Last updated: 14 Sep 2026

Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored and protected when you visit www.renewchem.eu (the "Website"), the official website of the RenewChem project. It also sets out the rights you have over your personal data and how you can exercise them.

RenewChem is an Innovation Flagship Action co-funded by the European Union through the Circular Bio-based Europe Joint Undertaking (CBE JU) under Grant Agreement No. 101291992. We are committed to processing personal data lawfully, fairly and transparently, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and applicable national legislation.

We process as little personal data as possible. We do not sell personal data, we do not use it for advertising, and we do not build profiles of visitors to this Website.

1. Who is responsible for your data

The Website is operated on behalf of the RenewChem consortium by Magfi, which leads Work Package 5 (Dissemination, Communication and Exploitation) and acts as data controller for the personal data described in this Policy.

Data controller	Magfi
Registered address	Magfi ltd “MedSea” Triq L-Arzell 16, Spielberg 2, Marsaskala, MSK 3410, Malta (EU)
Email	info@renewchem.eu
Project coordinator	Catalyxx Procesos Catalíticos, Spain

Where personal data is shared with other members of the consortium for project purposes, each partner remains responsible for the data it processes under its own privacy arrangements. Partner organisations are listed on the About page.

2. What personal data we collect

We collect personal data in two ways: data you actively give us, and technical data collected automatically when you visit the Website.

2.1 Data you provide to us

When you complete the contact form on the Website, we collect the information you enter into it. This is currently:

• your name;
• your email address;
• the subject of your enquiry;
• the content of your message, including any personal data you choose to include in it.

Please do not include sensitive personal data in the free-text message field. We do not need it, and we ask you not to send it. This includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, or data concerning a person's sex life or sexual orientation.

If you contact us directly by email rather than through the form, we will hold your email address and the content of your correspondence on the same basis described in this Policy.

2.2 Data collected automatically

Like almost all websites, our web server automatically records certain technical information each time a page is requested. These server logs may include:

• your IP address, which may be truncated or anonymised;
• the date and time of the request;
• the page or file requested;
• the HTTP status code returned;
• the referring page, where one exists;
• your browser type, version and operating system.

This information is generated as a normal part of operating a web server. It is used to keep the Website secure and available, to detect and investigate technical faults, and to identify abusive traffic such as automated attacks. It is not used to identify individual visitors and is not combined with any other data set.

2.3 Data we do not collect

We do not operate advertising networks on the Website, we do not use cross-site tracking technologies, and we do not share visitor data with data brokers. We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

3. Why we process your data and on what legal basis

Under the GDPR, every processing activity must have a legal basis. The table below sets out each purpose and the corresponding basis under Article 6(1) GDPR.

Purpose	Data used	Legal basis
Responding to enquiries submitted through the contact form or sent by email	Name, email address, subject, message	Consent — Article 6(1)(a); or legitimate interest in responding to correspondence — Article 6(1)(f)
Operating, securing and maintaining the Website	Server log data	Legitimate interest in network and information security — Article 6(1)(f)
Complying with reporting obligations towards the CBE JU and the European Union	Aggregated, non-identifying statistics on dissemination activity	Legal obligation and performance of a task carried out in the public interest — Article 6(1)(c) and 6(1)(e)
Establishing, exercising or defending legal claims	Any relevant data, only where strictly necessary	Legitimate interest — Article 6(1)(f)

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew it.

4. How long we keep your data

We keep personal data only for as long as is necessary for the purpose for which it was collected, and for as long as we are required to keep it under the Grant Agreement or applicable law.

Contact form submissions	Retained for up to 24 months after the enquiry is closed, then deleted, unless the correspondence forms part of project documentation that must be retained.
Email correspondence	Retained in line with the operating partner's internal records policy, and in any case no longer than necessary.
Server logs	Retained for a short period for security and diagnostic purposes, typically no more than 5 days, then overwritten or deleted.
Project records	Documents forming part of the project record may be retained for the period required under the Grant Agreement, including any audit period following the end of the project.

5. Cookies and similar technologies

A cookie is a small text file placed on your device by a website. Some cookies are necessary for a site to function; others are used for statistics or for content provided by third parties.

When you first visit the Website, a consent banner is displayed. Only strictly necessary cookies are set by default. No analytics, marketing or third-party cookies are placed on your device unless and until you give your explicit consent. You may change or withdraw your choice at any time through the cookie settings link in the footer of every page.

5.1 Strictly necessary cookies

These are required for the Website to operate correctly and cannot be switched off. They include cookies that record your cookie preferences, cookies that maintain a session while you complete a form, and cookies set by the platform for security purposes. They do not store information that identifies you personally for any other purpose.

5.2 Functional and statistical cookies

Where used, these help us understand how the Website is used in aggregate — for example, which pages are most visited — so that we can improve it and report on dissemination activity. They are set only with your consent.

5.3 Third-party cookies from embedded content

Some pages contain content hosted by third parties. When that content loads, the third party may set cookies or process technical data. This is explained in Section 6.

5.4 Managing cookies in your browser

Independently of our consent banner, you can configure your browser to refuse cookies, to delete cookies already stored, or to warn you before a cookie is set. Please note that blocking strictly necessary cookies may prevent parts of the Website from working properly. Instructions are available in the help documentation of your browser.

6. Embedded video content (YouTube)

The Website includes video content hosted on YouTube, a service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

When a page containing an embedded video is loaded, and where you have accepted the corresponding cookies, your browser establishes a connection to Google's servers. In doing so, Google may receive technical information including your IP address, the address of the page you are visiting, your browser type and operating system, and your device settings. If you are signed in to a Google account at the time, Google may associate this activity with that account.

This processing is carried out by Google as an independent controller and is governed by Google's own privacy terms, which we do not control and cannot amend. We recommend reviewing them at policies.google.com/privacy.

To limit this processing, embedded videos on the Website are served through YouTube's privacy-enhanced mode where technically possible, which means that Google does not store information about visitors unless a video is actually played. Where a cookie consent mechanism is in place, video embeds are blocked until consent has been given.

If you prefer not to allow any connection to Google's servers, you may decline the relevant cookie category, or watch the video directly on the RenewChem YouTube channel instead.

7. Who has access to your data

Access to personal data submitted through the Website is restricted to the members of the RenewChem communication team who need it in order to respond to your enquiry, and to authorised technical staff maintaining the Website.

We may share personal data with the following categories of recipient:

• Consortium partners, where your enquiry concerns their work and needs to be forwarded in order to be answered properly.
• Service providers acting as processors, including our hosting provider and email service provider. These providers act only on our documented instructions and are bound by a data processing agreement in accordance with Article 28 GDPR.
• The European Union and the CBE JU, where required under the Grant Agreement. Reporting of this kind is normally carried out using aggregated, non-identifying data.
• Competent authorities, where we are under a legal obligation to disclose information.

We do not sell, rent or otherwise make personal data available to third parties for commercial purposes.

8. Where your data is stored

The Website is hosted on infrastructure located within the European Union. The production server is located in Lithuania and backups are stored in France. Personal data submitted through the Website is therefore processed and stored within the European Economic Area.

Where a service provider processes data outside the EEA — for example, in connection with embedded third-party content as described in Section 6 — such transfers take place on the basis of an adequacy decision of the European Commission, standard contractual clauses, or another transfer mechanism permitted under Chapter V of the GDPR.

9. How we protect your data

We apply technical and organisational measures appropriate to the risk, in accordance with Article 32 GDPR. These include:

• encryption of all traffic between your browser and the Website using TLS, with automatic redirection from unencrypted connections;
• restricted administrative access, granted on a need-to-know basis;
• regular application, plugin and security updates;
• automated daily backups held separately from the production environment;
• firewall filtering and protection against automated intrusion attempts;
• monitoring of availability and integrity.

No method of transmission or storage is completely secure. While we take the protection of your data seriously, we cannot guarantee absolute security. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where required, inform you directly.

10. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Right of access — to obtain confirmation of whether we process your data and, if so, to receive a copy of it together with information about the processing (Article 15).
• Right to rectification — to have inaccurate data corrected and incomplete data completed (Article 16).
• Right to erasure — to have your data deleted where one of the grounds in Article 17 applies, sometimes referred to as the right to be forgotten.
• Right to restriction of processing — to require that we limit the way we use your data in the circumstances set out in Article 18.
• Right to data portability — to receive the data you provided in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible (Article 20).
• Right to object — to object at any time, on grounds relating to your particular situation, to processing based on legitimate interest (Article 21).
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
• Right to lodge a complaint — to complain to a supervisory authority, in particular in the Member State of your habitual residence, place of work or of the alleged infringement (Article 77).

To exercise any of these rights, write to info@renewchem.eu. We will respond within one month of receiving your request. That period may be extended by up to two further months where the request is complex or where we have received a number of requests, in which case we will inform you of the extension and the reasons for it. We may ask you for information to confirm your identity before acting on a request.

The supervisory authority in the country where the data controller is established is the Office of the Information and Data Protection Commissioner (IDPC), Malta — idpc.org.mt. You may also contact the supervisory authority in your own country.

11. Links to other websites

The Website contains links to the websites of consortium partners, to the CBE JU and European Union websites, to Zenodo and other repositories, and to social media platforms. Following such a link takes you to a site operated by a different organisation. This Policy does not apply to those sites, and we are not responsible for their content or their privacy practices. We encourage you to read the privacy notice of any website you visit.

12. Children

The Website is intended for a professional and general adult audience. It is not directed at children, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can delete it.

13. Changes to this Policy

We may update this Policy from time to time, for example to reflect changes in the Website, in the services we use, or in applicable law. The date at the top of this page indicates when it was last revised. Where changes are material, we will make this clear on the Website. We encourage you to review this page periodically.

14. Contact

For any question about this Policy or about how your personal data is handled, please write to info@renewchem.eu, or use the form on the Contact page.