Labs 4 Change
Diagnostic

Last updated: June 2026.

This Privacy Policy explains how the Labs 4 Change project processes personal data through this website, in line with Regulation (EU) 2016/679 (GDPR) and applicable national data-protection law.

1. Who is responsible (data controller)

The data controller for this website is the Labs 4 Change consortium, coordinated by Mondragon Unibertsitatea — Faculty of Business Studies (Spain).

  • Postal address: [consortium coordinator postal address]
  • Contact: [email protected]
  • Data Protection Officer: [DPO name / email, if designated]

The project is co-funded by the European Union under Erasmus+ (Grant Agreement 2024-1-ES01-KA220-HED-000248544).

2. What data we collect and why

We only process the data you choose to give us:

  • Contact form — your name, email address and message. Used solely to respond to you. Legal basis: your consent / our legitimate interest in answering enquiries (Art. 6(1)(a)/(f) GDPR).
  • Equality diagnostic — if you ask us to email your results: your name, email, and the institution, country, role and answers you provide. Used to send your report and, if you agree, to share project updates. Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Technical data — like any website, our hosting provider automatically processes limited technical data (e.g. IP address, browser type) in server logs for security and to deliver the site. Legal basis: legitimate interest in a secure service (Art. 6(1)(f) GDPR).

We do not use advertising or analytics cookies, and we do not profile you or take automated decisions about you.

3. Who processes the data (recipients)

  • Cloudflare, Inc. hosts the website and processes technical data as our processor. Cloudflare offers EU data-localisation options and acts under a data-processing agreement.
  • Email you send us is received at the consortium inbox ([email protected]) and, where relevant, by the partner responsible for your enquiry.

We do not sell your data and do not share it with third parties for marketing.

4. International transfers

We aim to keep processing within the EU/EEA. Where a processor may process data outside the EEA, this is covered by appropriate safeguards (e.g. EU Standard Contractual Clauses).

5. How long we keep it

We keep your data only as long as needed for the purpose: enquiries until they are resolved and for a reasonable follow-up period; diagnostic contact details until the project ends or you ask us to delete them. The project runs until 31 August 2026; [define post-project retention].

6. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time (without affecting prior processing). To exercise these rights, contact [email protected].

You may also lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD); in Germany, the competent *Landesdatenschutzbehörde_; or the authority in your country of residence.

7. Cookies

This site uses only strictly necessary cookies. See our Cookie Policy for details.

8. Changes

We may update this policy; the date above shows the latest version.