Privacy Policy
Last Updated: 3 November 2025
1. Introduction
The European Consortium of Innovative Universities (ECIU) is committed to protecting your personal data and ensuring transparency in how we collect, use, and safeguard your information. This policy outlines our practices in accordance with the EU General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679.
2. Who We Are
The European Consortium of Innovative Universities (ECIU) is a network of forward-thinking universities across Europe, united by a shared commitment to innovation in education, research, and societal impact.
ECIU members work together to offer transnational learning opportunities, facilitating and enabling research and fostering innovation through various projects. All data processing activities conducted through ECIU platforms are governed by the principles of the EU General Data Protection Regulation (GDPR) and are coordinated in compliance with applicable national and European data protection laws.
3. Scope of This Policy
This policy applies to all personal data collected through our website (eciu.eu), in relation to marketing analytics, newsletters and communications.
4. Legal Basis for Processing
We process personal data under the following lawful bases: consent, contractual necessity, legal obligation, and legitimate interest.
5. What Data We Collect
We may collect name, email, university affiliation, IP address, browser data and cookies.
6. How We Use Your Data
Your data is used to facilitate registration to newsletters and events, communicate updates, improve user experience, and fulfill legal obligations.
7. Data Sharing and Transfers
We may share your data with ECIU member universities, technology providers, and EU-based partners. All transfers are GDPR-compliant.
9. Data Retention
We retain personal data only as long as necessary for the stated purposes or as required by law.
10. Your Data Protection Rights
You have the right to access, rectify, erase, restrict, and object to processing of your data. You may also request data portability and withdraw consent at any time.
11. Cookies and Tracking
We use cookies to enhance your experience. You can manage cookie preferences via your browser.
12. Newsletter(s) Subscriptions and Event Registrations
ECIU distributes the ECIU Newsletters and offers ECIU Events Registration, to inform various target audiences about ECIU updates, news, activities and events.
- In order to achieve the above scope and by participating, you as a user give your free consent*, to ECIU, as the Authorized Processor (contact details: first name, last name, email) to collect and process your Personal Data in accordance with the basic Principles governing the Legislative framework for the protection of Personal Data (General Regulation (EU) 2016/679 and Law Ν.125(I)/2018), i.e. the principles of lawfulness, fairness and transparency, purpose limitation, accuracy, storage limitation and integrity and confidentiality.
- ECIU processes the Personal Data collected during the subscription to the newsletter, in accordance with the legal obligation under the Regulation. According to Article 6. (a), “the data subject has given consent to the processing of his or her Personal Data for one or more specific purposes”.
Source, Collection and Categories of Personal Data
To achieve the above purpose and by being a recipient of the ECIU newsletters, you give your free consent to collect and process the following Personal Data concerning your person: your name, surname, email and university or institutional affiliation (optional). The collection and processing of Personal Data is facilitated via a registration form, which explicitly requests the consent of the user. Should the user deny consent, the Personal Data will not be collected or used.
Confidentiality and Security of Personal Data
Your Personal Data will remain secure. For the security of Personal Data, technical and
organizational measures are taken to protect them from accidental or illegal destruction, loss, alteration, unauthorized disclosure, or access.
Data Transmission
The newsletter subscription and event registration are administrated using the Marketing Module tool via Microsoft Dynamics 365. Microsoft is acting as a third party to facilitate this activity and data is handled also in line with Microsoft’s Privacy Policies, that can be found here (Microsoft Privacy Statement – Microsoft privacy). Additionally, ECIU uses Mailchimp as one of its newsletter service providers. Mailchimp complies with GDPR and ensures secure handling of personal data, including subscription preferences and email delivery analytics, Mailchimp’s Privacy Statement can be found here.
Exercise of Rights of Data Subjects
According to the Legislative framework for the protection of Personal Data you have the
following rights which you can exercise at any time within the time period referred to in the
above paragraph, "Data Retention", for which the data concerning you will be retained:
- Right of Access (Rule 15): You can request confirmation of the processing of your Personal Data, access, and other information.
- Right of correction (Rule 16): You can request the correction of inaccuracies or the completion of incomplete data by contacting the Commission secretariat.
- Right of Deletion (Rule 17): You have the right to request the deletion of your data under the terms of Rule 17 of the Rules.
- Right to restrict processing (Rule 18): You have the right to request that your data be restricted in the cases provided for in Rule 18 of the Rules.
- Right of objection (Rule 21 (1)): You have the right to object, at any time and for reasons related to your particular situation to the processing of Personal Data in accordance with the provisions of Rule 21 (1) of the Rules. You can exercise the above rights as well as any of your requests by contacting the Data Protection Officer (support@eciu.eu). You also reserve the right if you find that your Personal Data is being processed illegally or that your rights to your Personal Data have been violated. In addition, you have the right to revoke your consent at any time, without prejudice to the legality of the processing based on consent prior to its revocation.
13. Marketing Analytics
To better understand how visitors interact with our website and improve user experience, we use two marketing analytics tools: Plausible Analytics and Microsoft Clarity.
Plausible Analytics
Plausible is a privacy-friendly, open-source analytics tool that does not use cookies and does not collect personal data. All data is aggregated and anonymized, ensuring full compliance with the EU General Data Protection Regulation (GDPR). It helps us monitor general website usage such as:
- Page views
- Referring websites
- Device types and geographic regions (non-identifiable)
No data is shared with third-party advertisers or used for profiling.
Microsoft Clarity
Microsoft Clarity provides insights into user behavior through heatmaps and session recordings. It helps us understand how users navigate and interact with our site. While Clarity may collect usage data, it does so in accordance with GDPR and Microsoft's privacy standards. Data collected is used solely for analytical purposes and is not linked to identifiable individuals.
You can learn more about these tools at:
- Plausible Analytics Privacy Policy
- Microsoft Clarity Privacy Statement
14. Security Measures
We implement technical and organizational measures to protect your data, including encryption, access controls, and regular audits.
15. Contact Information
Data Protection Officer (DPO)
Email: info@eciu.eu