Privacy policy & GDPR statement

Last Updated: October 2026

The edup.cy platform operates as an independent, non-profit community initiative based in Limassol, Cyprus. We are deeply committed to protecting your personal data and ensuring compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and local Cyprus Data Protection Law 125(I)/2018.

1. Data controller

For the purpose of the GDPR, the personal data collected via this website is managed exclusively by the project administrator. If you have any questions regarding your data, privacy rights, or wish to exercise any of your statutory rights, please contact us directly via email at: [email protected].

2. Data we collect and how we use it

• Email addresses: When you subscribe to receive updates regarding our initiative or contact us via our forms, we collect your email address based on your explicit, affirmative consent. This data is used solely to address your queries or send project announcements. It will never be sold, rented, or repurposed for commercial tracking.
• Technical Log Data: Our security and network infrastructure automatically registers standard connection parameters (such as anonymised IP addresses, browser types, and access timestamps) to secure the site against malicious activity.

3. Third-party data processors

To ensure secure and high-performance delivery, we partner with reliable service providers who operate strictly as Data Processors under explicit data protection terms:

• Cloudflare Inc.: Our hosting and web application firewall security are facilitated by Cloudflare. Cloudflare may process network telemetry and deploy essential technical cookies strictly for performance optimisation, bot prevention, and security mitigation. For further details, you can review the Cloudflare Privacy Policy.
• Formspree Inc.: Our email contact workflow is managed securely through Formspree. Formspree acts as a pipeline to transmit your email information directly to the administrator, with a binding commitment that no user details are shared with external marketing networks.

4. Cookie notice

This website does not use tracking, advertising, or behavioural profile cookies. We strictly use essential technical cookies deployed by Cloudflare to ensure the platform remains stable, safe, and resistant to cyber threats. These cookies do not store identifiable personal profiles and are permitted without prior consent under EU ePrivacy laws as they are strictly necessary for digital service delivery.

5. Legal basis for processing

We process your personal data under the following legal benchmarks:

• Consent (Article 6(1)(a) GDPR): For responding to your messages or sending updates when you check our explicit opt-in consent box.
• Legitimate Interests (Article 6(1)(f) GDPR): For maintaining technical website firewalls to safeguard our platform against fraud and system attacks.

6. Data retention

Your subscription or contact records will be retained only until your query concludes, or until you choose to withdraw your consent. Log security data processed by our hosting providers is automatically truncated or purged within short standard cycles, unless required for active forensic verification.

7. Artificial Intelligence and Human Oversight Disclosure

In alignment with European transparency standards, including the EU AI Act, certain structural outlines or translation assistance on this platform may be supported by ethical digital tools. All final educational content is strictly verified by project administrators to ensure accuracy, clarity, and safety.

8. Your statutory rights

Under the GDPR, you possess complete authority over your personal information. You have the right to request access to, correction of, or permanent deletion of your stored data at any moment. You may also withdraw your processing consent instantly by emailing [email protected]. If you believe your data has been handled improperly, you retain the right to lodge a formal complaint with the Cyprus Commissioner for Personal Data Protection.