Research group of Universidad Europea — Creative Campus
Legal information

Privacy policy

Last updated: September 2026

01.Data controller

  • Site owner: EcoBD Lab — Creative Ecosystems and BioDesign, a research group at the Universidad Europea de Madrid.
  • Address: Creative Campus · Calle María de Molina, 39 — Madrid (Spain)
  • Contact email: ecobdlab@gmail.com

02.What data we collect and why

This website is purely informational in nature. It does not require user registration or handle purchases. This is the data we process:

Contact form. When you write to us through the form we collect: full name, email address, institution (optional) and the content of your message. The sole purpose is to handle and respond to your enquiry.

Email. If you write to us directly at our contact address, we will process your data for the same purpose.

Anonymous visit count. We count which pages are visited and which website visitors come from using a tool installed on our own server (Koko Analytics). It uses no cookies and stores nothing on your device, and it does not record your IP address or your browser: only the page, the date and the referring website. It cannot identify you and is not shared with third parties, so it does not require your consent.

Usage statistics with Google Analytics. Only if you accept them in the cookie notice, we collect aggregated browsing data (pages visited, visit duration, referral source and device type) to understand which content is of interest and to improve the site. Details are in section 6.

We do not use this data to send commercial communications or newsletters, and we do not build profiles.

The legal basis for all processing is your consent (Art. 6.1.a GDPR):

  • For the form and email, the consent you give by voluntarily sending us your message.
  • For analytics cookies, the consent you expressly give in the cookie notice (Art. 22.2 of Spanish Law 34/2002 on information society services, LSSI). If you do not give it, they are not set.

You can withdraw your consent at any time, without retroactive effect and as easily as you gave it.

04.Data retention period

We keep messages only for as long as necessary to handle the enquiry and, at most, for 1 year from the last contact, unless a later relationship (for example, an academic collaboration) justifies keeping them for longer. Statistical data is kept in Google Analytics for a maximum of 14 months, and the anonymous visit count, which contains no personal data, for 3 years.

05.Recipients and data processors

We do not share your data with third parties, except where legally required. To run this site we use providers who act as data processors:

  • OVHcloud (France, EU) — web hosting for the site.
  • Google LLC (Gmail) — provider of the mailbox where messages from the form are received.
  • Google Ireland Limited (Google Analytics) — statistical measurement of the site, only if you accept analytics cookies.

Google services may involve international data transfers to the United States. Google LLC adheres to the EU-U.S. Data Privacy Framework, which covers these transfers.

06.Cookie policy

Cookies are small files that a website stores in your browser. Other technologies, such as the browser’s local storage (localStorage), work in a similar way; in this policy we call them all “cookies”.

Technical cookies (no consent required)

They are needed for the site to work or to remember a choice you have made. They are first-party, do not identify you and are not shared with third parties.

  • Your cookie choice (local storage) — remembers whether you accepted or rejected analytics cookies so we do not ask you again. Duration: 12 months.
  • Information notices (local storage) — remembers whether you have dismissed a site notice. Duration: until you clear your browser data.
  • WordPress session (wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie, wp-settings-*) — only for team members who log in to the admin panel. Duration: the session or up to 1 year.

Analytics cookies (only with your consent)

We use Google Analytics 4, a service provided by Google Ireland Limited, to obtain aggregated usage statistics. Google Analytics 4 does not log or store your IP address. These are third-party cookies and are only set if you click “Accept” in the cookie notice:

  • _ga — distinguishes visitors anonymously. Duration: 2 years.
  • _ga_* — keeps the state of the visit. Duration: 2 years.

More information in Google’s privacy policy. We do not use advertising or social media cookies.

The anonymous visit count described in section 2 does not use cookies or any other storage or identification technology on your device, which is why it does not appear in the cookie notice.

How to accept, reject or change your choice

On your first visit you will see a notice with “Accept” and “Reject” buttons. You can change your choice at any time from the “Cookie settings” link in the footer. If you withdraw your consent, we will stop using Google Analytics and delete its cookies.

You can also block or delete cookies in your browser settings: Chrome, Firefox, Safari and Edge.

07.Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to ecobdlab@gmail.com and stating which right you wish to exercise. Please include information that allows us to verify your identity.

If you believe we have not properly addressed your rights, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

08.Security

We apply reasonable technical and organisational measures to protect data: encrypted connection (HTTPS), restricted access to the contact mailbox and the admin panel, and regular backups.

09.Changes to this policy

Any change to this policy will be published on this same page with its update date.