PRIVACY policy.

Last updated: April 2026

1. Data controller

The wildRISE website (wildrise.eu) is operated by the project consortium and the data controller for personal data collected through this site is:

• Asociación del Deporte Español (ADESP)
• VAT/CIF: G87376364
• Registered office: Calle Ferraz, 2, Moncloa-Aravaca, 28008 Madrid, Spain
• Email: info@adesp.es
• Phone: +34 910 80 08 85

Data Protection Officer (DPO): Consulting & Strategy GFM S.L. — contact: dpo@gfmservicios.com

2. What data we collect

We collect personal data you actively provide through this website:

• Contact form: name, email, organisation (optional), message.
• Pyrenees event registration: first name, last name, email, country, area of interest.
• Newsletter subscription: name, email, communication preferences.

We also collect technical data automatically when you browse the site:

• IP address (anonymised before storage)
• Browser type and version, operating system
• Pages visited, time spent, referring URL
• Cookie identifiers (see our Cookie Policy)

3. Legal basis and purpose of processing

We process your data based on the following legal grounds (Article 6 GDPR):

• Consent (Art. 6.1.a): for newsletter subscriptions and event registrations. You can withdraw consent at any time.
• Legitimate interest (Art. 6.1.f): for analytics, security and to respond to enquiries you send us.
• Legal obligation (Art. 6.1.c): for reporting obligations linked to the EU Erasmus+ funding (Project No. 101246075).

Specific purposes:

• Inform you about the wildRISE programme, the Pyrenees pilot event, and the Green Passport platform
• Respond to your messages and questions
• Manage event registrations and communications
• Analyse aggregated usage patterns to improve the website
• Comply with EU funding monitoring and reporting obligations

4. Your rights under GDPR

You have the following rights regarding your personal data:

• Access — get a copy of your data
• Rectification — correct inaccurate data
• Erasure ("right to be forgotten") — request deletion of your data
• Restriction — limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — oppose processing based on legitimate interest
• Withdraw consent — at any time, without affecting prior lawful processing

To exercise any of these rights, write to info@adesp.es or to our DPO at dpo@gfmservicios.com. We respond within 30 days.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD): www.aepd.es.

5. How long we keep your data

Data type	Retention period
Newsletter subscribers	Until you unsubscribe
Event registrants	Up to 12 months after the event
Contact messages	24 months
Project-related data (Erasmus+ obligations)	5 years after the end of the project (regulatory requirement)
Analytics data	14 months (then aggregated and anonymised)

6. Who we share data with

We do not sell or rent your personal data. We may share it with:

• Project consortium partners (listed on this site) when necessary for project execution, under data processing agreements that ensure GDPR compliance
• Technical service providers we rely on:
  • Hosting: Hostinger International Ltd. (servers within the EU)
  • Analytics: Google LLC (Google Analytics 4) — only if you consent via the cookie banner. Data is processed under Standard Contractual Clauses
• EU institutions and the EACEA for monitoring and audit obligations linked to project funding
• Public authorities when legally required (court orders, fraud investigation)

7. International data transfers

If any of our service providers are based outside the European Economic Area (EEA), we ensure transfers are protected by Standard Contractual Clauses approved by the European Commission, or other safeguards permitted under Articles 44–49 GDPR.

8. Security

We protect your data through technical and organisational measures: HTTPS encryption (SSL/TLS) for all transmissions, password hashing for admin accounts, restricted access to personal data on a need-to-know basis, regular backups, and security audits.

9. Children

This website is not directed at minors under 16. We do not knowingly collect data from children. If you become aware that a child has provided us with personal data, please contact us so we can delete it.

10. Cookies

For details on the cookies we use, see our Cookie Policy.

11. Changes to this policy

If we update this policy, we will post the new version here with a revised date. For substantial changes affecting how we use your data, we will notify newsletter subscribers by email and request renewed consent where required.

12. Funding disclaimer

The wildRISE project is co-funded by the European Union under the Erasmus+ programme, Project No. 101246075. Views and opinions expressed are those of the author(s) only and do not necessarily reflect those of the European Union or the European Education and Culture Executive Agency (EACEA). Neither the European Union nor EACEA can be held responsible for them.