Privacy policy
NUTRIMIND website Privacy Policy
This Privacy Policy provides an overview of the personal information collected from you when visiting the NUTRIMIND website, how this information will be processed and used.
Your personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
For more information about the processing described in this policy, you are invited to contact the project through the address provided in section ‘Contacts’.
1. What personal data do we collect?
The information collected, including personal and non-personal data, could include:
Via Microsoft Forms, Google Forms, EUSurvey:
- Individual name and surname,
- Name of the organization (where applicable),
- Job title,
- Email address,
- Country of residence,
- Events participation details (i.e., sessions attended, arrival time, etc.)
Via Matomo (see privacy policy):
- IP address
- Location of the user
- Date and time
- Title of the page being viewed
- URL of the page being viewed
- URL of the page that was viewed prior to the current page
- Screen resolution
- Time in local timezone
- Files that were clicked and downloaded
- Link clicks to an outside domain
- Page-generation time
- Country, region, city
- Main language of the browser
- User agent of the browser
The NUTRIMIND website uses Matomo in a configuration in which tracking cookies are disabled. However, even when tracking cookies are turned off, analytics tools such as Matomo can sometimes still measure site usage using other technical details, such as your IP address, browser type, and browser settings, rather than a cookie. Matomo states that this method is intentionally not designed to recognise you personally (e.g., IP’s are anonymised) or to follow you across days or other websites (you can read more at https://matomo.org/faq/general/faq_157/). Even so, this is still information about your visit and privacy law gives you the right to object to being included in this measurement, whether or not cookies are involved. That is why we still offer an opt-out below.
To make the opt-out work, Matomo needs a way to remember that you clicked it; otherwise, it would have to ask you on every page. Right now, the only way it can remember that is with one small essential cookie. So, while our analytics do not use tracking cookies, the opt-out feature itself does use a cookie. This cookie is not used to track you. It only stores your opt-out choice so you do not have to repeat it. These cookies are not intended to collect your name, email, IP address, or other information that directly identifies you.
- MATOMO_SESSID – This is a temporary short-lived cookie that provides a nonce, a random number, which helps to prevent CSRF security issues while users opt-out of tracking.
- mtm_consent and mtm_consent_removed – When you’re asking for consent before tracking visitors, these two cookies may be created.
- _pk_testcookie – This cookie is used solely to check whether the visitor’s browser supports cookies. It does not contain any identifiers and is deleted immediately.
These cookies are not used for tracking or advertising, and they do not fall under the kind of cookies that normally require your consent. Because they are still technically cookies, we want to be upfront that “cookieless” analytics does not mean this site sets zero cookies at all.
Please note that if your browser is set to block every cookie from every site, including this one, Matomo has no other way to remember your opt-out choice. It will not carry over between visits, so you would need to click opt out again each time.
You may choose to prevent this website from aggregating and analysing the actions you take here. Doing so will protect your privacy, but will also prevent the owner, EUFIC, from learning from your actions and using that information to improve the experience for you and other users.
2. How do we collect your data?
We collect and process your data when you:
- Visit our website
- Complete a survey, a registration form or register for an event (on Microsoft Forms, Google Forms or EUSurvey)
3. How will we use your data?
The collection and subsequently processing of the personal information are necessary for the following purposes:
- To create and update relevant content on the website and social media channels
- To report on the progress of the project to the project funders, including aggregated information on website use
- To enable users to share website content through selected social media platforms
- To enable your participation in an event or activity, providing all the necessary information
4. What is the legal basis for the processing?
Online forms: The data subjects are invited to provide their personal information through an online form. The legal basis for processing depends on the purpose of the form:
- For surveys, the processing of personal data is based on consent.
- For event or activity registration, the processing of personal data is based on legitimate interests, where necessary to organise and manage your participation in the relevant event or activity.
Matomo: The processing of personal data with Matomo is based on legitimate interests. Processing your personal data helps us identify what is working and what is not on our website. For example, it helps us identify if the way we communicate is engaging or not and how we can organize the website’s structure better. Your data will be used only to improve the user experience on our website.
You can withdraw your consent at any time by writing an email to the following address: info@nutrimindproject.eu, however, that will not affect the lawfulness of the processing of your personal data prior to such withdrawal.
5. How do we store your data?
Your data are securely stored by EUFIC on a password-protected server in Belgium. Personal data are stored on secure servers subject to access controls and authentication mechanisms. Access is limited to authorised EUFIC personnel on a need-to-know basis, and appropriate measures are implemented to ensure the confidentiality, integrity and security of the data.
6. Who is responsible for the data processing?
The “European Food Information Council” (EUFIC), the NUTRIMIND project coordinator, is the controller for this processing operation.
For surveys or data collections run by different NUTRIMIND partners, please see the specific consent form for information about the applicable processing.
7. Recipients of personal data
Only authorised EUFIC staff working on the NUTRIMIND project are allowed to process the personal information. Other project partners will be able to access specific data if the purpose is specified and consent is given by users in advance.
All recipients of the data are reminded of their obligation not to use the data for any further purpose other than the ones for which they were collected.
The personal information collected will not be communicated to third parties, except where necessary for the purposes outlined and to the entities identified above or otherwise specified.
The collection and part of the processing of personal information are carried out through:
- Microsoft Forms https://privacy.microsoft.com/en-us/privacystatement/
- Google Forms https://policies.google.com/privacy?hl=en
- EUSurvey https://ec.europa.eu/eusurvey/home/privacystatement
- Matomo https://matomo.org/privacy-policy/
8. Social media interactions
The NUTRIMIND website contains links to the project’s social media profiles and provides links that allow users to share website content on selected social media platforms. These are external links and do not embed social media plugins or content on the website.
When you click on a social media or sharing link, you will leave the NUTRIMIND website and be directed to the relevant social media platform. Any processing of personal data by that platform is subject to its own privacy policy and terms. Content shared on social media may be visible to wider audience, depending on the settings of the relevant platform and your account.
The applicable data protection provisions of the relevant social media platforms may be accessed through the following links:
- Bluesky – https://bsky.social/about/support/privacy-policy
- LinkedIn – https://www.linkedin.com/legal/privacy-policy
9. Will the personal data be transferred to countries outside the European Economic Area without an adequate level of data protection?
Personal data may be processed by certain third-party service providers or project partners located outside the EU/EEA. Where personal data are transferred outside the EU/EEA, the project ensures that an appropriate transfer mechanism under Chapter V of the GDPR is in place. Transfers to countries recognised by the European Commission as providing an adequate level of protection may take place on the basis of the applicable adequacy decision, without requiring additional transfer safeguards. This includes transfers to project partners established in the United Kingdom and Switzerland, which are currently covered by EU adequacy decisions. Transfers to US-based organisations participating in the EU-U.S. Data Privacy Framework may similarly rely on the European Commission’s adequacy decision applicable to those organisations. Where no adequacy decision applies, another appropriate transfer mechanism, such as the European Commission’s Standard Contractual Clauses, will be used where applicable.
The NUTRIMIND website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
10. What are your data protection rights?
You have the right to access your personal data, which is the right to obtain confirmation about your data processed by EUFIC and the right to rectification of any inaccurate or incomplete personal data. You also have the right to object or restrict the processing or request the erasure of your personal data. Where the processing of your personal data is based on our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation. You have the right to withdraw consent, which can be exercised by writing to the data controller. Withdrawing consent will not affect the lawfulness of the processing of your personal data prior to the withdrawal. You may also have the right to data portability where the conditions set out in the GDPR are met. These rights may be subject to conditions and exceptions provided for under the GDPR and other applicable data protection legislation and may therefore not apply in all circumstances.
If you have any queries concerning the processing of your personal data, you may address them to the data controllers. You will find the address in the section ‘Contacts’ below. Requests will normally be answered within one month of receipt.
Information required for registration or participation: Where you register for an event or activity through the website, certain information may be mandatory in order to process your registration and organise your participation, such as your name and email address. The registration form will indicate which information is mandatory. If you do not provide information marked as mandatory, we may be unable to process your registration or provide the relevant details necessary for your participation. Information that is not marked as mandatory is optional and will not normally affect your ability to participate.
11. Changes to our privacy policy
NUTRIMIND keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on September 2026.
12. Contacts
European Food Information Council (EUFIC)
Rue de Belliard 2A, 1040 Brussels, Belgium
info@nutrimindproject.eu
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. In Belgium, complaints may be lodged with the Belgian Data Protection Authority at:
Autorité de protection des données
Rue de la Presse 35, 1000 Brussels, Belgium
contact@apd-gba.be