Privacy Policy
Vocational Education Training S.R.L. (“we”, “our”) is the data controller for vetdesign-erasmus.eu. We explain below what personal data we collect on this site, why we process it, with whom we share it, and how we protect it.
What data we collect
Contact and signup forms: When you use our contact form or join our professional network, we collect the information you provide (e.g. name, email, country, company/institution, role, and any message or survey response). When you subscribe to our newsletter, we collect your email address (and any name if given).
Automatic data: We also collect technical data when you visit the site (such as IP address, browser type, and device information) through cookies and similar technologies (e.g. Google Analytics and Google reCAPTCHA). These help us understand site usage and protect against spam.
All data collected is for the stated purposes only and will not include sensitive data unless you voluntarily provide it (e.g. in a message). We do not sell your personal data.
How we use your data
Responding to inquiries: We use contact form data to answer your questions and feedback. We use your email to send news or resources if you have subscribed to our newsletter or updates.
Project coordination: Since this is an Erasmus+ project website, we may use your information to involve you in project activities (e.g. sending project materials or asking for feedback) if you have consented. We may share relevant contact information and feedback with our Erasmus+ consortium partners (in Romania, Germany, Italy, Poland, etc.) solely for project administration and dissemination. All partners are committed to protecting your data under GDPR.
Site operation and improvement: We use Google Analytics (with Consent Mode v2) to analyze how visitors use the site and improve its content. We also use Google reCAPTCHA to detect bots and prevent spam or abuse on our forms. These services process the data as described below.
Marketing: Only if you explicitly consent, we may send you occasional project-related newsletters. You can opt out at any time (see Rights below).
Cookies and analytics
We use cookies and similar technologies to make the site work and to collect usage data. We only activate non-essential cookies after you give consent via our cookie banner. For example, Google Analytics sets cookies (like _ga ) only with your consent and is used for statistical analysis, not essential for site function. These analytics cookies do not collect your identity and will not be set if you decline. With Google Consent Mode v2, if you refuse analytics cookies, Google will only record aggregate, non-identifying data (like timestamps and referrer information), and no personal data is stored. Google reCAPTCHA sets a cookie (e.g. _grecaptcha) and may analyze device and interaction data to distinguish between humans and bots. This is considered strictly necessary for spam protection. We use it under our legitimate interest in securing the site.
Legal basis for processing
Consent: We rely on your explicit consent for processing form data and sending newsletters. For example, GDPR requires that we ask and obtain explicit consent before processing your personal data for these purposes. You see consent checkboxes on our forms and cookie banner for this purpose. You can withdraw your consent at any time (see Your Rights below).
Legitimate interests: We process some technical data and operate security features (like analytics and reCAPTCHA) as a legitimate business interest in keeping the website functional and protected, as long as this does not override your privacy rights. We carefully limit these processes: for example, we do not store full IP addresses with Google Analytics.
Legal obligations: We may process some personal data to comply with legal requirements (for instance, maintaining records of transactions or communications for statutory periods).
Data sharing and third parties
We do not sell your personal data to anyone.
Service providers: We use reputable third-party services under data processing agreements. This includes: Google LLC (for Analytics and reCAPTCHA), which may transfer data outside the EU under standard contractual clauses and the new EU–US Data Privacy Framework; CookieYes (our consent management platform) which stores your cookie preferences; and our email/newsletter provider (if any) which holds your contact information to send updates. Each of these processors is GDPR-compliant.
Erasmus+ partners: As an EU-funded project, we may share necessary personal data with project partners (in other EU countries) for communication, collaboration and reporting purposes. For example, if you asked to participate in a project event or shared feedback, relevant information may be shared with our project consortium. All partners adhere to confidentiality and will only use your data for the purposes agreed under the project.
Legal disclosure: We may share data when required by law (e.g. court order, regulation) or to protect rights and safety.
Data retention and security
Retention: We retain your personal data only as long as needed for the purposes above. For example, we keep newsletter subscription data until you unsubscribe. We may retain analytical data in anonymized form and any minimal contact logs for up to 2–3 years for legitimate business/legal reasons, or as required by law (for example, financial records may need to be kept for tax audits).
Security: We use industry-standard security measures to protect your data: this includes encrypting data in transit (HTTPS/SSL), restricting access to our systems, using secure servers, and following internal policies for data handling. We regularly review our security to keep data safe.
Your rights
You have rights over your personal data under the GDPR. Specifically, you have the right to:
Access – ask us to confirm what personal data we hold about you and obtain a copy of it. (For example, you can request a copy of your form submission or your profile data.)
Rectification – request that we correct or update any inaccurate or incomplete data we hold about you.
Erasure – request that we delete your personal data (the “right to be forgotten”), if it is no longer needed for the purposes it was collected or is being processed unlawfully.
Restriction – ask us to limit how we use your data (for example, if you contest accuracy, you can request we stop processing it except for storage).
Portability – request a copy of your personal data in a structured, machine-readable format, and/or transfer it to another controller if technically feasible.
Objection – object to our processing of your personal data, in particular to direct marketing and profiling. (For example, you can tell us to stop sending you newsletters or stop using your data for certain purposes.)
Withdraw consent – if our processing is based on your consent, you can withdraw that consent at any time. After withdrawal, we will stop processing your data on that basis.
These rights are listed in Article 15–21 of the GDPR. If you make a request, we will act on it without undue delay and in any case within one month (as required by law). In limited cases the period may extend by two more months for complex requests; if so, we will notify you.
If you believe we have not respected your rights, you can lodge a complaint with Romania’s data protection authority, ANSPDCP (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal). ANSPDCP can investigate and will respond to complaints within three months.
Contact information
Controller: Vocational Education Training S.R.L. (CUI: 45143990)
Address: Strada Toamnei 14, 520073 Sfântu Gheorghe, Covasna, Romania.Email: You can contact us via the website’s contact form, or by email at info [at] vetdesign-erasmus.eu for any privacy-related questions or to make a request. (We will verify your identity to protect your data.)
Data Protection Officer (if any): If we have appointed a DPO, their contact is dpo@vetdesign-erasmus.eu (otherwise contact the above email).
Supervisor: You may also contact ANSPDCP (https://www.dataprotection.ro) for guidance on your data protection rights.