This Privacy Policy explains how EUFUA VZW collects, processes, stores and protects personal data submitted through this platform, and the safeguards it applies under the EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.
1. Data Controller
The data controller responsible for processing your personal data is:
EUFUA VZW
Rue Jacques de Lalaing 4, 1040 Bruxelles, Belgium
Email: info@eufua.eu
EU Transparency Register: 4047147102664-86
Belgian legal entity (VZW / ASBL) under Belgian law
2. What Personal Data We Collect
We collect the following categories of personal data through our platform:
| Category | Data collected | Purpose |
|---|---|---|
| Identity data | Full name, position, title | Contact identification |
| Contact data | Email address, phone number | Communication, notifications |
| Organisational data | Organisation name, EDRPOU, legal status, region | Institutional verification |
| Project data | Project descriptions, financial data, technical documentation | Project screening and pipeline management |
| Technical data | Security and session data; for public-site analytics, viewed page and country derived during the connection | Platform security and aggregate audience analytics |
3. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR Article 6:
- Art. 6(1)(a) — Consent: For sending communications, newsletters, and marketing materials.
- Art. 6(1)(b) — Contract: For processing project submissions and institutional engagement.
- Art. 6(1)(f) — Legitimate interests: For platform security, fraud prevention, and institutional verification.
- Art. 6(1)(f) — Legitimate interests (audience measurement): For limited, aggregate measurement of visits to public EUFUA pages in order to understand website use and improve the public service. This analytics activity is not used for advertising, profiling or automated decision-making.
4. How We Use Your Data
EUFUA processes personal data for the following purposes:
- Screening and assessment of project submissions
- Institutional verification of public partner organisations
- Facilitating introductions to EU institutions, IFIs, donors and investors
- Sending status notifications and platform communications
- Generating Project Fiche documents for institutional presentation
- Maintaining internal project pipeline and readiness scoring
- Measuring visits to public pages in aggregate, including the viewed page and country derived during the connection, for service administration and audience understanding
5. Data Sharing and Recipients
Subject to your explicit consent, EUFUA may share project information with:
- EU institutions (European Commission, EIB, EBRD, etc.)
- International financial institutions and development banks
- Bilateral donors and development agencies
- Private investors and infrastructure funds (on a non-binding basis)
We do not sell, rent or commercially exploit personal data. We do not share personal data with third parties for marketing purposes.
Metricool Software, S.L. acts as a processor for the limited public-site audience-measurement service described below. The Metricool website tracker receives only the technical information necessary to measure visits and page views; EUFUA does not intentionally provide project files, account content or confidential project records to Metricool.
6. Data Storage and Retention
Core account, project-submission, institutional-content and platform records are stored on Supabase infrastructure hosted in the EU (Frankfurt, eu-central-1, AWS). Aggregate public-site audience measurements generated through the Metricool website tracker are processed separately under Metricool's data-protection terms and are not part of EUFUA's core project database.
| Data type | Retention period |
|---|---|
| Project submissions | 5 years from submission (or until deletion request) |
| Account data | Duration of account + 12 months after closure |
| Communication records | 3 years |
| Technical/log data | 90 days |
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15): Request a copy of your personal data.
- Right to rectification (Art. 16): Correct inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your personal data.
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to withdraw consent (Art. 7): Withdraw consent at any time without affecting prior processing.
- Right to lodge a complaint: With the Belgian Data Protection Authority (APD/GBA): www.dataprotectionauthority.be
- Right to object (Art. 21): Object to processing based on legitimate interests, including public-site audience measurement, on grounds relating to your particular situation.
To exercise your rights, contact us at: privacy@eufua.eu
8. Cookies and Technical Data
Public pages use the Metricool website visit tracker for limited audience measurement. According to Metricool, this tracker does not use cookies, does not store information on the visitor's device and does not assign a unique identifier. The visitor's IP address is accessed during the connection only to derive information such as country and is not stored by Metricool; the tracker records the viewed page and provides anonymous, aggregated visit statistics. EUFUA uses these statistics to understand use of eufua.eu and improve the public website. They are not used by EUFUA for advertising, profiling or automated decision-making.
9. Data Security
EUFUA implements appropriate technical and organisational measures to protect personal data, including:
- End-to-end encrypted data transmission (TLS/HTTPS)
- Row-level security (RLS) policies on all database tables
- EU-hosted infrastructure (Frankfurt data centre)
- Access controls limited to authorised EUFUA personnel
10. International Data Transfers
Core EUFUA account and project data remains hosted within the European Union through Supabase. For public-site audience measurement, EUFUA uses Metricool Software, S.L., a provider established in Spain, as a separate processor. The Metricool website visit tracker is limited to aggregate audience measurement and, according to Metricool, does not store the visitor's IP address or assign a unique visitor identifier. EUFUA does not intentionally transmit submitted project files, account content or confidential project records to Metricool.
11. Changes to This Policy
EUFUA reserves the right to update this Privacy Policy. Material changes will be communicated via email at least 30 days before taking effect.
12. Contact
EUFUA VZW
Rue Jacques de Lalaing 4, 1040 Bruxelles, Belgium
privacy@eufua.eu
info@eufua.eu