Privacy & Confidentiality Policy

European Project Agency®

Last updated: May 2026 · Compliant with EU GDPR Regulation 2016/679

The European Project Agency® is committed to protecting your personal data. This policy explains what information we collect, how we use it, and the rights you have under the General Data Protection Regulation (GDPR).

Data We Collect

  • Account information: name, email address, and password (encrypted).
  • Organisation details: company name, sector, country, VAT number, PIC number, and contact information provided in your member profile.
  • Usage data: pages visited, features used, and interaction logs to improve the platform.
  • Payment information: processed securely via Stripe. We never store your card details.

How We Use Your Data

  • To provide and personalise the EPA Portal services, including AI-powered funding advice.
  • To match your organisation profile with relevant EU funding programmes and calls.
  • To communicate important updates, deadline alerts, and platform notifications.
  • To process subscription payments and manage your account.
  • To comply with applicable EU regulations and legal obligations.

Your Rights (GDPR)

  • Right of access: you may request a copy of all personal data we hold about you.
  • Right to rectification: you can update or correct your data at any time from your profile settings.
  • Right to erasure: you may request full deletion of your account and associated data.
  • Right to portability: you can export your data in a structured, machine-readable format.
  • Right to object: you may opt out of non-essential communications at any time.

Data Security

  • All data is transmitted over HTTPS using TLS 1.2+ encryption.
  • Passwords are hashed using industry-standard algorithms and never stored in plain text.
  • Access to personal data is strictly limited to authorised personnel on a need-to-know basis.
  • We conduct regular security audits and vulnerability assessments.

Data Retention

  • Account data is retained for as long as your account remains active.
  • Upon account deletion, personal data is permanently removed within 30 days.
  • Anonymised, aggregated usage statistics may be retained indefinitely for analytics purposes.
  • Billing records are retained for 7 years as required by EU financial regulations.

Contact & Data Controller

  • Data Controller: European Project Agency®
  • For any privacy-related enquiries or to exercise your rights, please contact us via the Help Desk.
  • We aim to respond to all data requests within 30 days.
  • If you believe your rights have been violated, you have the right to lodge a complaint with your national data protection authority.
← Back to Dashboard

European Project Agency® is a trademark of Edacco Ecological Development and Collaborative Chain Organization VZW.

We use cookies

Cookies help this site function, measure usage, and support technical department. Manage your cookie preferences anytime. Learn more about our cookie policy.