Privacy policy
Last updated: 28 August 2025
This policy explains how we process personal data on the DiCoSTEM-TT Project website.
1. Controller
University of Extremadura — DiCoSTEM-TT Project
Principal Investigator (PI): Francisco Luis Naranjo Correa
Contact: via the contact form
Postal address: University of Extremadura, Faculty of Education and Psychology, Avda. de Elvas s/n, 06006 Badajoz (Spain)
2. Purposes of processing
We process your data to:
- Contact & support: manage and respond to enquiries sent through the contact form.
- Security & maintenance: ensure service availability and prevent abuse (technical records and server logs).
3. Lawful basis
- Consent (Art. 6(1)(a) GDPR) to handle enquiries submitted via the form.
- Legitimate interests (Art. 6(1)(f) GDPR) for technical security and basic maintenance.
- Legal obligations where applicable.
4. Data processed
- Contact form: name, email address and message; plus any other information you voluntarily provide.
- Minimum technical data: IP address and technical metadata that may appear in server records and the form provider’s logs.
5. Source
Data are obtained directly from you via the form or your browsing.
6. Recipients & processors
Data may be accessed by the DiCoSTEM-TT team and, where appropriate, University of Extremadura services to manage enquiries.
The following service providers act as processors to operate this site:
- Website hosting: GitHub Pages.
- Forms: Microsoft Forms (Microsoft Ireland Operations Limited). These providers process data under our instructions and with appropriate safeguards.
7. International transfers
No international transfers outside the EEA are envisaged other than those inherent to the above services. Where applicable, they will rely on appropriate safeguards under the GDPR (e.g., Standard Contractual Clauses).
8. Retention
- Contact enquiries: up to 12 months from the last interaction or until you withdraw consent.
- Technical logs: for as long as necessary for security and maintenance.
9. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction, portability, and withdrawal of consent via the contact form (please mention “GDPR rights request”).
10. Children
If you are under 14, please do not submit this form without parental/guardian authorisation.
11. Cookies & similar technologies
This website does not use first-party cookies for advertising.
Integrated services (e.g., Microsoft Forms) may use technical cookies required for their operation. Refer to their policies for details.
12. Security
We implement appropriate technical and organisational measures to protect your data. However, no Internet transmission is completely secure; always use trusted channels.
13. Changes to this policy
We may update this policy to reflect legal or service changes. The current version will be published on this page.