Personal Data Protection

Designations: 

• Partners / partnership: In the following text, “partner” / “partnership” designate partner institutions / organisations participating in Grapes of Change and likely to collect data within the framework of the project, namely Sistemi Formativi Confindustria (SFC), Confindustria Toscana Servizi (CTS), Confederazione Nazionale Coldiretti, Fundacja Digital Creators (FDC), Impact Hub Labs, Impact Hub GmbH, Impact Hub SRL, Interprofessionnelle Auvergne Rhône Alpes, Magyar Noi Unio Egyesulet, Paye ton Pinard, Asaja Mujeres, Solidarité Femmes Beaujolais, Università degli Studi di Siena (UNISI), and Wizemann Space GmbH;
• Supervisory Authority: Independent public authority established by a member State under article 51 of the GDPR. The list of Supervisory Authorities is available at this link.

The Grapes of Change project partners carefully treat all data collected as confidential and strictly use it under the framework of Grapes of Change project activities in compliance with EU legal regulations and the CERV Programme rules.

All data collected and managed under the activities of the Grapes of Change project is in strict compliance with Regulation (EU) 2016/679, General Data Protection Regulation.

The partnership appointed Sistemi Formativi Confindustria (SFC) as project coordinator and data controller, and Fundacja Digital Creators (FDC) as technical platform host and data processor, to act as Grapes of Change Data Protection Officers.

Who is concerned by this notice?

This notice is addressed to the following public:

• Newsletter subscribers
• Individuals who submit contact forms or inquiries through the website
• Interview participants and contributors to project content published on the website
• Website visitors (for anonymous analytics only)

For what purposes does the Grapes of Change project store your data?

The Grapes of Change website collects data to fulfill its communication and dissemination obligations as an EU co-funded project. The specific types of data collected and their purposes are:

1. Newsletter subscriptions: We collect email addresses to send project updates, news, event announcements, and results. Newsletter subscription is managed through a GDPR-compliant external newsletter management service. You can unsubscribe at any time using the link provided in each newsletter.
2. Contact forms and inquiries: We collect names, email addresses, and message content submitted through contact forms to respond to inquiries, process Associated Partner applications, and manage stakeholder relationships. This information is used solely to address your specific request.
3. Interviews and testimonials: We collect names, organizational affiliations, photographs, video recordings, and interview content from individuals who agree to share their experiences, good practices, or expertise. This content is used for project dissemination, case studies, factsheets, website publication, and social media. We always obtain explicit written consent before publishing any identifiable information, images, or testimonials. You have the right to withdraw consent at any time.
4. Website analytics: The project website (https://grapesofchange.eu) uses cookies to collect anonymous statistical data on page visits, time on site, and download activity. This data helps us evaluate website performance and improve user experience. No personal data is collected through website analytics. The website provides links to our social media channels (LinkedIn and Instagram) where separate privacy policies apply.

General principles:

1. We collect only the minimum data necessary for each specific purpose.
2. No personal information is collected without your knowledge and consent.
3. No data will be shared with third parties outside the project and the CERV Programme, except external service providers (who are contractually bound to GDPR compliance), or used for unintended purposes without your express consent and prior notification.
4. When personal data is collected, the purpose is clearly stated at the time of collection.
5. All data collected within the Grapes of Change project will be retained until 31/12/2033 to comply with regulatory obligations. Once the retention period has passed, the project partners, external providers, and the CERV Programme will delete all personal data collected within the project.

External providers

• The Grapes of Change project may use external providers to process your personal data (e.g., newsletter management services, hosting platforms). You will be informed and your express consent required whenever this is the case.
• The project partners ensure that external providers implement adequate safeguards for personal data protection.
• External providers have limited access to personal data strictly necessary for service delivery and are contractually bound to comply with current data protection regulations.

What about cookies and tracking technologies?

The project website collects anonymous statistical data using cookies to track page visits, time on site, and download activity. This information is used solely for performance analytics and to improve user experience. No personal data is collected through cookies. Users are informed about cookie use via a consent banner when first visiting the website.

What are your legal rights as data subject?

According to the GDPR Regulation (EU) 2016/679:

1. Every person may, on simple request addressed to the Data Protection Officers of Grapes of Change, have free access to all the information concerning them in clear language (any codes must be explained) and obtain a copy.
2. Every person may directly require from an organisation holding information about them the data to be corrected (if they are wrong), completed or clarified (if they are incomplete or equivocal), or erased (if this information could not legally be collected).
3. Anyone may oppose that information about them is used for advertising purposes or for commercial purposes.
4. They may also oppose to information concerning them being disclosed to a third party for such purposes. The persons concerned should have the possibility of exercising their right to oppose the disclosure of their data to a third party at the moment the data is collected. The use of automatic calling machines or faxes for advertising purposes is prohibited unless the person has given their prior consent.
5. If you believe that the processing of your personal data constitutes a violation of the legislation in force, you have the possibility to lodge a complaint with the supervisory authority concerned (check the list of authorities).

Who can you contact for questions regarding data protection?

For questions or concerns regarding the collection of your personal data within the Grapes of Change project, please contact the Data Protection Officers:

• SFC (as project coordinator and data controller): sfc.internationalprojects@gmail.com
• FDC (as technical platform host and data processor): fundacja@digitalcreators.eu