Last updated: 1 October 2026
Who is responsible
The data controller is Associazione culturale Next, Senigallia (AN), Italy, coordinator of the Erasmus+ project Agents of Change (KA210-YOU) on behalf of the consortium with Bene Futuro (Pesaro, Italy) and the European Future Skills Institute (Münster, Germany).
For any privacy question or request, write to info@agentsofchange.eu.
Visiting this website
The public website uses no analytics, no advertising and no tracking or profiling cookies. Fonts are served from our own domain, so your browser does not contact third parties when you read the pages.
Like every website, our hosting provider automatically processes technical data (IP address, browser type, date and time of the request) to deliver the pages and protect them from abuse. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). These logs are kept only for a short period by the provider.
Writing to us
If you email us, we use your address and the content of your message only to reply and to follow up on your request, for as long as needed for that purpose. Legal basis: your request and our legitimate interest in answering (Art. 6(1)(b) and (f) GDPR).
A.C.E. — the partner area
A.C.E. (Agents of Change Environment) is reserved for staff of the partner organisations. To manage the project we process:
- name, email address, organisation and role of each member;
- sign-in data and a technical session cookie, strictly necessary to keep you signed in;
- project activity: tasks, status changes, notes and the person who made them;
- documents uploaded to the shared project folder, with the name of the person who uploaded them;
- emails we send you: sign-in links, invitations and deadline reminders.
Purpose, legal basis and retention for A.C.E.
We use these data only to coordinate the project and to meet the reporting obligations of the Erasmus+ grant. Legal basis: the performance of the partnership and grant agreements and our legitimate interest in managing the project effectively (Art. 6(1)(b) and (f) GDPR).
Accounts and activity data are kept for the duration of the project and for the period required by Erasmus+ audit and reporting rules, then deleted. A member can ask to be removed at any time.
Service providers
We rely on these providers, acting as data processors on our behalf:
- Vercel Inc. — website hosting;
- Supabase Inc. — A.C.E. database and sign-in, on servers in the European Union (Ireland);
- Resend Inc. — delivery of sign-in and reminder emails;
- Google — storage of project documents in Google Drive.
Transfers outside the EU
Some providers are based in the United States. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
Hackathons
When you apply to take part in a hackathon, we will give you a specific privacy notice at that moment, covering registration, the event and any photos or videos.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Write to info@agentsofchange.eu: we will reply within one month.
You also have the right to lodge a complaint with a supervisory authority — in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority of the country where you live or work.
Changes
We will update this policy when our services change. The date at the top shows the latest version.