This Privacy Policy explains how EUFUA VZW collects, processes, stores and protects personal data submitted through this platform, and the safeguards it applies under the EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.
1. Data Controller
The data controller responsible for processing your personal data is:
EUFUA VZW
Rue Jacques de Lalaing 4, 1040 Bruxelles, Belgium
Email: info@eufua.org
EU Transparency Register: 4047147102664-86
Belgian legal entity (VZW / ASBL) under Belgian law
2. What Personal Data We Collect
We collect the following categories of personal data through our platform:
| Category | Data collected | Purpose |
|---|---|---|
| Identity data | Full name, position, title | Contact identification |
| Contact data | Email address, phone number | Communication, notifications |
| Organisational data | Organisation name, EDRPOU, legal status, region | Institutional verification |
| Project data | Project descriptions, financial data, technical documentation | Project screening and pipeline management |
| Technical data | IP address, browser type, session data | Platform security and analytics |
3. Legal Basis for Processing
We process your personal data on the following legal bases under GDPR Article 6:
- Art. 6(1)(a) — Consent: For sending communications, newsletters, and marketing materials.
- Art. 6(1)(b) — Contract: For processing project submissions and institutional engagement.
- Art. 6(1)(f) — Legitimate interests: For platform security, fraud prevention, and institutional verification.
4. How We Use Your Data
EUFUA processes personal data for the following purposes:
- Screening and assessment of project submissions
- Institutional verification of public partner organisations
- Facilitating introductions to EU institutions, IFIs, donors and investors
- Sending status notifications and platform communications
- Generating Project Fiche documents for institutional presentation
- Maintaining internal project pipeline and readiness scoring
5. Data Sharing and Recipients
Subject to your explicit consent, EUFUA may share project information with:
- EU institutions (European Commission, EIB, EBRD, etc.)
- International financial institutions and development banks
- Bilateral donors and development agencies
- Private investors and infrastructure funds (on a non-binding basis)
We do not sell, rent or commercially exploit personal data. We do not share personal data with third parties for marketing purposes.
6. Data Storage and Retention
All personal data is stored on Supabase infrastructure hosted in the EU (Frankfurt, eu-central-1, AWS), ensuring EU data residency.
| Data type | Retention period |
|---|---|
| Project submissions | 5 years from submission (or until deletion request) |
| Account data | Duration of account + 12 months after closure |
| Communication records | 3 years |
| Technical/log data | 90 days |
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15): Request a copy of your personal data.
- Right to rectification (Art. 16): Correct inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your personal data.
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to withdraw consent (Art. 7): Withdraw consent at any time without affecting prior processing.
- Right to lodge a complaint: With the Belgian Data Protection Authority (APD/GBA): www.dataprotectionauthority.be
To exercise your rights, contact us at: privacy@eufua.org
8. Cookies and Technical Data
This platform uses only technically necessary cookies required for authentication and session management. We do not use tracking, advertising or analytics cookies.
9. Data Security
EUFUA implements appropriate technical and organisational measures to protect personal data, including:
- End-to-end encrypted data transmission (TLS/HTTPS)
- Row-level security (RLS) policies on all database tables
- EU-hosted infrastructure (Frankfurt data centre)
- Access controls limited to authorised EUFUA personnel
10. International Data Transfers
Personal data is stored exclusively within the EU. Any sharing with recipients outside the EU is performed only with your explicit consent.
11. Changes to This Policy
EUFUA reserves the right to update this Privacy Policy. Material changes will be communicated via email at least 30 days before taking effect.
12. Contact
EUFUA VZW
Rue Jacques de Lalaing 4, 1040 Bruxelles, Belgium
privacy@eufua.org
info@eufua.org