HOPE — Holistic Outreach for (former) Prisoner and Employee Mental Health

Privacy Policy

Last updated: 17 June 2026

1. Introduction

This Privacy Policy explains how personal data is collected, processed and protected on the website of the HOPE project — Holistic Outreach for (former) Prisoner and Employee Mental Health — an Erasmus+ KA220-ADU Cooperation Partnership (Project No. 2025-1-DE02-KA220-ADU-000356566) implemented between 2025 and 2027.

The website is managed on behalf of the HOPE consortium by CPIP (Centrul pentru Promovarea Învățării Permanente), Romania. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable national data protection laws.

2. Data Controller

The data controller responsible for processing personal data collected through this website is:

  • CPIP — Centrul pentru Promovarea Învățării Permanente, Romania
  • Acting on behalf of the HOPE consortium
  • Email: contact@cpip.ro

3. Data We Collect

We only collect personal data that is necessary for the purposes described in this policy.

3.1 Data you provide directly

  • Name, email address and message content when you use the contact form or email us.
  • Professional affiliation or role, where you choose to share it (e.g. when subscribing to project updates or requesting resources).
  • Account credentials and content created by editors when accessing the restricted admin area of the website.

3.2 Data collected automatically

  • Technical information such as IP address, browser type, device and operating system, and the pages you visit.
  • Cookies and similar technologies, as described in our Cookie Policy.

4. How We Use Your Data (Purposes of Processing)

  • To respond to enquiries submitted via the contact form or email.
  • To share project news, resources and dissemination materials when you have asked to receive them.
  • To manage editorial access to the website (admin accounts).
  • To ensure the security, stability and proper functioning of the website.
  • To comply with our legal and contractual obligations toward the European Education and Culture Executive Agency (EACEA) and the Erasmus+ National Agency.

5. Legal Basis for Processing

Under Article 6 of the GDPR, we rely on the following legal bases:

  • Consent (Art. 6(1)(a)) — for optional analytics cookies and for receiving project communications.
  • Performance of a contract / pre-contractual steps (Art. 6(1)(b)) — when you contact us with a specific request.
  • Legal obligation (Art. 6(1)(c)) — to comply with Erasmus+ reporting, auditing and transparency obligations.
  • Public interest (Art. 6(1)(e)) — for dissemination activities carried out as part of an EU-funded project.
  • Legitimate interests (Art. 6(1)(f)) — to operate, secure and improve the website.

6. Cookies and Tracking Technologies

This website uses a limited number of cookies. Strictly necessary cookies are required for the website to function and do not need consent. Any optional analytics or marketing cookies are only activated after you give explicit consent. Full details — including how to manage or withdraw consent — are available in our Cookie Policy.

7. Third-Party Services

The HOPE website may rely on third-party providers for hosting, content delivery, embedded media (e.g. videos, maps) and form handling. These providers may process limited technical data on our behalf under appropriate data processing agreements. Where embedded content is loaded from third parties (such as YouTube or social platforms), those providers may set their own cookies and apply their own privacy policies.

8. Social Media

We link to the HOPE project profiles on external social media platforms (such as Facebook and Instagram). Visiting these external pages is subject to the privacy policies of the respective platforms. We do not embed social media tracking pixels on this website.

9. Website Analytics

At present, this website does not run third-party analytics that profile individual visitors. If privacy-friendly analytics are introduced in the future, this policy and the Cookie Policy will be updated, and — where required — your consent will be requested before any non-essential measurement tools are activated.

10. Data Sharing and International Transfers

Personal data may be shared with HOPE consortium partners strictly for project-related purposes, and with EU institutions (such as EACEA and Erasmus+ National Agencies) where required by our funding obligations. Where any service provider processes data outside the European Economic Area, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place.

11. Data Retention

  • Contact enquiries: kept for as long as needed to handle the request and up to 24 months thereafter.
  • Newsletter / dissemination contacts: kept until you unsubscribe or the project closes its dissemination activities.
  • Project records subject to Erasmus+ reporting: kept for the period required by EU funding rules (typically up to 5 years after final payment).
  • Technical logs: kept for a short period for security and troubleshooting purposes.

12. Your Rights Under the GDPR

As a data subject, you have the right to:

  • Access your personal data and obtain a copy of it.
  • Request rectification of inaccurate or incomplete data.
  • Request erasure of your data (“right to be forgotten”) where applicable.
  • Restrict or object to processing of your data.
  • Receive your data in a portable format.
  • Withdraw your consent at any time, without affecting the lawfulness of prior processing.
  • Lodge a complaint with your national data protection authority.

To exercise any of these rights, please contact us at contact@cpip.ro.

13. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including encrypted connections (HTTPS), role-based access to the content management area, and least-privilege access for consortium members.

14. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or organisational changes. The current version, together with its “last updated” date, is always available on this page.

15. Contact

For any privacy or data protection request — including questions about this policy or the exercise of your GDPR rights — please contact us at contact@cpip.ro.