NatuRISE Privacy & Cookie Policy

Last updated: [Month 2026]

This website is dedicated to the dissemination and communication of the NatuRISE project, funded by the European Union under the Horizon Europe Framework Programme for Research and Innovation, Grant Agreement No. 101291407.

The NatuRISE consortium is committed to respecting your privacy and protecting your personal data. This policy explains what personal data may be collected through the NatuRISE website, why it is processed, how it is protected, and what rights you have as a data subject. The website is designed to allow visitors to access most content without providing personal data.

1–2 · Introduction and who is responsible

NatuRISE is implemented by a consortium of partner organisations under the coordination of Vrije Universiteit Amsterdam (VUA). For website-related processing, the relevant data controller(s) will be identified according to the specific processing activity and the applicable arrangements within the consortium.

3 · What personal data we collect

You can generally browse the NatuRISE website without providing personal information. Depending on how you interact with the website, we may collect:

Newsletter subscriptions
Name where provided, email address, subscription preferences and information necessary to manage your subscription.

Contact forms
Name, organisation, email address, other contact details you choose to provide, and the content of your message.

Event registration
Where registration is managed through an external service, the information collected depends on that provider’s registration form and privacy information.

Website usage
Browser and device information, date and time of access, pages visited, referring website, approximate geographic information and technical information required for security and functionality.

The exact information collected depends on the website hosting, security and analytics services used.

4 · Sensitive personal data

The NatuRISE website is not intended to collect special categories of personal data as defined by Article 9 GDPR, such as health information, racial or ethnic origin, political opinions or religious beliefs. Please do not provide such information through general contact forms or other website communication channels unless specifically requested for a legitimate project activity and accompanied by appropriate information.

5–6 · Purposes and legal bases

  • Responding to enquiries — to respond and, where appropriate, direct your enquiry to the relevant NatuRISE partner or project team.
  • Newsletter communication — to send project news, results, publications, events and other relevant project information.
  • Stakeholder engagement — to facilitate participation in activities, consultations and workshops.
  • Website operation and security — to operate, maintain and secure the website and prevent misuse.
  • Website improvement and statistics — where non-essential analytics are used, and only in accordance with applicable cookie and data protection requirements.

Legal bases: consent (newsletter, non-essential cookies, certain optional third-party services), legitimate interests (responding to enquiries, security, technical functionality, website improvement) and legal obligations.

7–10 · Newsletter, sharing, service providers, international transfers

Personal data are shared only where necessary — with relevant consortium partners, service providers supporting the website, newsletter, hosting, security or event registration, the European Commission or other competent authorities where required, and competent authorities where disclosure is required by law. We do not sell personal data or use it for third-party commercial marketing.

We aim to process personal data within the European Economic Area wherever possible. Transfers outside the EEA take place in accordance with the GDPR, on the basis of an adequacy decision or appropriate safeguards.

11–13 · Retention, your rights, complaints

We retain personal data only for as long as necessary for the purpose for which they were collected. Newsletter data are retained while you remain subscribed; contact enquiries only as long as reasonably necessary; event data according to the requirements of the relevant event; technical and analytics data according to the relevant service configuration.

  • obtain confirmation as to whether your personal data are being processed;
  • request access to your personal data;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal data, where applicable;
  • request restriction of processing, where applicable;
  • object to certain processing activities;
  • withdraw consent where processing is based on consent;
  • receive your personal data in a structured, commonly used and machine-readable format.

You also have the right to lodge a complaint with the competent supervisory authority. For the Netherlands this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14–16 · Cookies and consent

Cookies are small text files or similar technologies stored on your device when you visit a website. They can enable essential website functionality, remember preferences, analyse website use or embed content and services provided by third parties. Not all cookies require consent: technically necessary cookies may be used where required for the functioning of the website, while non-essential cookies and tracking technologies generally require prior consent under applicable ePrivacy rules.

Strictly necessary cookies
Required for the website to function properly, maintain security or remember essential privacy preferences. No consent required where genuinely necessary.

Preference cookies
Remember choices such as language or display preferences.

Analytics cookies
Help us understand how visitors use the website. Activated only where consent requirements have been met.

Third-party content cookies
Embedded videos, maps, audio players or social-media content may involve additional tracking technologies, loaded only after consent where applicable.

The cookie consent mechanism will allow users to accept non-essential cookies, reject them, or manage preferences by category — and to withdraw consent as easily as they provided it. Continuing to browse does not constitute valid consent.

17–19 · Third-party content, social media, website security

The website may link to external websites and embed third-party content — scientific repositories, video platforms, social media, event registration systems and partner websites. When you follow an external link, this policy no longer applies to the processing carried out by that website. Where embedded content can transmit information to a third party before the user interacts with it, the website will provide information and, where required, obtain consent before loading such content.

Links to social media profiles do not, by themselves, transfer personal data from the NatuRISE website to those platforms. If social-media plugins, embedded posts or other third-party functionality are used, these may involve additional processing by the relevant provider. Social media currently used by NatuRISE: LinkedIn, Bluesky.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction: secure HTTPS connections, access controls, software and security updates, appropriate hosting security, restricted access to personal data, and measures to prevent and detect unauthorised access. No internet-based system can be guaranteed to be completely secure.

20–21 · Changes to this policy, and contact

This Privacy and Cookie Policy may be updated where necessary — for example when website functionality changes, new services are introduced, the project uses different third-party providers, legal requirements change or data processing practices are updated. The latest version will always be published on this page, together with the date of the most recent update.

Project contact
NatuRISE project, Vrije Universiteit Amsterdam — [Project contact name], [Email address]

Data protection contact
[Name / organisation / email]