Introduction

The processing of personal data within the framework of the OSTARA project (Operationalizing Agroecology for Resilient Mediterranean Agriculture) is carried out in full compliance with the General Data Protection Regulation (GDPR) and applicable data protection legislation. 

OSTARA is a research and innovation project funded under the PRIMA Programme, aimed at promoting sustainable, resilient, and agroecological farming systems in the Mediterranean region using digital technologies, participatory approaches, and open science practices.

This Privacy Policy governs the processing of personal data collected through the OSTARA project website, exclusively in relation to users who voluntarily subscribe to the project newsletter.

Data Controller

The University of Salamanca (USAL), through the BISITE Research Group, acts as the Data Controller for the personal data collected via the OSTARA project website.

Contact details:

  • Address: I+D+i Building – C, C. Espejo s/n, 37007 Salamanca, Spain
  • Email: bisite@usal.es
  • Data Protection Officer (DPO)
    Email: dpd@usal.es
    Address: Edificio de Rectorado, Patio de Escuelas, 1, 37008 Salamanca, Spain
    Phone: +34 923 294 401

USAL ensures the implementation of appropriate technical and organisational measures to guarantee the security, confidentiality, and lawful processing of personal data, in accordance with the principles of data minimisation, purpose limitation, and integrity established by the GDPR.

Personal Data Collected

The OSTARA project website collects only the personal data strictly necessary for the purpose of managing newsletter subscriptions. No special categories of personal data are collected.

The data collected for newsletter subscription may include name, surname and email address.

Purposes of Data Processing

Personal data collected through the OSTARA project website will be processed exclusively for the following purpose:

  • Newsletter subscription management. To send users information related to the OSTARA project, including news, events, results, publications, and dissemination or communication activities linked to the project.

Legal Basis for Processing

The legal basis for the processing of personal data is the explicit consent of the data subject, granted when the user voluntarily subscribes to the newsletter through the website form.

Users may withdraw their consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

Data Recipients

Personal data will not be disclosed to third parties for their own purposes.

However, for the sole purpose of newsletter delivery and technical operation, the University of Salamanca uses MailRelay (CPC Servicios Informáticos Aplicados a Nuevas Tecnologías S.L.) as a data processor acting under the University’s instructions (Article 28 GDPR) and subject to a Data Processing Agreement.

Access to personal data is strictly limited to authorised personnel involved in the communication and dissemination activities of the OSTARA project and acting under the responsibility of the Data Controller.

Aggregated or anonymised information may be used for reporting obligations to funding bodies, without identifying individual users.

Data Retention Period

Personal data will be retained for as long as the user remains subscribed to the newsletter or until the user withdraws their consent.

Once consent is withdrawn, personal data will be securely deleted or anonymised, unless retention is required by law.

Rights of Data Subjects

Data subjects may exercise the following rights at any time:

  • Right of access
  • Right of rectification
  • Right of erasure
  • Right to restriction of processing
  • Right to object
  • Right to data portability
  • Right to withdraw consent

To exercise these rights, users may contact the Data Controller using the contact details provided above (bisite@usal.es or dpd@usal.es) . Users also have the right to lodge a complaint with the competent data protection authority (AEDP).

Accuracy of Data

Users guarantee that the personal data provided is accurate and up to date. Users are responsible for notifying any changes or inaccuracies.

International data transfers

Newsletter data is processed within the European Economic Area (EEA). The service provider (MailRelay) indicates that data hosting is  located in the EU.

If, exceptionally, an international transfer outside the EEA were required (e.g., through a sub-processor), it would only take place with appropriate safeguards under GDPR Chapter V (e.g., Standard Contractual Clauses), and the website policy would be updated accordingly.

Cookies

The OSTARA project website may use technical cookies necessary for the correct functioning of the website. No cookies are used for commercial or profiling purposes. Further information is available in the Cookie Policy.

Data Security

The OSTARA project implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or misuse, in compliance with GDPR requirements.

Modifications to This Policy

This Privacy Policy may be updated to reflect legal or regulatory changes or project-specific needs. Any modifications will be published on the website with an updated revision date.

Contact

For any questions related to this Privacy Policy or the processing of personal data, users may contact the OSTARA project via the contact details provided on the website.

Last updated: 13/02/2026