Privacy & data protection
Consortia publishes a directory of organisations. This page explains exactly what we store, what is visible to the public, and how to get it changed or deleted.
Last updated 14 August 2026
Who is responsible
The controller for the processing described here is:
Asociația Nevo Parudimos
Piața Traian Vuia no. 1–4, 320059 Reșița, Romania
Email: office@nevoparudimos.ro
Consortia is run by Nevo Parudimos together with AI-Guide, which develops and maintains the platform.
What we collect, and what is public
Everything we hold about an organisation comes from the registration form. Nothing is bought, scraped or imported from elsewhere.
Published in the public directory
- Organisation: name, country, city, address, website, Facebook page, email address, phone number, logo, type of organisation, OID/PIC number, description
- Contact person: role only — the job title, without a name
- Profile data: fields of expertise, target groups, type of area, programmes applied to, Erasmus+ actions, European Solidarity Corps activities, projects delivered
- Application texts: the presentation of the organisation and its activities and experience
Shown only to other registered organisations
These are personal data, so they are not on the open web. They are visible only to organisations that have registered themselves, through the private link sent to them by email:
- Contact person: name, email address, phone number
- Key staff: the answer describing the skills and experience of the people who deliver projects
Visitors who are not registered can still get in touch — the profile page carries a message form that passes the message on without revealing the address.
Not published at all
- Whether you subscribed to the newsletter
- The status of your entry and the date it was submitted
- Internal notes made by our team
- Your access link, which is the key to your own entry and is only ever sent to the organisation email address you registered with
Legal basis
Publication rests on your consent, Article 6(1)(a) GDPR. You give it by ticking the consent box in the registration form; without it the form cannot be submitted. You may withdraw it at any time — see Your rights — which does not affect the lawfulness of processing before the withdrawal.
Who processes the data for us
- Supabase — database and file storage. The project runs in the EU (Frankfurt,
eu-central-1). - Vercel — serves the website. Server logs may briefly contain IP addresses for security and troubleshooting.
- Brevo — sends the confirmation and notification emails.
- Google (Gemini) — reads a website or an uploaded Partner Information Form when you ask it to, so the form can be filled in for you. This happens only on your request, and an uploaded file is read and discarded rather than stored.
Both act as processors under a data processing agreement. We do not sell data and we do not pass it to advertisers.
Cookies and tracking
The public site sets no tracking or analytics cookies and embeds no third-party trackers. A session cookie exists only in the staff area, and only for people who log in.
We do count visits, but without following anyone. Each page view is recorded with the page address and the site you arrived from — and a key built from your IP address and browser, hashed together with a secret that is replaced every night. That key cannot be turned back into an address, and the same visitor on two days produces two unrelated keys, so we can see how many people came without being able to recognise anybody. Your IP address itself is never stored. The figures stay on our own server; nothing is sent to Google Analytics or any comparable service, and raw records are deleted after a year.
How long we keep it
A published profile stays until you ask us to remove it, or until the directory is discontinued. Rejected registrations are deleted within 10 days — automatically, by a job that runs every night, not on request.
Your rights
Under the GDPR you may request access to your data, correction, deletion, restriction of processing, or a copy in a portable format, and you may object to processing or withdraw your consent.
The quickest route for all of these is an email to office@nevoparudimos.ro. We remove published profiles on request — no justification needed. You can also correct your own entry at any time using the private link from your confirmation email.
You also have the right to complain to a supervisory authority in the country where you live or work.