EUNOMIA Research Center, referred to as “EUNOMIA RC”, “we”, “us” or “our”, respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use and protect personal data when you visit our website, contact us or interact with our online services.

EUNOMIA RC is a non-profit organisation based in Cyprus, established in 2026, operating as an independent research and policy hub focused on the societal, regulatory and ethical dimensions of digital transformation.

1. Who we are

EUNOMIA Research Center
Adamantiou Korai 7
6010 Larnaca
Cyprus

Email: info@eunomiarc.eu
Telephone: +357 7000 3232
Website: eunomiarc.eu

For the purposes of the General Data Protection Regulation, GDPR, EUNOMIA RC acts as the data controller for the personal data described in this Privacy Policy.

2. Personal data we collect

We may collect and process the following types of personal data:

Information you provide to us

When you contact us through our website, email or telephone, we may collect:

• Your name
• Your email address
• Your telephone number, if provided
• Your organisation, if provided
• The content of your message or enquiry
• Any other information you choose to provide

Website usage information

When you visit our website, we may collect limited technical and usage information, such as:

• IP address
• Browser type and version
• Device type
• Pages visited
• Date and time of visit
• General website interaction data

This information may be collected through necessary website technologies and, where you give consent, through Google Analytics.

3. How we use your personal data

We use personal data for the following purposes:

• To respond to your enquiries
• To communicate with you about our work, activities or services
• To provide information you request from us
• To manage and improve our website
• To understand how visitors use our website
• To maintain website security and performance
• To comply with legal obligations
• To protect our legitimate interests, where appropriate

4. Legal basis for processing

We process personal data only where we have a lawful basis to do so under the GDPR. Depending on the situation, we may rely on:

Consent

For example, when you consent to the use of Google Analytics cookies or voluntarily submit information through a form.

Legitimate interests

For example, to respond to enquiries, maintain website security, improve our services and manage our organisation, provided that your rights and freedoms do not override those interests.

Legal obligation

Where processing is necessary for compliance with applicable legal requirements.

Contractual necessity

Where processing is necessary in connection with a service, collaboration, project or request involving you or your organisation.

5. Contact forms and enquiries

If you submit an enquiry through our website, we will use the information you provide only to review and respond to your message.

We do not use contact form submissions for unrelated marketing purposes unless you have clearly consented to this.

6. Google Analytics

Our website uses Google Analytics to help us understand how visitors use the website and how we can improve it.

Google Analytics may collect information such as pages visited, time spent on the website, device information, browser information and general location information based on your IP address.

Google Analytics cookies are used only where you have provided consent through our cookie banner or cookie settings.

You can withdraw or change your cookie consent at any time through the cookie settings available on our website.

7. Cookies

Our website uses:

• Strictly necessary cookies required for the website to function properly
• Analytics cookies, including Google Analytics cookies, where you give consent

More information is available in our separate Cookie Policy.

8. Sharing of personal data

We do not sell your personal data.

We may share limited personal data with trusted service providers where necessary for the operation of our website and services. These may include:

• Website hosting providers
• Website maintenance providers
• Email and communication providers
• Analytics service providers, such as Google Analytics

Where service providers process personal data on our behalf, we require them to process it securely and only for the purposes agreed with us.

9. International data transfers

Some service providers, including Google, may process data outside the European Economic Area.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards required under GDPR, such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.

10. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

Contact enquiries are usually kept for as long as needed to respond to the enquiry and manage any related communication.

Website analytics data is retained according to the settings applied in Google Analytics and our cookie management tools.

We may retain certain information for longer where required by law or where necessary to protect our legitimate interests.

11. Your rights

Under the GDPR, you have rights in relation to your personal data, including the right to:

• Request access to your personal data
• Request correction of inaccurate personal data
• Request deletion of your personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Withdraw consent at any time, where processing is based on consent
• Request data portability, where applicable
• Lodge a complaint with a data protection authority

To exercise your rights, you may contact us at: info@eunomiarc.eu

12. Right to complain

You have the right to lodge a complaint with the competent data protection authority in Cyprus: Office of the Commissioner for Personal Data Protection, Cyprus.

We would appreciate the opportunity to address your concerns first, so you are welcome to contact us before submitting a complaint.

13. Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet or method of electronic storage is completely secure.

14. Links to other websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content or security of those websites.

We encourage you to read the privacy policies of any external websites you visit.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “Last updated” date.