Privacy Policy

This Privacy Policy (hereinafter, the “PRIVACY POLICY”) regulates, in general terms, the collection and processing of the personal data that you provide to us as a user of this website (hereinafter, the “WEBSITE”) by the co-controllers specified below (hereinafter, the “CO-CONTROLLERS”), including any services that may be made available via the WEBSITE. The foregoing shall apply notwithstanding any specific provisions that may be established in relation to particular sections, forms or services that are made available on the WEBSITE for the purposes of providing you with the relevant information and, where applicable, obtain your consent.

The CO-CONTROLLERS reserve the right to modify the PRIVACY POLICY in order to adapt it to changes of a legislative, jurisprudential and/or administrative nature, and in accordance with the practices that are carried out via the WEBSITE. Your rights and interests shall be taken into account at all times.

Under all circumstances, the CO-CONTROLLERS shall provide you with adequate technical resources to access the PRIVACY POLICY, in order to ensure full compliance with our obligation to inform, in accordance with the applicable regulations on the protection of data. 

Who is the data controller for your personal data?

The personal data that you provide to us herein and in other communications with us shall be processed by the following CO-CONTROLLERS:

Name: Anthesis Lavola
Address: Rambla de Catalunya, 6, planta 2, 08007 Barcelona, Spain
Tel: 938 51 50 55
Tax ID Code (CIF): VAT number: ESA58635269
Email address:
Name: Ecoinnovazione
Address: Via Massimo D’Azeglio 51,
c/o Studio Mele, 40123 Bologna, Italy
Email address:
Tel: +39 328 9870 609
Tax ID Code (CIF): VAT number: IT04669840284
Name: Tecnalia Research & Innovation
Address: Parque Científico y Tecnológico de Bizkaia
Astondo Bidea, Edificio 700 E-48160 Derio (Bizkaia)
Tel: 902 760 000
Tax ID Code (CIF): G48975767
Email address:

How have we obtained your data?

The data we process have been provided by you via the different forms you filled out while browsing the WEBSITE and/or via other channels (e.g. registering as a user of the WEBSITE).

If the personal data you provided pertain to a third party, you hereby guarantee that you have informed said third party of this PRIVACY POLICY and have obtained their authorisation to provide their data to the CO-CONTROLLERS for the purposes specified below. 

Where indicated (in the fields marked with an “ * ”), the personal data requested are mandatory. If you do not provide them, or the data you provide are incorrect, it will not be possible to process your request and/or provide the services requested.

The CO-CONTROLLERS are not responsible for ensuring the veracity of the data provided by the users. Under all circumstances, the users themselves are responsible for ensuring the accuracy and authenticity of the personal data they provide. The user undertakes to provide information that is complete and correct. The CO-CONTROLLERS shall not be held in any way liable for any damage or detriment that may derive from the use of said information.

However, the CO-CONTROLLERS shall be held liable for the veracity of the information that they themselves produce, and reserve the right to update, modify or remove the information contained on the WEBSITE and even to limit or refuse access to said information. The CO-CONTROLLERS shall be exempted from any and all liability with regard to any damage or detriment that the user may suffer as a result of any errors, defects or omissions in the information provided by the CO-CONTROLLERS, where such information originates from outside or public sources. 

What personal data do we collect?

The data processed by the CO-CONTROLLERS are data that you have provided to us while you were browsing the WEBSITE, via the relevant forms that we use to formalise our contact with you, and/or via email.

In particular, we process the following categories of data:

  • Identification and contact details (e.g. name, surname, email address, telephone number, country, date of birth, etc.).
  • Personal information: gender.
  • Professional/employment-related details (e.g. company and position).
  • Images recorded during the activities and events organised by TECNALIA and in which you have taken part.
  • Codes and keys that identify you as a registered user of the WEBSITE.
  • Internet browsing data (e.g. IP address, website visits, Wi-Fi network connections, location, etc.).
What is our purpose and legal basis for processing your data? 

Your personal data is processed pursuant to development of the PROJECT and to manage the involvement of the interested parties in same; and to promote and raise awareness of the development of the PROJECT and its content. More specifically:

  • To manage and process your registration as a user of the WEBSITE.
  • To manage your access to and use of the content and services that the CO-CONTROLLERS make available to you via the WEBSITE.
  • To process and manage any requests for information, suggestions and queries you may submit via the WEBSITE or via email, including queries regarding privacy and/or the exercising of your rights with regard to data protection.
  • To send you communications related to the Orienting project, via different means including electronic channels, provided you have given your consent.
  • To manage your subscription to our newsletter service and the sending of the corresponding electronic communications, provided you have given your consent.
  • To manage and raise awareness of the activities and events organised by the CO-CONTROLLERS, in cases where you have given your consent to same.

Under no circumstances shall the data collected be used to create profiles or make automated decisions.

In accordance with the applicable regulations, the processing of your personal data by the CO-CONTROLLERS is based on the following, as applicable: (i) your consent, which is given at the moment we collect the personal data you voluntarily provide to us via the mechanisms provided for this purpose on the WEBSITE; (ii) the legal relationship you have established with us; and (iii) compliance with legal obligations. 

We hereby remind you that, for cases in which processing is based on your consent, you may freely revoke this consent at any time and without charge, under the terms specified in the section on Rights. 

To whom do we disclose your data?

We hereby inform you that your personal data may be disclosed to the following third parties:

The public administrations, authorities and bodies to which the CO-CONTROLLERS may be legally obliged to disclose your data.

Other organisations that, together with the CO-CONTROLLERS, form part of the Consortium created to carry out the activities of the Orienting project (and are duly identified in the following link), for the purpose of dealing with your requests and queries and/or sending you communications related to the project. 

Additionally, we also inform you that your personal data may be disclosed to third parties that provide services to the CO-CONTROLLERS in their capacity as data processors. Some of these data processors have data-processing centres located outside the European Economic Area; consequently, your data may be subject to international transfer, in accordance with the applicable legal guarantees. In particular, ANTHESIS LAVOLA uses a third-party technology service (Mailchimp) located in the United States to manage the sending of commercial communications via electronic channels. The corresponding international data transfers are carried out under the aegis of standard contractual clauses for the transferring of personal data to data processors located in third-party countries approved by the European Commission.

No other international data transfers are envisaged.

How long will we keep your data?

As a general rule, personal data shall be kept while they remain necessary with regard to the purpose for which they were collected, or until you revoke your consent or request the erasure of your data (if this should occur beforehand). We shall also keep your data for the additional amount of time required to comply with any legal obligations that the CO-CONTROLLERS may be required to observe. 

Notwithstanding the above, we hereby inform you that the CO-CONTROLLERS have put in place internal data scrubbing policies designed to regulate the amount of time they keep the personal data they control, so that the data can be deleted when they are no longer necessary and/or suitable for the purpose for which they were collected.

What rights do you have and how can you exercise them?

The applicable regulations on data protection afford you a series of rights in relation to your personal data, which you may exercise while your data are being processed. These rights are detailed below:

Accessing your data: you have the right to access your data in order to find out which of your personal data we are processing. 

Requesting the rectification or erasure of your data: under certain circumstances, you have the right to rectify inaccurate personal data that pertains to you and which we are processing, and even to request that we erase your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Requesting the limitation of the processing of your data: under certain circumstances, you have the right to request that we limit the processing of your data, in which case we inform you that we shall only keep your data for the purposes of making or defending against any claims that may arise, as provided for in the applicable regulations on data protection.

Data portability: under certain circumstances, you have the right to obtain a copy of the personal data you have provided to us, in a structured, machine-readable, commonly used format, and to transfer said data to another controller.

Objecting to the processing of your data: under certain circumstances, and for reasons related to your personal situation, you have the right to object to the processing of your personal data; in which case, we shall cease to process them, unless they must be kept for overriding and lawful reasons or for the purposes of making or defending against any claims that may arise.

Likewise, you also have the right to withdraw your consent at any time; however, this shall not affect the lawfulness of the processing that was carried out based on the consent that was given prior to the withdrawal.

You may exercise these rights by sending a written request to any of the CO-CONTROLLERS at the postal address specified in the section titled “Who is the data controller for your personal data?”, or by sending an email to

Lastly, you are hereby informed that you may also file a claim with the competent supervisory authority.

Security measures

At all times, the CO-CONTROLLERS shall ensure that your data is processed under conditions of absolute confidentiality and in line with the obligation of secrecy, in accordance with the stipulations of the applicable data protection regulations. To this end, we shall adopt the necessary technical and organisational measures to ensure the security of your data and prevent them from being altered, lost, processed or accessed without authorisation, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

Cookie Policy

Additionally, we hereby inform you that the WEBSITE has a Cookie Policy, which can be accessed via the following link. Cookie Policy