1. Introduction
1.1 Document purpose & scope
The purpose of a website Privacy Policy is to ensure transparency and legal compliance in the processing of personal data. Its primary aim is to inform users in a clear and accessible manner about how their data are collected, used, shared, and protected when they interact with a website. By providing this information, the website operator fulfils legal obligations under data protection laws, such as the GDPR, and enables individuals to understand and exercise their rights. At the same time, these policies serve a broader function of accountability and trust-building. They demonstrate that the organisation processes data responsibly, respects user autonomy, and adopts appropriate safeguards. As such, the Privacy and Cookie Policies are essential tools for responsible digital governance and informed user consent.
1.2 Relation to project work
In relation specifically to the MARCONNECT project website, the Privacy Policy regulates how Personal Data are processed through the online platform that presents and disseminates the project’s activities. The project website may collect personal data when users submit contact requests, register for events, subscribe to newsletters, or interact with communication tools. The Privacy Policy explains how these data are handled by the project consortium, for what purposes they are processed, on what legal basis, how long they are retained, and what rights individuals can exercise. It ensures that all data processing carried out through the website complies with the GDPR and with the data protection obligations stemming from the Horizon Europe framework. In this sense, the Privacy and Cookie Policies are directly linked to the governance of the project’s digital presence. They ensure transparency toward visitors, stakeholders, and consortium partners, and demonstrate that the MARCONNECT project’s website operates in accordance with European standards of data protection, accountability, and responsible research communication.
2. Website Privacy Policy
This Privacy Policy is aimed at illustrating the means and purposes of the processing of personal data carried out by IANUS Technologies Ltd (registered office Spyrou Kyprianou 85, Eleneion Building, 4th Floor, Flat/Office 401, 6051, Larnaca, Cyprus), in its quality of data controller (henceforth, “IANUS” or the “Controller”), through the website https://marconnect-project.eu/ (henceforth, the “Website”).
Please note that this Privacy Policy applies to anyone who accesses and visits the Website or otherwise interacts with the web services offered on the Website (the “User”).
Pursuant to article 5 of the General Data Protection Regulation (EU) 2016/279 (“GDPR”), the Processing of Personal Data carried out by IANUS for the development and the management of the Website will be based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and accountability. Any term indicated in capital letters shall have the meaning attributed to it within the GDPR, or otherwise provided hereto.
2.1 Data Controller
The Data Controller will be IANUS.
2.2 Which kind of Personal Data are collected
2.2.1 Traffic and Internet Data
The computer systems and software procedures used to operate the Website acquire, during their normal operations, some Personal Data whose transmission is implicit in the use of internet communication protocols. This category of data includes, among others, IP addresses, browser type, operating system, domain names and website addresses from which the User logs in or out, pages visited by the User within the Website, time of access, amount of time that a User stays on a single page, internal path analysis, and other parameters regarding the User’s OS and computer environment.
These technical/IT data are collected and used only in an aggregated and not immediately identifiable manner. They could be used to ascertain responsibilities in case of crimes against the Website, or upon public authorities’ request.
In order to consent to the collection of this category of data, the Website uses cookies. Please read the Cookies Policy of this Website for further information about them.
2.2.2 Personal Data provided by the User
We may ask you to provide Personal Data, such as your name and e-mail address, to the extent to use the contact form published on the Website.
2.3 Why Personal Data are processed and the Lawful Basis
The user’s Personal Data will be processed exclusively for the following purposes, and exclusively within the framework of the Project’s activities (further information on the Project may be found here:
- To fulfil any request made by the User through the contact form available on the Website here: Contact Page. This processing is needed to provide the Users with the information they have directly requested, by granting their freely given and informed consent, according to Art. 6.1, a) GDPR;
- To comply with the obligations set both by applicable laws and regulations and to ascertain responsibilities in case of any computer crimes against the Website. As this processing is mandatory by law, User’s consent is not required according to Art. 6.1, c).
In any case, please be aware that User’s Personal Data will not be used for any automated decision-making including profiling, nor will they be further processed without the previous consent of the User.
2.4 Cookies
The Website has implemented the use of Cookies. Further information on the use of cookies may be found at the following URL Cookie Policy.
2.5 For how long Personal Data are kept
The Controller only retains Personal Data for the time necessary to fulfil the purposes for which the data have originally been collected and/or for the purposes of the Project. Regardless of this, the data collected will be destroyed 5 years from the completion of the Project.
2.6 How Personal Data are secured
Personal Data may be processed through information technology tools either manually or electronically, but always under technical and organisational measures that ensure their security and confidentiality, especially for preventing any risk arising from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data. All the processing operation are in accordance to the “need to know” principle. All members of staff abide by statutory, and when required, additional confidentiality agreements.
2.7 Who may access Personal Data
The Personal Data collected by the Controller might be shared with:
- Members of the MARCONNECT Consortium (list available here: View Consortium, only to fulfil User’s requests regarding Project’s activities and objectives,
- The controller’s service provider, which is Hetzner, located within the European Economic Area (henceforth, the “EEA”) in Germany, exclusively for IT organisational, administrative, or support needs.
The Controller might be required to disclose Users’ Information to comply with the law, a judicial proceeding, court order, subpoena, or other legal processes, or where it is necessary to investigate, prevent or take action regarding unlawful activities, suspected fraud, situations involving potential threats to the safety of any person or as evidence in litigation in which we are involved.
Without prejudice to the above, unless upon specific consent of the data subject or as otherwise required by applicable laws, User’s Personal data shall not he shared with any other organizations.
In particular, the Controller will not share User’s Personal Data with other Countries outside the EEA. In any case, should a transfer of the data outside the EEA become necessary in the future, it will be carried out in accordance with the provisions of the GDPR and the User will be timely and properly informed about this processing.
2.8 Redirections to other Websites
The Website incorporates links which allow the User to connect to other Websites run by third parties. The Controller assumes no responsibility regarding the Processing of Personal Data which may take through and/or in connection with third Parties’ Websites.
Therefore, each User who accesses such web pages and/or Social Media Platform through the Website must carefully read the relevant privacy policies in order to better understand how their Personal Data will be processed by the third parties which, as Autonomous Controllers, will provide and manage such Websites.
2.9 User’s Rights and how to exercise them
Pursuant to the GDPR, Users have several rights concerning the Personal Data that the Controller hold about them. If Users wish to exercise any of these rights, please use the contact details set out above.
- The right to be informed: Users have the right to be provided with clear, transparent and easily understandable information about how the Controller use their information in this Privacy Policy.
- The right of Access. Users have the right to obtain access to their Personal Data, subject matter of the data Processing. This will enable Users, for example, to check that the Controller is using Users’ Personal Data in accordance with the relevant data protection law. If Users wish to access the information, the Controller holds about them in this way: “Please get in touch” (Please see section Contact Information here below).
- The right to Rectification. Users are entitled to have their Personal Data corrected if it is inaccurate or incomplete. Users can request that the Controller rectifies any errors in information that the Controller hold by contacting it (Please see section Contact Information here below).
- The right to Erasure. This is also known as the “right to be forgotten”, and, in simple terms, enables Users to request the deletion or removal of certain of the Personal Data that the Controller hold about Users by contacting the Controller (Please see the section Contact information here below). Please remember that it is possible that pursuant any applicable law the Controller may not have all Users’ Personal Data erased
- The right to restrict Processing. Users have rights to “block” or “suppress” certain further use of their Personal Data. When processing is restricted, the Controller can still store Users’ Personal Data, but will not use it further.
- The right to Data Portability. Users have the right to obtain their personal information in an accessible and transferrable format, so that they can re-use it for their own purposes across different service providers. This is not a general right however, and there are exceptions. To learn more, please get in touch (Please see section Contact information here below).
- The right to lodge a Complaint. Users have the right to lodge a complaint about the way the Controller handles or processes their Personal Data, with the relevant national Data Protection Authority.
- The right to withdraw Consent. If Users have given their consent to anything the Controller do with their Personal Data (i.e., the Controller relies on consent as a legal basis for processing your information), Users have the right to withdraw that consent at any time. Users can do this by contacting the Controller (please see section Contact Information here below). Withdrawing the Consent will not however make unlawful our use of User’s information while consent had been apparent.
- The right to object to Processing. Users have the right to object to certain types of Processing. Users can, for example, object to the publication of pictures taken of themselves within the context of a Conference.
Where Users wish to exercise their rights in the context of one or several specific processing operations, please provide the description in the requests. Users’ request will be handled within a maximum of 30 (thirty) working days.
2.10 Contact Information
If Users would like to exercise their rights under the GDPR, or if they have comments, questions or concerns, or if they would like to submit a complaint regarding the collection and use of their Personal Data, they might contact the following email address: info@ianus-technologies.com
2.11 Changes
Where appropriate, we will notify you of any changes to this privacy policy, for example by email.
2.12 Entry into Force
The present Privacy Policy entered into force on the following date: 18/03/2026, Version 1.0
