Privacy Policy

Last updated: 17 November 2025

1. Introduction

This Privacy Policy explains how the CURTAIN project website (the “Site”) processes personal data. The Site is part of an EU‑funded initiative to improve cancer literacy across Europe. In running the Site we collect a limited amount of personal information from visitors and take care to handle it lawfully and transparently.

2. Who we are

The Site is operated by Global Health Connector CLG, a not‑for‑profit company limited by guarantee registered in Ireland. Our registered office is at 20 Harcourt Street, Dublin, D02 H364, Ireland. If you have any questions about this policy or your data, you can contact us at contact@globalhealthconnector.com.

3. What data we collect

We collect and process the following types of data:
  • Information you provide voluntarily – When you use our contact form, we ask for your name, surname, email address, company and a message. If you sign up for our newsletter, we collect your email address and any preferences you share.
  • Usage and analytics data – We use Google Analytics to understand how visitors use the Site. This service collects anonymised information such as IP addresses, device and browser types, pages viewed and interactions.
  • Cookies – The Site uses cookies to remember your preferences and to facilitate analytics. We manage these through CookieYes, which also displays the cookie banner on the Site.
We do not knowingly collect sensitive personal data through the Site. The project plans to develop digital tools, including a Cancer Literacy Score and AI‑driven resources. Should these tools collect personal data, we will provide additional notices at the point of collection.

4. How we use your data and our legal bases

We process personal data only for specific purposes and rely on lawful bases set out in the General Data Protection Regulation.

Responding to enquiries and providing information

When you contact us via the website or sign up for our newsletter, we use your details to respond and to send you project updates. We rely on your consent for these communications. You may withdraw your consent at any time by contacting us.

Improving the Site

We use analytics data to understand how the Site is used so that we can improve its content and performance. We process this data based on our legitimate interests in running a well‑functioning website.

Project reporting and research

As an EU‑funded initiative, we may compile aggregated, anonymised statistics to report on the project’s progress and impact. These reports do not identify individual visitors.

5. Data sharing

We treat personal data confidentially and only share it when necessary:
  • Service providers – We use reputable third‑party providers for website hosting, email newsletters, Google Analytics and CookieYes. They act as data processors on our behalf and are bound by contractual data protection obligations.
  • Project partners – Members of the CURTAIN consortium may receive anonymised or aggregated data to evaluate the project’s effectiveness.
  • Legal requirements – We may disclose information if required to do so by law or by a competent authority.
We do not transfer personal data outside the European Economic Area unless appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.

6. Data retention

We keep personal data only for as long as necessary:
  • Contact and newsletter details – retained for up to 90 days after our last communication, unless you continue to receive newsletters or request longer retention for legitimate project interests.
  • Analytics data – retained in accordance with Google Analytics’ default settings, which currently keep data for up to 14 months.
  • Cookie data – retained for the duration set by CookieYes and the individual cookies; details are available in the Site’s cookie banner.
We will delete or anonymise data once it is no longer required.

7. Cookies

Cookies are small text files placed on your device to help the Site work and to analyse traffic. We use CookieYes to manage cookie consent and to provide a list of the cookies we use. You can review and adjust your preferences through the cookie banner when you first visit the Site or at any time by clicking the cookie settings icon.

8. Your rights

Under the GDPR you have the following rights:
  • Access – to ask whether we hold personal data about you and to receive a copy;
  • Rectification – to have inaccurate or incomplete data corrected;
  • Erasure – to request deletion of your data where there is no lawful reason for us to continue processing it;
  • Restriction – to ask us to suspend processing of your data in certain circumstances;
  • Object – to object to processing based on our legitimate interests;
  • Portability – to receive personal data you have provided to us in a structured, commonly used, machine‑readable format;
  • Withdraw consent – to withdraw your consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us using the details above. If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission.

9. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on the Site, with a new date indicating when changes were made.