Privacy policy

EIT Manufacturing East GmbH, Technologie Zentrum Seestadt, Christine-Touaillon-Straße 11/29, A-1220 Vienna, Austria — acting as coordinator on behalf of the COMPLIANCE4DPP consortium.
Phone: +43 660 43 660 60
Email: info@manufacturing.eu

DI Kurt Berthold
c/o clever data gmbh
Danhausergasse 9 / Top 3
A-1040 Vienna, Austria
Phone: +43 (0)664 / 61415-23
Email: info@manufacturing.eu
Website: www.cleverdata.at

When you access this website, the hosting infrastructure automatically processes technical data: IP address, date and time of the request, requested resource, referrer, browser and operating system. This is necessary to deliver the site securely and reliably.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Retention: up to 14 days, then deletion or anonymisation.

The forms on this website (contact form, DPP Expert Board nomination, Advisory Board application) are submitted to our own server and stored in our database, which is operated on our behalf within the European Union. Submissions are also forwarded by email to the responsible project office so that we can respond.

Data processed: the information you enter (e.g. name, organisation, email address, country, topic, message, professional profile link, areas of expertise, motivation and rationale text, declarations and disclosed affiliations, and — for nominations — the contact details of the nominating person), any files you upload, plus technical submission metadata: the page the form was submitted from, the landing page and referring domain, any campaign parameters (utm_*) present in the link you followed, your browser identification string (user agent), an anonymous session identifier, the version of this privacy policy you accepted, and the time of your consent. Your IP address is not stored with the submission; it is used only transiently for spam and abuse protection (rate limiting).

Uploaded files are stored in a private, non-public storage area and are accessible only to authorised project staff through a password-protected administration area. No special categories of data under Art. 9 GDPR are requested; please do not include any.

Purpose: handling your enquiry, and assessing and selecting members of the DPP Expert Board and the Advisory Board. Legal basis: Art. 6(1)(b) GDPR where the submission relates to a (pre-)contractual relationship or possible appointment, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries, in constituting expert bodies and in protecting the forms against abuse); where a form asks for your explicit consent, Art. 6(1)(a) GDPR. Providing the data is voluntary; without it we cannot respond.

Recipients: the project coordinator and those members of the Executive Board of the COMPLIANCE4DPP consortium involved in handling the enquiry or the selection, as well as our hosting and email providers as processors under Art. 28 GDPR.

Sharing with consortium partners: every form contains a separate, mandatory consent checkbox by which you agree that your personal data may be shared with authorised partners of the COMPLIANCE4DPP consortium for project-related activities and communication. The consortium consists of 19 partner organisations from 9 countries, all located within the EU/EEA; the current list is published on our consortium page. Legal basis: Art. 6(1)(a) GDPR (consent). Giving this consent is a condition for submitting the form — without it the submission or registration cannot be completed. You can withdraw your consent at any time with effect for the future by emailing info@manufacturing.eu; the withdrawal does not affect the lawfulness of processing carried out before it.

Information under Art. 14 GDPR for nominated persons: where a partner nominates you, we receive your data from that nominating person or organisation, whose identity we will disclose to you on request. You will normally be contacted within one month of the nomination. All rights listed in section 9 apply, including the right to object under Art. 21 GDPR.

Retention: contact enquiries, newsletter requests, event registrations, nominations to the DPP Expert Board and Advisory Board applications are kept for up to 48 months from submission, corresponding to the duration of the project and the reporting, dissemination-monitoring and audit obligations arising from the Horizon Europe grant agreement, and are then deleted, subject to any longer statutory retention period that applies. Uploaded files are deleted together with the submission they belong to.

Where offered, subscription is based on your consent (Art. 6(1)(a) GDPR) using a double opt-in procedure. You can withdraw consent at any time with effect for the future, via the unsubscribe link or by email.

This website uses technically necessary storage required to operate the site and to remember your cookie preference. In addition, and only after you accept analytics, we operate our own first-party web analytics. No third-party analytics service, advertising network or cross-site tracking is used, and no analytics cookies are set.

What is recorded: page views and basic interaction events (e.g. outbound link clicks, file downloads, form submissions) together with the page path and page title, the referring domain (not the full URL), any campaign parameters (utm_*) contained in the link you followed, a randomly generated anonymous visitor identifier stored in your browser's local storage, a session identifier stored in session storage that expires after 30 minutes of inactivity, your device type, browser, operating system, browser language and screen size, and a two-letter country code derived from your IP address by the edge network. Your IP address itself is never transmitted to or stored in our analytics database, and the identifiers are not combined with any other data, not used to build profiles and cannot be used to identify you personally.

Legal basis: Art. 6(1)(a) GDPR (consent) for analytics; Art. 6(1)(f) GDPR for necessary storage. Raw analytics records are retained for up to 48 months, corresponding to the duration of the project and the reporting, dissemination-monitoring and audit obligations arising from the Horizon Europe grant agreement; aggregated statistics that contain no visitor or session identifiers are kept indefinitely. Analytics data is stored in our own database operated on our behalf by our hosting provider within the EU, acting as processor under Art. 28 GDPR. The reports are accessible only to authorised project staff through a password-protected administration area and are not shared with third parties.

Refusing analytics is as easy as accepting it, and the website can be used fully without consent. You can withdraw your consent at any time with effect for the future, with one click via "Cookie settings" in the footer of every page or on the cookie policy page, where all storage entries used are listed. After withdrawal no further data is recorded and the anonymous identifiers are deleted from your browser.

Personal data may be processed by the following processors acting on our instructions under Art. 28 GDPR: Lovable Labs Incorporated (website hosting, EU-hosted database and file storage) and Resend (delivery of form notification emails). Consortium partners receive data only where necessary to respond to your enquiry or to assess a nomination or application.

Data is processed within the European Union wherever possible. Where a transfer to a third country is unavoidable, it takes place on the basis of an adequacy decision or the European Commission's Standard Contractual Clauses with additional safeguards.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.

You may also lodge a complaint with a supervisory authority, in particular in the Member State of your residence or place of work. Competent authority for the controller: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at.

We update this policy when the website or the underlying processing changes. Last updated: 2 October 2026.