Privacy Policy

1. Introduction

This website is part of the Horizon Europe project Shift2DC, funded by the European Union’s Horizon Europe research and innovation programme under grant agreement no. 101136131.

We are committed to protecting your personal data and being transparent about how it is collected, used, and stored, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the ePrivacy Directive.

INESC ID – INSTITUTO DE ENGENHARIA DE SISTEMAS E COMPUTADORES, INVESTIGAÇÃO E DESENVOLVIMENTO EM LISBOA
https://www.inesc-id.pt/
shift2dc.dissemination@inesc-id.pt
Rua Alves Redol 9
1000 029 Lisboa I Portugal

2. Data processed and processing purposes

We may collect the following personal data:

  • Contact details (e.g., name, email, organisation, role)
  • Newsletter and event registration details
  • Messages or inquiries submitted via forms
  • Technical and usage data: approximate location (no full IP storage), device category, and usage metrics
    • Cookies are collected by GoDaddy and Google Analytics for technical and analytical purposes to understand how you interact with our website so we can enhance its quality. E.g. we collect ‘_ga’ cookie that enables us to distinguish one visitor from another and lasts for two years.

We process personal data for:

  • Responding to inquiries and requests
  • Managing newsletter subscriptions and event participation
  • Improving website functionality and user experience

Meeting legal and contractual obligations under Horizon Europe

3. Purpose and Legal Basis

  • Newsletter and event registration detail as well as optional cookies – your consent;
  • Other data processing: legitimate interest, specifically improving website functionality and security (technical and usage data); stakeholder management (contact details and messages) ,

When applicable: compliance with legal obligations.

4. Data Retention

  • Newsletter/contact data: until you unsubscribe or withdraw consent
  • Technical and usage data:
      • Cookie lifetime: up to 2 years
      • GA4 data retention: 14 months
  • Administrative/project-related data: until 5 years after project closure (as required by Horizon Europe rules)

5. Sharing of Data

Your personal data may be shared with:

  • Shift2DC consortium partners
  • The European Commission, CINEA, or appointed auditors (for reporting and verification)

6. Data Processors

  • Brevo / Sendinblue SAS (France) and its sub-processors, when applicable — based on the Data Processing Agreement: https://www.brevo.com/legal/termsofuse/#annex
    • Purpose: internet domain registration and web hosting services.
    • Data collected: first name, last name, and email for newsletter subscriptions
    • Legal basis: Consent
  • GoDaddy Inc. (E.U.-U.S. Data Privacy Framework) and its sub-processors, when applicable — based on the Data processing Addendum: https://www.godaddy.com/en/legal/agreements/data-processing-addendum
    • Purpose: Website traffic analysis
    • Data collected: Usage data
    • Legal basis: Legitimate interest (strictly necessary technical cookies) or user consent .
  • Google LLC / Google Analytics ((E.U.-U.S. Data Privacy Framework) — https://policies.google.com/privacy
    • Purpose: Website traffic analysis and performance measurement.
    • Data collected: Usage data (e.g., pages visited, time spent, device information, approximate location).
    • Legal basis: Legitimate interest (strictly necessary technical cookies) or user consent (depending on your cookie consent settings).
    • Data transfer: Data may be transferred outside the EU, subject to Standard Contractual Clauses.

We never sell or share your personal data for commercial purposes.

7. Data Transfers

We may transfer your personal data to third countries. Whenever we do so, we undertake to fulfil the provisions of the GDPR as applicable to the transfer of the concerned data. Currently, we only transfer data to third countries.

8. Data subject’s rights

Under GDPR, you have the right to:

  • Access, rectify, or erase your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Request data portability
  • File a complaint with your national Data Protection Authority

To exercise your rights, contact us at: shift2dc.dissemination@inesc-id.pt or dpo@inesc-id.pt

We implement technical and organisational safeguards such as access restrictions, secure storage, and confidentiality agreements with third parties.

We may revise this Privacy Policy. The most recent version will always be available

Cookie Policy

1. Acceptance

By accessing or using the Shift2DC website, you agree to these Terms & Conditions.

2. Permitted Use

You may only use the website for lawful purposes. You may not attempt to disrupt, damage, or gain unauthorised access to its systems.

3. Intellectual Property

All content, designs, and materials on the website are protected by copyright and intellectual property rights. They may not be copied, reused, or redistributed without prior written consent.

4. Disclaimer

The website is provided on an “as is” basis. We make no warranties regarding accuracy, completeness, or uninterrupted availability.

5. Limitation of Liability

Shift2DC and its consortium partners are not liable for damages resulting from the use or inability to use the website.

6. Amendments

We may update these Terms & Conditions at any time. Updates will be published on this page.

7. Contact

For privacy or legal inquiries, please contact us at:  shift2dc.dissemination@inesc-id.pt or dpo@inesc-id.pt