Privacy Policy

Privacy Policy

Last updated: 17 November 2025

1. Introduction

EDUXO (“EDUXO”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website www.eduxo.eu, subscribe to our newsletter, participate in our activities, or otherwise interact with us.

EDUXO complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable data protection laws in Italy and the European Union.

2. Data Controller

EDUXO APS
Registered office: Casalecchio di Reno (BO), Italy
Email: info@eduxo.it
Website: www.eduxo.eu

If you have any questions about this Privacy Policy or how we process your data, please contact us at the above address.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identification data: name, surname, date of birth, nationality.
  • Contact details: email address, phone number, postal address.
  • Professional or organisational data: position, organisation, country of work or study.
  • Membership or participation data: information you provide through forms, surveys, registrations, or event participation.
  • Technical data: IP address, browser type, operating system, and cookies when visiting our website.
  • Communication data: your correspondence with us via email, social media, or other means.

We only collect data that is strictly necessary for the purposes described below.

4. How We Use Your Data

We process your personal data for the following purposes:

  1. To manage your membership, event registration, or participation in EDUXO activities.
  2. To send newsletters, updates, or campaign information, when you have given us consent.
  3. To respond to your messages or requests submitted via our contact forms or by email.
  4. To manage partnerships, projects, or collaborations.
  5. To comply with legal obligations and ensure the proper governance of the organisation.
  6. To improve our website and communications, through analytics and performance cookies (only with consent).

5. Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

  • Your consent (Art. 6(1)(a) GDPR) – e.g. for newsletters or photos/videos of events.
  • Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) – e.g. event registrations or collaborations.
  • Legal obligations (Art. 6(1)(c) GDPR).
  • Legitimate interest (Art. 6(1)(f) GDPR) – e.g. to ensure organisational functioning and communication efficiency.

You can withdraw your consent at any time by contacting us at info@eduxo.it

6. How We Store and Protect Your Data

Your personal data is stored securely on password-protected systems and databases accessible only to authorised EDUXO staff or volunteers.
We take appropriate technical and organisational measures to prevent unauthorised access, alteration, disclosure, or destruction of your data.

We share your data for membership and fundraising purposes to:

  • Estratos Digital GmbH uses Stripe Payments Europe Ltd. payment services (C/O A&L Goodbody, Ifsc, North Wall Quay Dublin 1., Dublin 1, Dublin; Privacy Policy: https://stripe.com/en-gb-hu/privacy) as a provider of stripe Connect services.
  • Estratos Digital GmbH uses Stripe Technology Europe Ltd. (The One Building 1,Lower Grand Canal Street, Dunblin 2,Ireland); Privacy Policy: https://stripe.com/en-gb-hu/privacy) as a provider of authorised payment services. 
  • Estratos Digital GmbH uses Sendgrid (that is a service provided by Twilio Ireland Limited, a company registered in the Republic of Ireland, whose registered address is 3 Dublin Landings, North Wall Quay, Dublin 1, Ireland. DPA: https://www.twilio.com/en-us/legal/data-protection-addendum) as a directly integrated mass email sender of Lunda for receipts and transaction related automated emails.
  • Paypal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) as a provider of payment services.

Data is stored in the EU and will not be transferred outside the European Economic Area (EEA) unless adequate safeguards are in place.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal obligations.
In general:

  • Contact and membership data: kept for up to 5 years after your last interaction.
  • Event registration and communication data: up to 2 years.
  • Newsletter subscriptions: until you unsubscribe.

8. Sharing and Disclosure

We do not sell or rent your data.
We may share your personal data only with:

  • Service providers that assist us in website hosting, newsletter distribution, or event management (acting as Data Processors under GDPR).
  • Project partners or funders, only when necessary and in compliance with GDPR requirements.
  • Public authorities, if required by law.

All processors and partners are contractually bound to maintain confidentiality and data protection standards.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access – to obtain confirmation and a copy of your data.
  • Right to rectification – to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”).
  • Right to restrict processing.
  • Right to data portability – to receive your data in a structured, machine-readable format.
  • Right to object to processing based on legitimate interest.
  • Right to withdraw consent at any time.

To exercise your rights, please contact us.

If you believe your data has been misused, you have the right to lodge a complaint with your national data protection authority.

10. Cookies and Analytics

Our website uses cookies to improve user experience and analyse site traffic.
Essential cookies are necessary for website functionality. Non-essential cookies (e.g., analytics or marketing) are used only with your consent.

You can manage or disable cookies at any time through your browser settings or our cookie banner.

11. Newsletter and Communications

If you subscribe to our newsletter, we will use your email address only to send updates about EDUXO’s projects, campaigns, and opportunities.
You can unsubscribe at any time by clicking the “unsubscribe” link in any email or contacting us directly.

12. Photos, Videos, and Events

During our events, photos and videos may be taken for communication purposes.
You will always be informed in advance, and we will only publish identifiable images with your explicit consent or when taken in a public setting where consent is not legally required.

13. Updates to this Policy

We may update this Privacy Policy periodically.
The most recent version will always be available on our website with the “last updated” date clearly stated.