to a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You may request the rectification of any inaccurate or incomplete personal data concerning you.
• Right to erasure (“right to be forgotten,” Art. 17 GDPR): “You may request the deletion of your personal data in certain circumstances, for example, when the data is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing (Art. 18 GDPR): You may request that the processing of your personal data be restricted under certain circumstances.
• Right to data portability (Art. 20 GDPR): You may request the transfer of your personal data to another service provider.
• Right to object (Art. 21 GDPR): You may object to the processing of your personal data on the grounds of legitimate interests.
• Right to withdraw consent at any time (Art. 7(3) GDPR): You may withdraw your consent at any time by contacting us. Any processing carried out based on your consent prior to its withdrawal will not be affected.

To exercise these rights, you may submit a data subject access request by contacting us at info@twin4dem.eu.

You also have the right to lodge a complaint with your competent supervisory authority if you believe your rights have been infringed.

9. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in legal, technical, or operational requirements. We encourage you to review this page periodically for the latest version.