Labs4Change
Diagnostic

Last updated: June 2026.

This Privacy Policy explains how the Labs4Change project processes personal data through this website, in line with Regulation (EU) 2016/679 (GDPR) and applicable national data-protection law.

1. Who is responsible (data controller)

The data controller for this website is the Labs4Change consortium, coordinated by Mondragon Unibertsitatea — Faculty of Business Studies (Spain).

  • Coordinator: Mondragon Unibertsitatea, S. Coop. (Tax ID / CIF F-20560991) — Faculty of Business Studies (Enpresagintza)
  • Postal address: Loramendi 4, 20500 Arrasate-Mondragón, Gipuzkoa, Spain
  • Contact: [email protected] (general: [email protected])
  • Data Protection: no dedicated Data Protection Officer has been designated for this project; data-protection requests may be addressed to the coordinator at the contact above.

The project is co-funded by the European Union under Erasmus+ (Grant Agreement 2024-1-ES01-KA220-HED-000248544).

2. What data we collect and why

We only process the data you choose to give us:

  • Contact form — your name, email address and message. Used solely to respond to you. Legal basis: your consent / our legitimate interest in answering enquiries (Art. 6(1)(a)/(f) GDPR).
  • Equality diagnostic — if you ask us to email your results: your name, email, and the institution, country, role and answers you provide. Used to send your report and, if you agree, to share project updates. Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Technical data — like any website, our hosting provider automatically processes limited technical data (e.g. IP address, browser type) in server logs for security and to deliver the site. Legal basis: legitimate interest in a secure service (Art. 6(1)(f) GDPR).
  • Analytics (opt-in) — if you accept in our cookie banner, Google Analytics 4 processes anonymised usage data (pages viewed, files downloaded) so we can improve the site. IP addresses are anonymised and no analytics cookie is set unless you opt in. Legal basis: your consent (Art. 6(1)(a) GDPR). See our Cookie Policy.

We do not use advertising cookies, and we do not profile you or take automated decisions about you.

3. Who processes the data (recipients)

  • Cloudflare, Inc. hosts the website and processes technical data as our processor. Cloudflare offers EU data-localisation options and acts under a data-processing agreement.
  • Resend delivers the emails our forms send (contact and diagnostic), processing your name and email address as our processor. Messages are sent from an EU region.
  • Google Ireland Ltd. provides Google Analytics 4 and processes anonymised usage data — only if you accept analytics cookies.
  • Email you send us is received at the consortium inbox ([email protected]) and, where relevant, by the partner responsible for your enquiry.

We do not sell your data and do not share it with third parties for marketing.

4. International transfers

We aim to keep processing within the EU/EEA — our email delivery uses an EU region and Cloudflare offers EU data-localisation. Some processors (notably Google Analytics) may process data outside the EEA; where this occurs it is covered by appropriate safeguards such as EU Standard Contractual Clauses.

5. How long we keep it

We keep your data only as long as needed for the purpose: enquiries until they are resolved and for a reasonable follow-up period; diagnostic contact details until the project ends or you ask us to delete them. The project runs until 31 August 2026; [define post-project retention].

6. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time (without affecting prior processing). To exercise these rights, contact [email protected].

You may also lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD); in Germany, the competent Landesdatenschutzbehörde; or the authority in your country of residence.

7. Cookies

This site uses only strictly necessary cookies. See our Cookie Policy for details.

8. Changes

We may update this policy; the date above shows the latest version.