Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Mootez Boughattas
Email: hello@co-erasmus.eu

If Co-Erasmus is later operated through a registered company, this section will be updated accordingly.

2. What personal data we collect

We may collect and process the following categories of personal data:

• contact details, such as your name and email address
• housing-related information, such as the address of a property, room, or accommodation, where this is necessary for the provision of our services
• message content and any information you include in contact forms
• institution-related information, such as your university or organization name, if you provide it
• technical data, such as IP address, browser type, operating system, device information, date and time of access, and server log data
• any other information you voluntarily provide to us

Where relevant to the service, we may collect the exact address of a listed accommodation. However, as a privacy and security measure, we do not publicly share the exact private address with other users. Instead, only an approximate location or estimated area may be shown where appropriate.

3. Purposes and legal bases of processing

4. Contact forms

When you use our contact forms, we process the data you enter in order to handle your request.

Fields marked as mandatory are required so that we can process your inquiry. Any additional information is voluntary.

Please do not send sensitive personal data through the contact form unless it is strictly necessary.

5. Server log files

When you access the website, our hosting provider may automatically collect information in server log files. This may include:

• IP address
• date and time of access
• requested page or file
• browser type and browser version
• operating system
• referrer URL
• access status / HTTP status code

This processing is necessary to ensure the security, integrity, and proper operation of the website.

Legal basis: Article 6(1)(f) GDPR

6. Recipients of personal data

We may share personal data with service providers who support us in operating the website and handling communications, for example:

• website hosting providers
• email providers
• form service providers
• Mapbox (interactive maps, geocoding, and related map services)
• technical service providers supporting website maintenance

We may also disclose personal data if required by law or where necessary to establish, exercise, or defend legal claims.

Where housing-related information is involved, we aim to limit disclosure of exact private addresses and, where appropriate, display or share only an approximate location or estimated area as a privacy and security measure.

7. Storage period

We store personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

In particular:

• server log data is stored only for as long as necessary for security and technical administration
• contact and inquiry data is stored for as long as necessary to process the inquiry and for a reasonable period thereafter in case of follow-up questions or legal defense
• data submitted in relation to pilot, partnership, or institutional interest may be retained for as long as necessary to assess and manage that request
• housing-related information is stored only for as long as necessary for the relevant service, operational, security, or legal purpose

8. Cookies and similar technologies

Information on the use of cookies, local storage, session storage, and essential Mapbox map services is provided separately in our Cookies Policy.

9. International data transfers

Some of our service providers may process personal data outside the EEA, including in the United States (for example Mapbox when map features are used).

Where such transfers occur, Co-Erasmus relies on appropriate transfer safeguards required by applicable data protection law, such as contractual safeguards and related supplementary measures where needed.

10. Your rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object
• right to withdraw consent at any time, where processing is based on consent

To exercise your rights, please contact us at: hello@co-erasmus.eu

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

12. Requirement to provide data

You are generally not required to provide personal data in order to visit this website.

However, certain personal data may be necessary if you want to contact us or if you would like us to review a partnership, pilot, or other request. Without the required information, we may not be able to process your inquiry.

13. Automated decision-making

We do not use automated decision-making, including profiling within the meaning of Article 22 GDPR, through this website.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The version published on this website is the current version.