Last updated: 19 November 2025
This Privacy Policy explains how the INCEPTION project website ("Site") processes personal data when you visit, interact with cookies, or (in future) submit information through a contact form.
We aim to comply with the EU General Data Protection Regulation (GDPR) and relevant Member State laws. This Site currently functions as an informational resource with limited data collection.
1. Data Controller
The data controller responsible for this Site is the INCEPTION project consortium.
2. What Data We Collect
Currently (informational browsing only):
- Essential technical data: IP address (transient), browser type, pages viewed (in server logs for security and performance, not systematically profiled).
- Cookie consent preference (stored locally in your browser).
- Analytics events (only after you provide consent) via PostHog pseudonymous identifiers.
Future (contact form, once implemented):
- Name, email address, message contents.
- Any metadata you voluntarily provide (e.g. affiliation). You should not submit sensitive personal data (health, race, political opinions, etc.). Such data will be deleted if inadvertently received.
3. Legal Bases
- Legitimate interest: operating, securing and improving the Site (basic logs).
- Consent: placement and reading of analytics cookies (PostHog) and future form submission processing.
- Contract-like / pre‑contractual steps: responding to legitimate project-related inquiries, once contact form is active.
4. Cookies & Analytics
We use a consent banner. Analytics (PostHog) only activates after explicit acceptance. See the Cookies Policy for details. Declining cookies prevents analytics tracking.
5. How We Use Data
- Ensure Site functionality and security.
- Understand aggregate usage (pages visited, general engagement) to improve dissemination impact (only with consent).
- Respond to inquiries (future contact form). No automated decision-making or profiling producing legal or significant effects is performed.
6. Data Retention
- Server logs: kept briefly (up to 90 days) for security/readiness and then rotated or anonymized.
- Analytics events: retained according to PostHog configuration; we aim to limit retention to a proportionate period (≤ 12 months).
- Contact form submissions (future): stored only as long as needed to address the inquiry and project reporting obligations.
7. Data Sharing
We do not sell personal data. Limited sharing may occur with:
- Consortium partners (strict purpose: project reporting / coordination).
- Service providers (hosting, analytics) under appropriate agreements.
- Authorities where legally required. Data may be transferred within the EU/EEA. Any transfers outside the EEA (e.g., PostHog infrastructure) will rely on appropriate safeguards (Standard Contractual Clauses, etc.) if applicable.
8. Your Rights (GDPR)
Subject to verification of identity, you may:
- Access: obtain confirmation and a copy of personal data processed.
- Rectify: correct inaccurate data.
- Erase: request deletion where conditions apply.
- Restrict: limit processing under certain circumstances.
- Object: to processing based on legitimate interest (we will assess and respond).
- Withdraw consent: at any time for analytics cookies—this does not affect prior lawful processing.
- Lodge a complaint: with your local supervisory authority or the authority of the controller's Member State. To exercise rights, contact: [contact email to be published soon].
9. Security
We implement proportionate technical and organizational measures (access controls, TLS encryption, limited log access). No system is perfectly secure; residual risks cannot be eliminated entirely.
10. Children
The Site is not targeted at children. We do not knowingly collect data from children under 16. If you believe a child has submitted data, please contact us for deletion.
11. Third-Party Links
External links lead to independent sites with their own privacy practices. Review those policies before interaction.
12. Updates
We may modify this Policy to reflect legal or functional changes. The "Last updated" date will change. Material changes will be highlighted where feasible.
13. Contact
Until formal contact details are published, queries can be directed to the coordinating institution once listed here.