Privacy policy

The international ObeTech project is funded with the ERASMUS+ Programme agreement number 2025-1-PL01-KA220-VET-000360579. The project will be executed between December 2025 and December2027.

The project delivers web applications (such as a learning management system, a website, and others) mainly to healthcare professionals. The project also communicates with such target groups in various ways to achieve its research goals.

This Privacy Policy sets out the criteria and the conditions under which the ObeTech project collects, processes, stores, and transfers your personal data, how the confidentiality of such information is ensured as well as any law and/or regulation implemented or enacted in accordance with the GDPR (General Data Protection Regulation).

The ObeTech project will be processing personal data for several specific purposes, such as, but not limited to:

for communicating with you via emails, newsletters, questionnaires, etc.

1. name
2. email address;
3. preferred language;
for creating and maintaining your user profile in our web applications (e.g. learning platform) and for application maintenance and for security reasons
1. the data as above, but also:
  1. nickname, username;
  2. profile picture;
  3. cookies;
  4. IP addresses;
  5. record (log) of actions taken within an application;
  6. learning outcomes and other data you decide to share via our web applications.
for website maintenance and security reasons
1. cookies;
2. navigation within the website;
3. IP addresses;
4. logs of actions.

Providing the information above is necessary and if you choose not to provide certain information, you may not be able to use certain services or participate in certain activities.

The purpose and means of processing your data are determined by seven joint data controllers from different European countries. Each data controller defined their contact point. The joint data controllers and their contact points are the following:

MUL – Medical University of Łódź, Al. Kościuszki 4, 90-419 Łódź, Poland. Contact to the data protection officer: email: iod@umed.lodz.pl
PCSS – INSTYTUT CHEMII BIOORGANICZNEJ POLSKIEJ AKADEMII NAUK, Poznańskie Centrum Superkomputerowo-Sieciowe, ul. Z. Noskowskiego 12-14, 61-704 Poznań, Poland. Contact to the data protection officer: tel. +48 618582044, email: dpo@ibch.poznan.pl
CIRCEULAR PARTNERS LIMITED, 123 Triq Melita, VLT1233 Valletta, Malta. Contact to the data protection officer: tel. +35 677380334, email: info@circeular.com
ASSOCIATION FOR THE SUPPORT AND PROTECTION OF PUBLIC HEALTH PROMITHEAS, 24-26 Chalkokondyli street, P.C. 10432 Athens, Greece. Contact to the data protection officer via email: info@promitheasngo.com
SLFS – Trade Union of Serbian Doctors and Pharmacists, str. Maglajska 32/8, 11000 Belgrade, Serbia. Contact to the data protection officer: tel. +38 1112665171, email: sindikatlfs@gmail.com (with a note for Data protection officer).

Your personal data will be processed on the basis of your consent.

Due to the nature of the applications being used some data (name and email) may be visible to other users of the applications (e.g. your name and your posts in a forum).

Your personal data will be processed at least until the end of the project (currently planned for December 2027), or as long as the web application services are provided (currently planned at least three years since the project ends). After this period your personal data will be anonymised and used only for statistical purposes.

To ensure the security of your personal data, we have in place the following measures:

minimisation and pseudonymization of personal data we collect;
multi-layers of firewalls to avoid the unauthorised external access;
managing, limiting and controlling access to personal data;
backup and redundancy;
regular testing of the effectiveness of the measures implemented;
safety and encrypted communication channels.

You have the right to:

request access to your data;
ask us to rectify information;
withdraw your consent which is not affecting the lawfulness of the processing based on the consent before its withdrawal;
request the deletion of your account and data.

Those rights can be exercised by contacting any of the contact points listed in section “Data Controller”. Additionally, you have the right to lodge a complaint with a supervisory authority from any of the countries listed in section “Data Controller”.

This Privacy Policy may be reviewed and updated from time to time – in such case the Privacy Policy will be labelled as “Revised (date)”. The initial version of this notice was created in June 2026.