Privacy Policy

Who We Are

CONNECT-CARE is a European research project consortium focused on developing innovative digital healthcare solutions for children and adolescents. Our website address is: https://connect-care.eu

Project Coordinator: Fundació Privada per a la Recerca i la Docència Sant Joan de Déu
Edifici SJD Pediatric Cancer Center Barcelona (PCCB)
C/ Santa Rosa, 39-57 4ª Planta – Edifici Docent
08950 Esplugues de Llobregat (Barcelona)
Spain
Location: Barcelona, Spain
Contact: info@connect-care.eu
Data Protection Officer: Eduard Puig, epuig@sjdhospitalbarcelona.org

Personal Data We Collect and Why

We are committed to protecting your privacy and minimizing data collection. This website does not use analytics, marketing, or tracking cookies. We use only strictly necessary technical cookies that are essential for the security and basic functioning of the website. These cookies do not collect personal data or track user activity.

Personal Data We Do NOT Collect

  • Analytics or tracking data about your browsing behavior
  • Marketing cookies or advertising identifiers
  • Social media tracking pixels
  • Third-party embedded content that tracks visitors
  • Newsletter subscriptions or email addresses (unless explicitly provided)

Personal Data We May Collect

Email Communications: If you contact us directly via email (info@connect-care.eu), we collect only the information you voluntarily provide in your email message to respond to your inquiry. We do not use contact forms on this website.

Server Logs: Our web server automatically logs basic technical information including IP addresses, browser types, and page requests for security and performance monitoring purposes. This data is not used for tracking or profiling.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process personal data based on:

  • Legitimate Interest: Technical logs for security and website functionality.
  • Consent: When you voluntarily contact us or provide information.

How Long We Retain Your Data

Contact Inquiries: Email communications are retained only as long as necessary to respond to your inquiry and resolve any follow-up questions, typically no more than 2 years.

Server Logs: Technical logs are retained for security monitoring purposes for a maximum of 12 months, then automatically deleted.

Who We Share Your Data With

We do not sell, trade, or share your personal data with third parties for marketing purposes. Any sharing of data is strictly limited and based on necessity:

  • Project Partners: Only when required to respond to an inquiry that you have voluntarily sent to us. For example, if you contact us via email and your question relates to work carried out by a specific CONNECT-CARE project partner, we may forward your message to the appropriate partner in order to provide an accurate response. No data is shared automatically.
  • Legal Requirements: When required by law or to protect our legal rights.
  • Technical Service Providers: The website is hosted on a server located in Germany, provided by Contabo GmbH. Contabo acts as a data processor under a Data Processing Agreement (DPA) in compliance with the GDPR. All data is stored and processed within the European Union. The hosting server may automatically process technical data such as IP addresses for security, performance, and operational purposes. No personal data is shared for analytics, profiling, advertising, or tracking purposes.

International Data Transfers

As a European project consortium, we primarily process data within the European Union. Any data transfers outside the EU are conducted with appropriate safeguards in compliance with GDPR requirements.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of personal data we hold about you
  • Right to Rectification: Correct any inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to data processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for data processing at any time

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us:

Email: info@connect-care.eu
Subject: Data Protection Request
Include: Your specific request and any relevant details to help us locate your data

We will respond to your request within 30 days as required by GDPR.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

  • Secure server infrastructure with SSL encryption
  • Access controls and authentication for administrative functions
  • Regular security updates and monitoring
  • Staff training on data protection principles

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority. In Spain, you can contact:

Agencia Española de Protección de Datos (AEPD)
Website: https://www.aepd.es/
Phone: +34 901 100 099

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

Project Funding Information

This project has received funding from the European Union under the Horizon Europe Framework Programme (Grant Agreement No. 101095654), and from the Instituto de Salud Carlos III under the 2024 call for International Collaboration Projects within the 2022–2024 Strategic Action in Health, co-funded by the European Union (File No. AC24/00136).

Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or European Health and Digital Executive Agency (HADEA). Neither the European Union nor the granting authority can be held responsible for them.


Last updated: November 5, 2025