Privacy & Cookie Policy

1. Data Controller

The data controller for this website is the NatureVR project coordinator:

Stichting Anatta Foundation
Aalten, Netherlands
Website: www.anattafoundation.org
Contact: info@nature-vr.eu

NatureVR is an Erasmus+ Cooperation Partnership in Youth (KA220-YOU) co-funded by the European Union. Project partners (BACKSLASH — ES, Udruga Zaželi — HR, The Way A.P.S. — IT, Università Cattolica del Sacro Cuore — IT) act as joint controllers for project-related processing.

2. What data we collect

We try to keep data collection to the minimum strictly necessary.

• Contact form data: name, organisation, country, email address, subject and message you send through the contact form.
• Newsletter / mailing list (if you subscribe): email address and, optionally, your name.
• Server log data: IP address (truncated where possible), browser type, referring page, date and time of access. Logs are kept for security and troubleshooting purposes only.
• Comments (if enabled on news posts): name, email and the comment text.
• Cookies: see section 7 below.

We do not collect special categories of personal data (health, religion, political views, etc.) and we do not profile users for advertising.

3. Why we process your data (legal basis)

• To respond to your enquiry sent via the contact form — legal basis: your consent (Art. 6(1)(a) GDPR) and legitimate interest (Art. 6(1)(f)) in answering your request.
• To send project updates if you subscribed to the newsletter — legal basis: consent (Art. 6(1)(a)). You may withdraw consent at any time via the unsubscribe link.
• To operate, secure and improve the website — legal basis: legitimate interest (Art. 6(1)(f)).
• To comply with legal obligations related to the Erasmus+ programme reporting (Art. 6(1)(c)).

4. How long we keep your data

• Contact form messages: up to 24 months after the last reply, then deleted.
• Newsletter subscribers: until you unsubscribe.
• Server logs: up to 12 months.
• Project documentation (where personal data may appear): retained for at least 5 years after the project ends (June 2028) as required by the Erasmus+ grant agreement.

5. Who has access to your data

Your data is accessed only by authorised members of the NatureVR consortium and by service providers acting as data processors strictly on our instructions:

• Web hosting provider (servers located within the EU/EEA).
• Email/SMTP provider used to deliver and receive contact-form messages.
• Newsletter provider (if applicable).
• The European Commission and EACEA in the context of project monitoring, where required by the grant agreement.

We do not sell or rent personal data to third parties.

6. International data transfers

Whenever possible we use providers within the EU/EEA. If a transfer outside the EU/EEA is unavoidable, it is carried out on the basis of an adequacy decision or Standard Contractual Clauses approved by the European Commission, in line with Chapter V of the GDPR.

7. Cookies

This website uses only the cookies strictly necessary for its operation. We do not use advertising, tracking or profiling cookies.

7.1 Strictly necessary cookies (no consent required)

7.2 Optional cookies (only with consent)

If, in the future, the website integrates embedded content from third parties (e.g. YouTube videos, Vimeo, social media), those services may set their own cookies. They will only load after you give consent via the cookie banner.

7.3 Managing cookies

You can withdraw or change your consent at any time using the link below, or by clearing cookies in your browser settings.

Manage cookie preferences

8. Your rights under the GDPR

You have the right to:

• Access the personal data we hold about you (Art. 15).
• Request rectification of inaccurate data (Art. 16).
• Request erasure (“right to be forgotten”, Art. 17).
• Restrict or object to processing (Art. 18 and 21).
• Receive your data in a portable format (Art. 20).
• Withdraw consent at any time, without affecting prior lawful processing (Art. 7(3)).
• Lodge a complaint with a supervisory authority — for the coordinator: Autoriteit Persoonsgegevens (NL). You may also contact the supervisory authority of your country of residence.

To exercise any of these rights, write to info@nature-vr.eu. We will respond within one month.

9. Security

We apply technical and organisational measures appropriate to the risk: HTTPS encryption, restricted admin access, regular updates, strong passwords, and backups stored within the EU/EEA. No method of transmission over the internet is 100% secure; however, we strive to protect your data using industry best practices.

10. Children

This website is intended for adults (youth workers, educators, researchers, policymakers). We do not knowingly collect personal data from children under 16. Activities involving young people in the NatureVR project are conducted offline by partner organisations, with separate informed-consent procedures and, where required, parental consent.

11. Changes to this policy

We may update this policy to reflect changes in the website, our practices, or legal requirements. The “Last updated” date at the top of the page indicates when the policy was last revised. Significant changes will be announced on the homepage.

12. Contact

For any question regarding this Privacy & Cookie Policy or the processing of your personal data, contact us at info@nature-vr.eu.