Privacy policy

Last updated: 28 October 2026

Introduction

The protection of your personal data matters to the REWASH project. This policy explains how this website collects, uses and protects your information, in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

Data controller

IDENER RESEARCH & DEVELOPMENT AIE (IDENER.AI), coordinator of the REWASH project (Grant Agreement No. 101306851), is the data controller for the personal data collected through this website.

Address: C/ Gonzalo Jiménez de Quesada, 2, Tower, Floor 11, 41092 Sevilla, Spain
Contact email: media@rewash.eu

Data we collect

This website only collects the personal data you choose to send us:

Contact form: your name and email address, so that we can answer you; your organisation, if you give it; and the subject and message you write.
Newsletter: your email address and the date you subscribed. Each newsletter contains a tiny image that tells us whether and when you opened it, so we know how many readers it reaches. If your email app does not load images, nothing is recorded. We also record if an address stops working or asks not to receive more emails, so that we stop writing to it.

Your IP address is used only for a short time to block repeated submissions of the forms (protection against spam and bots); the website does not store it. Information collected through cookies is described in our Cookie policy.

Data storage and recipients

Website data: contact messages and newsletter subscriptions are stored in the database of this website, on a secure server located in the European Economic Area (EEA).
Email communications: messages sent through the contact form are also delivered to the project mailbox (media@rewash.eu), hosted by Google Workspace.

Access to these data is limited to authorised personnel of IDENER.AI, the administrators of this website, who need it for project management and for communication and dissemination activities.

The following service providers process personal data on behalf of IDENER.AI, only for the purposes described here and subject to appropriate data protection obligations:

Brevo (Sendinblue SAS, France) sends the emails of this website: newsletters, the welcome email and contact-form notices. It receives your email address and the content of those emails, and tells us when an address bounces so that we stop writing to it.
Google Workspace (Google Ireland Ltd.) hosts the project mailbox that receives contact-form messages.
Google Analytics (Google Ireland Ltd.) measures visits, only if you accept analytics cookies.

Google may process data outside the EEA; such transfers are covered by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

Personal data are not shared with the other partners of the REWASH consortium or with third parties, except where necessary to comply with legal, regulatory, audit or project obligations, including the requirements of the granting authority.

Data security

IDENER.AI applies appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, accidental loss or destruction. These measures follow recognised standards and good practices so that personal data are processed securely and lawfully.

In particular, the website is only served over an encrypted connection (HTTPS), access to personal data is restricted to a limited number of authorised IDENER.AI personnel with personal, password-protected accounts, in line with the project's Grant Agreement, Consortium Agreement and Data Management Plan, and the data are protected by secure storage, access-control and backup mechanisms.

Legal basis for processing

Consent, which you give by ticking the corresponding box before sending the contact form, by subscribing to the newsletter, and by accepting analytics cookies in the cookie banner.
Legitimate interest, to keep the website secure and to know how many readers the newsletter reaches.

Purpose of processing

Your data are used exclusively for:

answering your message or request;
sending you the newsletter, if you subscribed, and knowing how many readers it reaches;
managing the communication and dissemination activities of the project;
understanding how the website is used and improving it, only if you accept analytics cookies;
keeping the website secure and working properly.

Data retention period

Contact messages are kept only for as long as needed to answer your enquiry and manage any related project communication, and are deleted at the latest when the project ends (30 September 2030).
Newsletter subscriptions are kept until you unsubscribe. After that, your address is kept only to make sure you receive no further newsletters, unless you ask us to delete it completely. The record of which newsletters you opened is kept for as long as the project needs it to report on its communication activities, and is deleted at the latest when the project ends.
Analytics data are kept by Google Analytics for at most 14 months.

Public information on this website will be kept for at least five years after the end of the project. Data may be kept longer where required by legal, contractual or project obligations (for example, the requirements of the European Commission).

Your rights

Under the GDPR you have the right to:

Access: find out what data we hold about you.
Rectification: ask us to correct inaccurate data.
Erasure ("right to be forgotten"): ask us to delete your data.
Restriction of processing: ask us to limit how we use your data.
Portability: receive your data in a digital format.
Objection: object to processing based on legitimate interest.
Withdrawal of consent: withdraw your consent at any time, for example with the unsubscribe link in every newsletter or with Cookie settings at the bottom of every page.
Complaint: lodge a complaint with a data protection supervisory authority. In Spain this is the Spanish Data Protection Agency (www.aepd.es).

To exercise any of these rights, write to media@rewash.eu.

Third-party links

This website contains links to external websites run by third parties. The REWASH consortium is not responsible for the privacy practices or the content of those websites. We encourage you to read their privacy policies before giving them any personal data.

Changes to this privacy policy

This privacy policy may be updated to reflect changes to the website, the project's activities or the applicable legislation. The date at the top shows when it last changed; we recommend checking this page from time to time.