Privacy Policy

CARDET (“us”, “we”, or “our”) operates the https://press.cardet.org website as part of the EU-funded project “CARDET Press”.

This website is an informational site: you do not need to create an account or log in to use it. This page explains the limited personal data we nevertheless process when you visit, why we process it, and the choices you have.

Effective date: 27/10/2026

ADDRESSED TO ALL DATA SUBJECTS

  1. About CARDET
  2. Our Privacy Commitment
  3. What Data We Collect and Process
  4. How We Use Data
  5. Use of Cookies and Other Digital Technologies
  6. Accessing Your Personal Information and Your Rights
  7. About Minors (Children)
  8. Sharing Personal Information Outside the European Union
  9. Data Security and Retention

  1. About CARDET

    The Center for the Advancement of Research & Development in Educational Technology Ltd (CARDET) is an independent, non-profit, non-governmental, research and development organization based in Cyprus. This Privacy Policy governs how we collect and process personal data in the context of the CARDET Press website, available at https://press.cardet.org.

    Data Controller. For the purposes of the GDPR, CARDET – Centre for the Advancement of Research and Development in Educational Technology Ltd, 29 Lykavitou Avenue, 1st Floor, Engomi, 2401 Nicosia, Cyprus, is the Data Controller for the personal data processed under this Policy. For any question about this Policy or about your personal data, and to exercise your rights, you can contact us at privacy@cardet.org.

  2. Our Privacy Commitment

    CARDET complies with all applicable privacy laws, including the EU’s General Data Protection Regulation (“GDPR”, Regulation (EU) 2016/679). “Personal Data” means any information relating to an identifiable natural person. We process your personal data only as described in this Policy and on the legal bases set out in Section 4.

    We do not collect Sensitive Personal Data (Special Categories) through this website, we do not use your data for automated decision-making or profiling, and we do not sell your data.

  3. What Data We Collect and Process

    You can browse this website without telling us who you are. We do not ask you to register and we do not create user accounts. However, a small amount of personal data is still processed – some of it automatically, some only if you actively choose to contact us:

    Data Source Used for
    Server log data (IP address, browser type and language, referring page, pages viewed, date and time of access) Recorded automatically by our web server when you visit Keeping the site secure and available, and diagnosing technical faults
    Website usage statistics (via Google Analytics – see Section 5) Collected only with your consent Measuring visits and improving the website
    Full name Checkout page Billing details
    Email address Checkout page Billing details
    Country Checkout page, Thank You page, Emails Calculate taxes and process billing / payments
    Telephone Checkout page, Thank You page, Emails Billing address
    Technical and log data (IP address, browser type are kept automatically by the site Recorded automatically when you use the site Keeping the site secure, preventing abuse and diagnosing technical faults
    Website usage statistics (via Google Analytics – see Section 5) Collected with your consent Measuring visits and improving the site

    Messages you send through the contact page are not stored on this website. They are delivered by email to the site’s contact mailbox and handled by the support team members responsible for CARDET Press – You can reach us at press@cardet.org.

  4. How We Use Data

    We use your data for the following purposes, each on a specific legal basis under Article 6(1) GDPR:

    # Purpose Legal basis
    a Delivering the website’s pages to your browser Art. 6(1)(f) – legitimate interests (making our project results publicly available)
    b Keeping the website secure, preventing abuse and troubleshooting faults Art. 6(1)(f) – legitimate interests (network and information security)
    c Replying to enquiries you send us through the contact form or by email Art. 6(1)(f) – legitimate interests (responding to the person who contacted us)
    e Measuring website visits and usage through Google Analytics Art. 6(1)(a) – consent (withdrawable at any time)

  5. Use of Cookies and Other Digital Technologies

    We use strictly necessary cookies required to keep the site working and secure – these do not require consent.

    We also use Google Analytics (Google LLC, United States) to understand how visitors use the website; as our Analytics property runs on GA4, individual IP addresses are not logged or stored by Google Analytics. Analytics cookies are loaded only after you consent via our cookie banner, where you can accept or reject them and change or withdraw your choice at any time via “Cookie settings”. Rejecting analytics cookies does not affect your use of the website. See our Cookie Notice, linked in the footer of every page, for the full list of cookies and their duration.

    Some pages may embed content hosted by third parties, such as videos, maps or social media feeds. When such content loads, the provider may set its own cookies and receive your IP address, and its own privacy policy then applies to that processing. We load embedded third-party content only after you consent to non-essential cookies.

  6. Accessing Your Personal Information and Your Rights

    By writing to us at privacy@cardet.org you may exercise your rights to:

    • Information about the personal data we process about you
    • Access to your personal data
    • Rectification of inaccurate or incomplete data
    • Erasure of your personal data
    • Restriction of processing
    • Data portability for data you have provided
    • Object to processing based on legitimate interests
    • Withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

    We will respond as soon as possible and in any event within one month of your request.

    If you believe your data is not handled lawfully, you may lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus) (www.dataprotection.gov.cy), or with the supervisory authority in your own EU country of residence.

  7. About Minors (Children)

    This website is intended for a general adult audience. We do not knowingly collect personal data from minors under the age of 18. If you believe a child has sent us personal data through the contact form, please write to privacy@cardet.org and we will delete it.

  8. Sharing Personal Information Outside the European Union

    Your data is accessed only by authorized CARDET Press staff and by processors acting on our documented instructions: LeaseWeb USA, Inc. (hosting the website, United States) and Google LLC (Google Analytics). These providers act solely as data processors, process personal data only on our documented instructions, and do not access, monitor, or use it for their own purposes.

    Recipients of your personal data. Your personal data is disclosed only to: (i) authorized CARDET Press staff; We do not otherwise disclose your personal data, and we do not sell it.

    These transfers to the United States take place under the EU-U.S. Data Privacy Framework (DPF), in which LeaseWeb USA, Inc. and Google LLC are self-certified and which the European Commission recognized as ensuring an adequate level of protection (adequacy decision of 10 July 2023). Where a provider is not DPF-certified, we rely on EU Commission-approved Standard Contractual Clauses. Our Google Analytics account operates under the Google Ads Data Processing Terms, accepted at account level (accepted 26 March 2019), under which Google acts as a data processor for Analytics data.

  9. Data Security and Retention

    We apply appropriate technical and organizational measures, including HTTPS, access controls limiting data to authorized staff, and regular platform updates.

    We keep each category of data only as long as it is needed:

    • Server logs: 6 months, after which they are automatically deleted.
    • Contact form messages: not stored on this website. The email sent to the site mailbox is deleted 12 months after your enquiry is resolved.
    • Google Analytics data: 24 months (user-level data) and 2 months (event-level data), in line with our standard Analytics configuration.

    After these periods the data is securely deleted or irreversibly anonymized. You may ask us to delete your data earlier at any time (see Section 6), and we will do so unless we are required to keep it for the legal or audit obligations described above.

Last updated: 27/10/2026