1. Data Controller
Controller for the purposes of the GDPR, other data protection laws applicable in Member States of the EU and other provisions related to data protection is the SUN-DT Project Coordinator.
The controller responsible for the processing of personal data on this website is:
ESTELA
Rue de l’Industrie 10
B-1000, Brussels, Belgium
Website: https://www.sun-dt.eu/
Email: sun-dt@estelasolar.org
If you have any questions regarding data protection, you may contact us at the above contact details.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
a) Data Provided Directly by You
Name
Email address
Phone number
Company name
Any information submitted through contact forms, registration forms, newsletter subscriptions, or other website forms
b) Automatically Collected Data
When you visit our website, certain information is automatically collected:
IP address
Browser type and version
Device type
Operating system
Referring URL
Pages visited
Date and time of access
c) Cookies and Analytics
We use cookies and similar technologies to collect information about your interaction with our website. This may include:
More details can be found in our Cookie Policy.
3. Purpose of Processing
We process personal data for the following purposes:
To respond to inquiries submitted via contact forms
To provide requested services or information
To manage contractual relationships
To improve our website and user experience
To analyze website traffic and performance
To comply with legal obligations
To send newsletters or marketing communications (where consent has been given)
4. Lawful Basis for Processing
We process personal data based on the following legal grounds under Article 6 GDPR:
Consent (Art. 6(1)(a) GDPR) – for example, for analytics cookies and marketing communications
Performance of a contract (Art. 6(1)(b) GDPR) – when processing is necessary to fulfill a contract
Legal obligation (Art. 6(1)(c) GDPR) – where required by applicable law
Legitimate interest (Art. 6(1)(f) GDPR) – such as improving website functionality and ensuring security
Where processing is based on consent, you may withdraw your consent at any time with future effect.
5. Third-Party Tools and Data Transfers
We may use third-party service providers to support our website operations, including:
Hosting providers
Analytics providers (e.g., Google Analytics)
Email marketing tools
Embedded services (e.g., YouTube, Google Maps, social media plugins)
These providers may process personal data on our behalf and are contractually bound by Data Processing Agreements (DPAs) where required.
If data is transferred outside the European Economic Area (EEA), appropriate safeguards are implemented, such as:
Details about specific providers can be obtained upon request.
6. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
Contact form data: [e.g. for the project duration (36 months)]
Contract-related data: for the duration of the contract plus applicable statutory limitation periods
Analytics data: [e.g. for the project duration (36 months)]
Newsletter data: until consent is withdrawn
Where legal retention obligations apply, data will be retained in accordance with statutory requirements.
7. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent at any time (where consent is the legal basis)
To exercise your rights, please contact us at: sun-dt@estelasolar.org.
We may request proof of identity before responding to your request.
8. Complaint Mechanism
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority.
You may contact:
European Data Protection Supervisor (EDPS)
Bruxelles Headquarter
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
Telephone: +32 2 283 19 00
Email: edps@edps.europa.eu
Website: edps.europa.eu
You may also lodge a complaint with the supervisory authority in your country of residence within the EU.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.
10. Updates to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in legal requirements or our processing activities.
The latest version will always be available on this website.