GDPR
Privacy & Cookies Statement
Last updated: 28 May 2026
Identity Decode respects your privacy and processes personal data in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and applicable national laws.
This statement explains who we are, what data we collect, why we collect it, how long we keep it, who we share it with, and the rights you have over your data.
1. Data controller
The data controller for this website is Bundesverband Netzwerke von Migrant*innenorganisationen (BV NeMO) e.V. (Germany), as Project Coordinator of the Identity Decode consortium. The partner organisations — TCPD (Bulgaria), Fundacja Ornament (Poland) and IYSEDA (Türkiye) — act as joint processors for activities they directly deliver.
For privacy-related requests, contact us via the Contact page.
2. What data we collect
- Contact form data: name, email, organisation and message content you submit.
- Self-Check questionnaire: your answers and score are stored only in your browser (localStorage). We do not send them to our servers.
- Consent record: your cookie preferences and the timestamp of your choice, stored in your browser.
- Technical data: with your consent, anonymous statistics about page visits and resource downloads.
3. Lawful bases for processing
- Consent — for analytics and preference cookies (Art. 6(1)(a) GDPR).
- Legitimate interest — for project communication and the necessary functioning of this website (Art. 6(1)(f) GDPR).
- Public interest — for delivering an EU-funded youth project under Erasmus+ (Art. 6(1)(e) GDPR), where applicable.
4. Retention
Contact-form messages are kept for as long as needed to handle your request and for up to 24 months thereafter, unless a longer retention is required by Erasmus+ reporting obligations. Browser-stored data (questionnaire results, consent choice) remains until you clear it.
5. Recipients
Personal data may be shared between project partners on a need-to-know basis, and with EU bodies (e.g. the European Education and Culture Executive Agency, EACEA, or the National Agency JUGEND für Europa) for project reporting purposes. We do not sell personal data, and we do not transfer it outside the EU without appropriate safeguards.
6. Cookies
We use three categories of cookies / browser storage:
- Necessary — required for the site to function (e.g. remembering your consent choice). Always on.
- Analytics — anonymous statistics. Off by default; activated only with your consent.
- Preferences — remember choices such as language. Off by default.
You can change your cookie preferences at any time from the link in the footer.
7. Safeguarding young participants
For activities involving young people (e.g. piloting workshops), we apply a clear safeguarding framework including informed consent, GDPR-compliant data handling, referral routes to support services and facilitator protocols for de-escalating distress or conflict.
8. Your rights
Under the GDPR you have the right to:
- access your personal data;
- rectify inaccurate data;
- erase your data ("right to be forgotten");
- restrict or object to processing;
- data portability;
- withdraw consent at any time (without affecting earlier processing);
- lodge a complaint with your national supervisory authority.
To exercise any of these rights, contact us via the Contact page.
9. EU funding disclaimer
Funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Education and Culture Executive Agency (EACEA). Neither the European Union nor EACEA can be held responsible for them.

