EQUIP‑G – Privacy Policy

1. Introduction

EQUIP‑G is a European research project that brings together gravimeter data and related services. We are committed to protecting the personal data of our visitors, users, and participants in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable national data‑protection laws.

This Privacy Policy explains what personal data we collect, why we collect it, how we store, protect and share it, your rights regarding your data, and how to contact us.

2. Personal Data We Collect

We do not collect sensitive data such as health information, biometric data, or political/religious beliefs unless you voluntarily provide them. In such cases, separate consent will be obtained.

3. Legal Basis for Processing

• Consent (Art. 6(1)(a)) – When you voluntarily submit your address via a CTA and tick the “I agree to receive communications” box.
• Contractual necessity (Art. 6(1)(b)) – Sending a confirmation email is necessary to complete the subscription process you initiated.
• Legitimate interests (Art. 6(1)(f)) – Processing IP addresses and usage data to protect the Site against fraud, abuse, and security threats, provided those interests do not override your fundamental rights.

4. How We Use Your Data

• Subscription Management – Store your email and postal address to confirm your subscription, send periodic newsletters, and provide updates on EQUIP‑G activities.
• Communication – Respond to enquiries you submit via contact forms.
• Analytics & Improvement – Aggregate, anonymised analytics (e.g., Matomo, Plausible) to understand visitor behaviour and improve the Site. No personally identifiable data is shared with analytics providers beyond what is strictly necessary.
• Security – Monitor for suspicious activity, prevent unauthorised access, and enforce our Terms of Service.

5. Data Retention

• Contact information – Retained while you remain subscribed or until you request deletion. If inactive for 24 months, we automatically purge the data, unless a longer period is required for legal obligations.
• Analytics data – Stored in an aggregated, pseudonymised form for up to 14 days (or longer if configured by the analytics provider).
• Log files (IP, device info) – Kept for a maximum of 30 days for security monitoring.

6. Your Rights

Under the GDPR you have the right to:

1. Access your data.
2. Rectify inaccurate or incomplete data.
3. Request erasure (“right to be forgotten”).
4. Restrict processing.
5. Data portability.
6. Object to processing based on legitimate interests or direct marketing.
7. Withdraw consent at any time (e.g., via the unsubscribe link in each newsletter).

To exercise any of these rights, contact our Data Protection Officer (see Section 9).

7. International Transfers

All personal data is processed within the European Economic Area (EEA). If a transfer outside the EEA becomes necessary (e.g., a cloud service located elsewhere), we will ensure an adequate level of protection through Standard Contractual Clauses or other approved mechanisms.

8. Third‑Party Recipients

We do not sell or rent your personal data to third parties.

9. Contact Information

Data Protection Officer (DPO)
EQUIP‑G Project Office
Paris, France
Email: contact@equip-g.eu

If you are unsatisfied with our response, you have the right to lodge a complaint with the supervisory authority in your EU member state.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with a revised “Effective date.” Continued use of the Site after such updates constitutes acceptance of the revised terms.