Privacy Policy

1. Who we are

This website is operated by the Psychosecurity initiative, a project of the European Responsible Artificial Intelligence Office (EURAIO). EURAIO is the data controller, and you can contact it at [email protected]. Its Data Protection Officer, Eleanor "Nell" Watson, can be reached at [email protected].

2. What data we collect

Contact form. When you write to us through the contact form, we collect:

• Your name
• Your email address
• The content of your message
• The time of submission and the version of the privacy notice shown with the form

Mailing list. When you subscribe to updates, we keep a record of your subscription request: your email address, the time of submission, the version of the privacy notice shown with the form, and the consent wording shown to you.

Technical data. This site is a set of static pages hosted on GitHub Pages. GitHub may log the IP addresses of visitors to maintain the security and integrity of its service, as described in GitHub's data-collection statement for Pages. We do not have access to those logs. Apart from what Formspree records when you submit a form (see section 5), we do not collect technical data.

3. How we use your data

• Responding to enquiries: we use your contact details to respond to your questions or feedback.
• Updates: if you subscribe, we send occasional announcements about the initiative, the framework's publication, and related research. Nothing else.
• Research collaboration: where relevant, we may contact you about research opportunities or collaborations you have expressed interest in.

4. Legal basis for processing

• Consent (GDPR Article 6(1)(a)): sending initiative updates to people who subscribe. You may withdraw consent at any time by replying to an update or emailing [email protected]. Withdrawal does not affect the lawfulness of processing before it was withdrawn.
• Legitimate interests (GDPR Article 6(1)(f)): responding to enquiries and discussing research collaborations you have expressed interest in. Our interest is maintaining relevant correspondence about the initiative. You may object to this processing.

5. Service providers and international transfers

• Formspree: processes both forms on this site. Its policy describes processing in the United States and other countries, and the collection of technical data such as IP addresses (see its privacy policy).
• GitHub: hosts the website, as described above.
• Team members: only as necessary to respond to your enquiry.
• No marketing third parties: we never sell or share your data for marketing purposes.

Formspree hosts its service in the United States and states that it relies on Standard Contractual Clauses when acting as a processor (see its security and transfer information). For information about the safeguards applicable to your data, or to request a copy of those safeguards, contact our Data Protection Officer.

6. Data retention

• Contact messages: for as long as needed to handle your enquiry or the collaboration it leads to. Correspondence is periodically reviewed and deleted when no longer needed, unless retention is required by law.
• Mailing-list addresses: until you unsubscribe. To do so, reply to any update, or email [email protected].
• You can request deletion at any time. Any retention required or permitted by applicable law will be explained in our response.

7. Your rights

Where the GDPR or UK GDPR applies, your rights include the following, subject to the conditions and exceptions in the applicable law:

• Access: request a copy of your personal data
• Rectification: correct inaccurate personal data
• Erasure: request deletion of your personal data
• Restriction: limit how we process your data
• Portability: receive your data in a portable format
• Objection: object to certain types of processing, including the processing based on legitimate interests described in section 4
• Withdrawal of consent: withdraw your consent to updates at any time

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for data in transit
• Secure form processing through Formspree
• Limited access to personal data
• No user accounts or passwords held on this site

9. Cookies and tracking

This website sets no cookies and runs no analytics or marketing trackers. The explainer videos are hosted on this site, so no third-party video platform records what you watch. Formspree's own pages, which you see after submitting a form, are governed by Formspree's policy.

10. Contact us

For any privacy-related questions or to exercise your rights, email our Data Protection Officer at [email protected]. You can also use the contact form. Please provide enough information to identify the correspondence concerned, and avoid sending identity documents unless we request them securely.

11. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Belgian Data Protection Authority or another competent supervisory authority, including one in the country where you habitually live, where you work, or where the alleged infringement took place.