Legal
Privacy Policy
How the Sustainnovation Hub Cluster collects, uses and protects personal data in compliance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
The controller responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) is the Sustainnovation Hub Cluster, operated by its Cluster Management Organisation, World Gastronomy Network Ltd.
2. Personal Data We Collect
- Membership applications: organisation name, legal form, type, country, address, website, contact person, position, email, phone, expertise, sectors, programmes, motivation, contribution and expectations.
- Contact enquiries: name, email, organisation and message content submitted via the contact form.
- Account data: email and role for registered platform users, managed by the Cluster's authentication provider.
- Technical data: anonymised or pseudonymised analytics, IP address and basic browser information, where collected.
- Consent records: explicit confirmations given within application and enquiry forms.
3. Purposes and Legal Basis
- Contractual performance (Art. 6(1)(b) GDPR): processing membership applications and managing the membership relationship.
- Legitimate interests (Art. 6(1)(f) GDPR): responding to enquiries, consortium building, partner matchmaking and ecosystem communications.
- Consent (Art. 6(1)(a) GDPR): optional marketing communications and any processing not covered above.
- Legal obligation (Art. 6(1)(c) GDPR): record-keeping required by applicable law.
4. Recipients of Personal Data
Personal data is shared only with the Cluster Management team, authorised working-group coordinators and trusted service providers acting as processors under written agreement. Data may be disclosed to public authorities where required by law.
5. Retention Periods
- Membership application data is retained for the duration of membership and a reasonable period thereafter for administrative purposes.
- Contact enquiry data is retained for up to 24 months unless a longer period is needed to respond.
- Account data is retained while the user account remains active.
6. Your Rights
- Access, rectification, erasure and restriction of your personal data.
- Data portability and objection to processing based on legitimate interests.
- Withdrawal of consent at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint with the competent supervisory authority.
7. Data Security
The Cluster applies appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and regular review of processing activities. No method of transmission or storage is completely secure.
8. Changes to this Policy
This Privacy Policy may be updated to reflect changes in processing activities or legal requirements. The date of the last revision is indicated at the top of this page.
Questions about this document?
Contact the Cluster Management team at info@sustainnovationhubcluster.com or visit the Contact page.
Sustainnovation Hub Cluster is an independent European innovation ecosystem. It is not an EU institution. References to European programmes do not imply official endorsement.