1. Introduction
    Welcome to the website of the CITREST Project (https://citrest.es/), an academic initiative under the Universitat Abat Oliba CEU, located at Carrer de Bellesguard, 30, Sarrià-Sant Gervasi, 08022 Barcelona (Spain). This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

 

  1. Data Controller
    The data controller responsible for the processing of your personal data is:
  • Universitat Abat Oliba CEU
    Carrer de Bellesguard, 30, Sarrià-Sant Gervasi, 08022 Barcelona, Spain
    Contact Email: dpd@ceu.es

 

  1. Data Collection and Processing
    We collect and process personal data through our website in the following cases:
  • When visitors submit contact forms.
  • When participating in surveys and research forms related to nationality restitution studies.
  • When engaging with third-party services that may track personal data (e.g., Google Analytics, reCAPTCHA, and similar services).

 

  1. Purpose of Data Processing
    The collected data will be used exclusively for:
  • Responding to user inquiries.
  • Processing participation requests in research surveys.
  • Contacting users regarding their participation in studies.
  • Improving our research and enhancing the website’s user experience.

All forms on the website contain a mandatory consent checkbox with the following text:
“To complete this form, the CITREST Project requires your authorization to process the data provided. This information will be used to confirm your participation and arrange a meeting to provide more information. By checking this box, you agree to our Privacy Policy.”

 

  1. Legal Basis for Processing
    We process personal data based on legitimate interest (scientific research purposes) and explicit user consent, in accordance with Article 6(1)(a) and 6(1)(f) GDPR.

 

  1. Data Storage and Security
  • Our website is hosted on Hostinger, an external server provider.
  • Data collected through our forms is securely stored and accessible only by authorized personnel of the Universitat Abat Oliba CEU.
  • We implement security measures to prevent unauthorized access, loss, or alteration of personal data.

 

  1. Third-Party Services and Cookies
    The website may use cookies and third-party tracking services, such as:
  • Google Analytics (user behavior analysis).
  • Google reCAPTCHA (spam protection in forms).
  • Survey and research tools for academic studies.

Users can manage their cookie preferences through their browser settings.

 

  1. Data Retention Period
  • Contact form data: Stored for a maximum of one year after the last interaction.
  • Research participation data: Retained for the duration of the study and securely deleted afterward.
  • Cookies and analytics data: Retained according to third-party policies.

 

  1. User Rights
    Under the GDPR, users have the right to:
  • Access their personal data.
  • Rectify incorrect or incomplete data.
  • Request deletion of personal data (right to be forgotten).
  • Restrict processing under certain conditions.
  • Object to processing based on legitimate interest.
  • Request data portability in a structured format.

If you have any question or doubt regarding the processing or protection of your personal data, please contact the Data Protection Officer (DPO): dpd@ceu.es

 

  1. Complaints and Supervisory Authority
    If you believe your data protection rights have been violated, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

 

  1. Changes to This Privacy Policy
    This policy may be updated periodically to reflect legal or operational changes. Any modifications will be published on this page with the last updated date.

 

 

By using this Website, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your data as described herein.

 

 

Last Updated: March 19, 2025