Privacy Policy

1. An overview of data protection

General

The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.

Data collection on our website

Who is responsible for the data collection on this website?

The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.

How do we collect your data?

Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.

Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.

What rights do you have regarding your data?

You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.

Analytics and third-party tools

When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

You can object to this analysis. We will inform you below about how to exercise your options in this regard.

2. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Notice concerning the party responsible for this website

The party responsible for processing data on this website is:

European Research and Project Office GmbH
Heinrich-Hertz-Allee 1
66386 St.Ingbert

Represented by:
Jörg Scherer

Telephone: +49 6894 388 130
Email: contact-us@eurice.eu

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

Right to file complaints with regulatory authorities

If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Information, blocking, deletion

As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.

3. Data protection officer

Statutory data protection officer

We have appointed a data protection officer for our company.

Verimax GmbH
Warndtstraße 115
66127 Saarbrücken

Telephone: +49 89 800 65 78 0
Email: dsb.eurice@verimax.de

4. Data collection on our website

Cookies

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use are stored pursuant to Art. 6 paragraph 1, letter f of GDPR. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in this privacy policy.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

These data will not be combined with data from other sources.

This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.

5. LinkedIn

We aim to regularly inform you about current developments of the project making use of the social network LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, hereinafter referred to as “LinkedIn”. Please note, that you use this service and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. share, rate).

We have no influence neither on the type nor the scope of the data processed by LinkedIn. We do not gain full access to such collected user data or any user profiles. We can only access public profile information. Which information you share publicly can be adjusted via your LinkedIn settings. In addition, you can actively hide your reactions to a post or unfollow the page via the LinkedIn settings. LinkedIn collects personal data of the user, e.g. via cookies. Such collection of user data by LinkedIn can also occur even if the user is not logged in or registered at LinkedIn. Information on which data and for what purposes is processed by LinkedIn can be found in the LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy-summary

LinkedIn provides the following anonymous statistics about the usage of our project-related LinkedIn page:

Follower: number of persons following the page – including growth and development over a defined time frame
Range: number of people who see a specific contribution; number of interactions on a post, e.g., which pieces of content initiate more engagement within the community than others.

Those statistics are used to steadily improve our LinkedIn online content and to better respond to the interests of our users. We cannot link statistical data with the profiles of our LinkedIn followers.

We only receive personal data via LinkedIn, if you actively transmit your data by sending a personal LinkedIn message. We use this data (e.g. name, surname) to respond to your query.

6. Instagram

In order to reach broader public and to promote our project activities, the project has an official Instagram page. Instagram is a service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Use of the page and its interactive features (e.g., commenting, liking, sharing) is the sole responsibility of the users.

Joint Controllership:

The operation of the Instagram page takes place under joint controllership pursuant to Article 26 GDPR between Meta Platforms Ireland Ltd. and EURICE GmbH, as the partner responsible for communication within the MELISSA project. The key terms of this arrangement are available here: https://www.facebook.com/legal/controller_addendum.

Processing by Meta:

When visiting the page, Meta collects personal data such as IP address, device information, interactions (likes, comments), and profile details. Meta processes this data, including for its own purposes, and may transfer it to the United States. Further information on how Meta Ireland processes Personal Data, including the legal basis Meta Ireland relies on and the ways to exercise Data Subject rights against Meta Ireland, can be found in Meta Ireland’s Privacy Policy at https://www.facebook.com/about/privacy.

The transfer is based on the EU–US Data Privacy Framework (DPF), under which Meta Platforms, Inc. is certified. For further details on Instagram’s data protection practices, please see: https://help.instagram.com/519522125107875.

Instagram does not conclusively and clearly state how it uses data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Instagram stores this data, and whether data from visits to the Instagram page is passed on to third parties. We do not have any knowledge of this.

Processing by EURICE:

We only receive anonymized, aggregated statistics (Insights) from Meta that do not allow any identification of individuals. These are used to improve our communication and outreach activities.

Legal Basis:

The processing is based on Article 6 (1)(f) GDPR, reflecting the legitimate interest in promoting and communicating the project’s activities.

Data Subject Rights:

You may exercise your data protection rights (access, erasure, restriction, objection, etc.) both with Meta Platforms Ireland Ltd. and with us. For further information on Meta’s privacy practices, please refer to: https://www.facebook.com/about/privacy.

6. Registration for VOICE Events

As a participant in the Practising Eco-Social Futures: The VOICE Artist Showcase, this information is provided to you by EURICE, the project's main partner responsible for communication activities. You are receiving this information as EURICE processes your personal data as a data controller within the communication activities of the Horizon Europe project “VOICE” (Grant Agreement No. 101135803) according to Article 13 GDPR. This Privacy Notice and Consent Information for Showcase Registration convey important information about our privacy practices and your rights as it relates to your personal data. We encourage you to read this notice carefully and contact us in case of any questions.

P5-EURICE is required by law to protect your personal data. This notice explains how we process (e.g. collect, store, protect, delete) your personal data. We will process any personal data about you in accordance with this notice and with applicable law.

1. WHO ARE WE?

The institution responsible for the processing of your personal data according to the data protection regulations is:

European Research and Project Office GmbH
Heinrich-Hertz-Allee 1
66386 St. Ingbert
Germany
Represented by:
Jörg Scherer
Telephone: +49 6894 388130
E-mail: contact-us@eurice.eu

A data protection officer has been appointed for our company:
Verimax GmbH
Warndtstr. 115
66127 Saarbrücken
Germany
Telephone: +49 89 80065780
E-mail: dsb.eurice@verimax.de

WHY DO WE PROCESS YOUR DATA (PURPOSE OF PROCESSING) AND WHAT IS THE LEGAL BASIS?

The VOICE Artist Showcase brings together artists participating in the VOICE project to present and share artistic work developed within the framework of the project, including research processes, methodologies, and artistic outputs. The showcase provides a space for exchange, discussion, and public engagement around VOICE-supported artistic practices.

For the organisation and implementation of the showcase, we process a limited set of personal data provided through registration and participation forms, which may include name, surname, email address, affiliation, role within the VOICE project (e.g. artist), participation preferences, and attendance details.

The collection of this information is limited to what is strictly necessary for the organisation and delivery of the showcase, including managing registrations and participation, communicating practical event-related information, and compiling attendee lists required by the Royal College of Art (RCA) for access control and security purposes, as access to the RCA Battersea campus is restricted and all visitors must be announced in advance. Information relating to role or affiliation is used solely to support event coordination and the safe and smooth running of the showcase. All personal data is processed exclusively for these purposes, in accordance with the principles of data minimisation and purpose limitation, and will not be used for any unrelated activities or shared beyond what is necessary for the organisation of the event, including with RCA security services for access management.

2. LEGAL BASIS OF DATA PROCESSING

Registration and participation:
Art. 6(1)(b) GDPR (performance of a contract / participation agreement)
Your registration data is processed for the purpose of the initiation, performance and conclusion of a contract and the related secondary obligations (Art. 6 para. 1b GDPR). These data are processed with the purpose of identifying you as a participant to the VOICE Academy Showcase.

Photos and video recordings and email address and name to be contacted for future events:
Art. 6(1)(a) GDPR (explicit consent)
Providing consent for photos and/or video recording is entirely voluntary. Consent can be withdrawn at any time with effect for the future by contacting dataprotection@eurice.eu. Non-consent or withdrawal of consent will not result in any disadvantage for participation. Already published content will not be further used after withdrawal, where technically and legally feasible.

Security list
Art. 6(1)(a) GDPR (explicit consent)
The processing and disclosure of participants’ name, organisation and role to the RCA and its Security department for access control and venue security is based exclusively on the participant’s explicit consent.

The processing of your personal data, i.e. pictures or name and email address, if you agree, that we may also contact you about future related events, is done on the basis of your consent.
In addition to processing your registration data for the organisation and implementation of the workshop, photos and video recordings may be created during parts of the event for:

project documentation and reporting obligations under the VOICE Grant Agreement
communication and dissemination of project activities
public information about the VOICE project (e.g. website, presentations, social media)

Video recordings may capture image, voice, and statements of participants.

3. PERSONAL DATA

We process your personal data, i.e.,

Surname, Name
Email address
Function
Organisation
the group that best describes your role

according to Art. 4 no. 1 GDPR, which we receive from you within the scope of your participation to the voice Academy Workshop.

In addition to registration data, we may process (only with consent):

photographs
video recordings (image and voice)
contextual information visible or audible during recordings (e.g. participation in discussions)

We will process your pictures and videos taken during the Showcase only if you have explicitly consented to this. The participation in the showcase is possible regardless of whether you provide your consent in this regard.

4. WHO WILL RECEIVE MY DATA?

Within the European Research and Project Office GmbH, your data will be transferred to those persons that need the data to fulfil their contractual obligations (e.g., the Project Manager and the Communication Manager of the project). We will involve our Affiliated Partner RISE based in Croatia (Research and Innovation Services d.o.o., Ulica Republike Austrije 33, 10 000 Zagreb, Croatia)
In addition, we will transmit your personal data to other recipients outside the European Research and Project Office GmbH to fulfil our contractual and legal obligations. This includes:

hosting provider for the project website
project participants that are working on the VOICE project:
- Project Coordinator P1 – INOVA+ - INNOVATION SERVICES, SA
- P2 - STICHTING WAAG SOCIETY
- P3 - UNIVERSITY COLLEGE DUBLIN, NATIONAL UNIVERSITY OF IRELAND, DUBLIN
- P4 - FUTURE FOCUS21C EDU COMPANY LIMITED BY GUARANTEE
- P5 – ROYAL COLLEGE OF ART, LONDON and its Security department, solely for the purpose of access management to the Battersea campus.
funding agency
policy makers
general public
external auditors
social media channel - LinkedIn

For processing activities carried out by P5 – Royal College of Art (RCA), London, in its role as event organiser and venue host, RCA acts as an independent data controller.

Information on RCA’s data protection practices, including contact details of RCA’s Data Protection Officer, is available in RCA’s privacy notice:

5. TRANSMISSION TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATION

Please note that your personal data is being transferred to United Kingdom. The processing of personal data the United Kingdom will take place on the basis of the Commission Decision of 28 June 2021. Such a Decision confirms that a country situated outside the EU offers an adequate level of data protection.

The transmission of your data is not repeated, mass or structural and is carried out according to the tasks established within the Grant Agreement and Consortium Agreement.

To reach broader public and to promote our project activities we also use the services of LinkedIn, whose server is situated outside the EU.

There is a specific data privacy notice applicable for the data subjects situated in the EU, but it cannot be excluded that personal data will be transferred outside of the EU. LinkedIn stores personal data on its servers in the US, so data flows from the EU to the US and back.

In the context of the use of social media accounts, we are controllers within the meaning of Art. 4 No. 7 GDPR together with LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, for the operation of our LinkedIn profiles.
In this context, your data may be transferred to the USA. The recipient mentioned above is certified under the EU-US Data Privacy Framework, so that this is a GDPR-compliant third country transfer to a country with an adequacy decision. The EU-US Data Privacy Framework was adopted by the European Commission on 10 July 2023 and US is considered as offering adequate protection of data protection within the meaning of Art. 45 GDPR.
For further information regarding data processed by LinkedIn, see LinkedIn’s privacy policy.

Please note that data on the Internet can be accessed anywhere in the world, including in unsecure third countries where there is no adequate level of data protection. We therefore expressly point out that digital images, for example on our website, can be accessed worldwide and that further use by third parties cannot be ruled out.

Please note that our project websites are also accessible to search engines. You must therefore expect that your name and image may also be found by search engines or accounts of third-parties.

Content can also be searched for and reshared on social media services. The providers of the relevant social media services are primarily responsible for this.

FOR HOW LONG ARE MY DATA STORED AND WHERE?

Periods for retention result from the applicable Horizon Europe provisions. In accordance thereto, the data must be retained for up to five years after receipt of the project’s final payment, according to Art. 20.1 GA and the VOICE Data Sheet, Point 6. Appropriate technical and organisational measures have been identified and implemented together with EURICE’s Data Protection Officer. EURICE and host provider of the project’s website are in Germany and the data is stored in Germany as well. RISE, EURICE’s Affiliated entity, is in Croatia, therefore in Europe as well.

Personal data shared with P5 – Royal College of Art (RCA), London, and its Security department for the purpose of access management to the RCA Battersea campus (i.e. name, organisation and role) will be used exclusively for security and access-control purposes.

This data will be deleted or irreversibly anonymised shortly after the event, once access management is no longer required, and no later than [e.g. 7–14 days] after the showcase, unless a longer retention period is required under applicable security or legal obligations of the venue.

6. WHICH DATA PROTECTION RIGHTS DO I HAVE?

Each individual has the right to withdraw consent in accordance with Art. 7 (3) GDPR, the right of access in accordance with Art. 15 GDPR, the right to rectification in accordance with Art. 16 GDPR, the right to erasure (right to be forgotten) in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR, the right to data portability in accordance with Art. 20 GDPR as well as the right to object in accordance with Art. 21 GDPR. Limitations in accordance with §§ 34 and 35 of the German Federal Data Protection Act apply to the right to access and the right to erasure. In addition, individuals have a right to lodge complaints with the data protection supervisory authority about the processing of personal data by us. (Art. 77 GDPR in conjunction with § 19 BDSG).

We do not process data that is based on automated decision-making including profiling within the meaning of Art. 22 GDPR.

The competent supervisory authority is
Unabhängiges Datenschutzzentrum Saarland
Die Landesbeauftragte für Datenschutz und Informationsfreiheit
Fritz-Dobisch-Straße 12
66111 Saarbrücken
Germany
Phone: +49 681 94781-0
Poststelle@datenschutz.saarland.de

Please do not hesitate to contact us at dataprotection@eurice.eu if you have any questions regarding this information sheet.

Am I obliged to provide my data?

Providing your personal data within the scope of registering for and participating in events relating to the VOICE project is voluntary. However, if you do not provide your data (with your registration), we cannot register you as participant to the event.
Using your pictures within the scope of internal and external communication activities relating to “PROJECT VOICE” (GA no. 101135803), e.g. for the publication on the project website, in project promotional and publicity material or in the context of press work, is voluntary. If the consent is not given, there will be no disadvantages.