EAGLE Project

Annex 1 – Privacy Statement

This Privacy Statement is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Article 7.1 of the Data Protection Policy of the EAGLE project (Project No. 101262606).

1. Data Controller and Data Processors

Data Controller

FAI-CISL (Federazione Agricola Alimentare Ambientale Industriale Italiana – CISL)
avv. Maurilio Dangelo – avvmauriliodangelo@studiolegaledn.com, +39 063208682

Data Processor

REZOS BRANDS
projects@rezosbrands.com, +302610423021

Where applicable, other members of the EAGLE project consortium may process personal data on behalf of the Data Controller and within the scope of their respective project activities.

2. Purpose and Legal Basis of Processing

FAI-CISL, as Data Controller, informs users that personal data voluntarily provided through the EAGLE project webpage will be processed in accordance with the GDPR and applicable national legislation.

The personal data collected through the webpage may be processed in order to:

• respond to requests, enquiries or messages submitted by users through the webpage;
• provide information concerning the EAGLE project and its activities, where requested by the user;
• manage contacts with individuals who voluntarily express an interest in the project, its activities or events; and
• where applicable, fulfil the project’s reporting and documentation obligations towards the European Commission, insofar as such processing is necessary and legally required.

2.1. Categories of Personal Data Processed

The personal data processed will be limited to the data voluntarily provided by the user through the webpage.

Depending on the information submitted, these may include:

• name and surname;
• email address;
• organisation or affiliation, where provided;
• any other personal information included by the user in the message or enquiry.

Users are invited not to provide special categories of personal data within the contact form or in any free-text field.

2.2. Legal Basis for Processing

The processing of personal data provided through the webpage will be based, as applicable, on:

• the consent of the data subject pursuant to Article 6(1)(a) GDPR, where consent is required and requested through the webpage;
• compliance with a legal obligation to which the Data Controller is subject pursuant to Article 6(1)(c) GDPR, where processing is necessary to comply with applicable legal or reporting obligations.

Where processing is based on consent, the user may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

2.3. Purposes for Which Data Will Be Processed

Personal data will be processed exclusively for the purposes for which they have been voluntarily provided, including responding to enquiries, managing communications with users and providing information concerning the EAGLE project and its activities.

Where personal data are required for project reporting or documentation purposes, they may also be processed to the extent necessary to comply with the applicable obligations arising from the EAGLE Grant Agreement and the requirements of the European Commission.

Personal data will not be used for purposes incompatible with those described in this Privacy Statement.

2.4. Provision of Data

The provision of personal data through the webpage is voluntary.

However, where certain information is necessary to respond to a request (for example, an email address), failure to provide such information may make it impossible for the Data Controller to respond to the user or provide the requested information.

Users are responsible for ensuring that any personal data relating to third parties that they voluntarily include in their message have been provided lawfully and, where necessary, with the appropriate authorisation.

2.5. Storage Period

Personal data will be retained only for as long as necessary to fulfil the purposes for which they were collected.

Data relating to enquiries or communications will generally be retained for the period necessary to manage the request and any subsequent communication, and thereafter for no longer than necessary for administrative, legal or project-related purposes.

Where specific data are required to comply with the reporting and documentation obligations applicable to the EAGLE project, they will be retained for the period required under the applicable EU rules and the EAGLE Grant Agreement (5 years).

Once the applicable retention period has expired, personal data will be deleted or anonymised, unless further retention is required by law.

3. Processing Methods and Data Security

Personal data will be processed using electronic means, in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, integrity and confidentiality set out in the GDPR.

Appropriate technical and organisational measures will be adopted to ensure the security of personal data and to prevent unauthorised access, loss, alteration or disclosure.

4. Data Subjects’ Rights

In accordance with Articles 15–22 of the GDPR, data subjects have the right, under the conditions provided for by the applicable legislation, to:

• obtain confirmation as to whether or not personal data concerning them are being processed;
• obtain access to their personal data and information concerning the processing;
• request the rectification of inaccurate personal data or the completion of incomplete personal data;
• request the erasure of personal data where one of the conditions set out in Article 17 GDPR applies;
• request the restriction of processing where one of the conditions set out in Article 18 GDPR applies;
• receive their personal data in a structured, commonly used and machine-readable format and request their transmission to another controller, where the conditions for exercising the right to data portability under Article 20 GDPR are met;
• object to the processing of their personal data where the conditions set out in Article 21 GDPR apply; and
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.

These rights may be exercised by contacting the Data Controller at: FAI-CISL

Data subjects also have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement.

Last update:
October 7, 2026