Privacy policy

Information on how Amalur EIS processes personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable data protection legislation.

Last updated: 19/01/2026

1. Data controller

The controller responsible for the personal data collected through this portal is the Amalur EIS project, developed within the framework of Grupo Ekopol and the University of the Basque Country (UPV/EHU). For any data protection enquiries, please contact: info@amalur-eis.eus

2. Data collected and purpose

Amalur EIS collects personal data only when users voluntarily interact with the portal via forms ("Friends of Amalur" subscription, contact form). The data requested are: name (optional) and email address. Purpose: (a) Manage subscriptions to send occasional updates on new datasets, methods or visualisations; (b) Respond to enquiries, comments or academic collaboration proposals.

3. Legal basis

Data processing is based on the explicit consent of the user when submitting the corresponding form. Users may withdraw their consent at any time.

4. Data retention

Personal data will be retained until the user requests deletion or withdraws consent. In case of prolonged inactivity (more than 3 years without interaction), data will be deleted.

5. Data recipients

Personal data is not shared with third parties, except where legally required. Data is stored on servers located in the European Union.

6. User rights

Users may exercise their rights of access, rectification, erasure, restriction of processing, portability and objection, as well as withdraw consent, by sending a request to info@amalur-eis.eus. Users also have the right to lodge a complaint with their national data protection authority.

7. Cookies and analytics

Amalur EIS uses strictly necessary technical cookies for the portal to function (language selection, display preferences). No tracking cookies or third-party analytics are used without prior consent. For more information, see our Cookie Policy.

8. Security

Amalur EIS adopts the necessary technical and organisational measures to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access.