Last updated: 20 October 2026
This notice explains how personal data is handled when you visit agrichp.com or contact the AgriCHP project. It is provided under Article 13 of Regulation (EU) 2016/679 (GDPR). It covers this website, not research participation or the separate websites of consortium partners.
1. Who is responsible for this website?
The website data controller is Techinnova S.p.A., Via Giovanni Durando, 38, 20158 Milano (MI), Italy. VAT number: 03015970126. For privacy questions or to exercise your rights, email segreteria@techinnova.eu, write to the registered office, or call +39 02 911 57714. Please mention “AgriCHP privacy” in your request.
The project enquiry address is AgriCHP@cardiff.ac.uk. This is a Cardiff University mailbox, not the controller’s privacy contact. The contact form sends your enquiry to that mailbox. Cardiff University handles the correspondence it receives under its own privacy notice for enquirers and professional partners.
2. What data is used and why?
- Website delivery and security: IP address, requested pages, date and time, browser and device information, error and security logs. These are used to deliver the site, prevent abuse, diagnose faults and protect systems. The legal basis is our legitimate interest in operating a secure and reliable project website (Article 6(1)(f) GDPR).
- Contact requests: the name, email address and message you provide, together with subsequent correspondence. These are used to answer your request and organise relevant project follow-up, based on our legitimate interest in responding to enquiries (Article 6(1)(f)). Where you ask for steps towards a contract, Article 6(1)(b) applies instead to those steps.
- Privacy choices: your consent or refusal, its date and time, an identifier and technical browser information are used to remember and demonstrate your choices. The basis is compliance with our privacy obligations (Article 6(1)(c)). Optional tracking, where enabled, requires your consent (Article 6(1)(a) and applicable cookie rules).
- Language selection: the selected language and technical connection data enable the translation you request. This supports our legitimate interest in making project information accessible (Article 6(1)(f)); any optional storage remains subject to the cookie controls.
Providing contact details is voluntary, but without an email address and sufficient information we may be unable to reply. Please do not include health data, identity documents, passwords or other sensitive information in the message. Sending an enquiry does not subscribe you to a newsletter. We do not make decisions producing legal or similarly significant effects about you through automated processing.
3. Who can receive your data?
Access is limited to authorised personnel and service providers involved in website operation, security, email delivery and responding to your request. The contact form is addressed to the AgriCHP team at Cardiff University in the United Kingdom. Other consortium partners may receive the relevant part of an enquiry where necessary to answer it; this does not mean that every message is automatically sent to every partner. Authorities or professional advisers may receive information where required by law or necessary to establish, exercise or defend legal claims.
The website uses SiteGround hosting, WordPress with Divi, security tools including Wordfence and SiteGround Security Optimizer, GTranslate for language translation, and Cookie Compliance by Hu-manity Rights, Inc. for privacy choices. These services may process technical connection or security data. Cookie Compliance also records consent choices on our behalf. Service information is available from SiteGround, Wordfence, GTranslate and Cookie Compliance.
4. International transfers
Enquiries sent to Cardiff University are transferred to the United Kingdom. The European Commission’s UK adequacy decision provides the basis for that transfer while it remains in force. Some technology providers and their subcontractors operate internationally, including in the United States. For transfers outside the EEA without an applicable adequacy decision, appropriate safeguards are required, such as the European Commission’s Standard Contractual Clauses and any necessary supplementary measures. Cookie Compliance describes its contractual safeguards in its Data Processing Agreement. Contact Techinnova to request information about the safeguards applicable to your data and how to obtain a copy.
5. How long is data kept?
Retention depends on the purpose and the record involved. Enquiry correspondence is retained while the request and any directly related follow-up remain open. Once resolved, it is retained only where there is an ongoing relationship, a documented project reporting or legal obligation, or a need to establish or defend a legal claim; the applicable reporting requirement or limitation period determines the additional period. Cardiff University applies its published records retention schedules to correspondence in its mailbox, as explained in its notice linked above.
Technical logs are retained through the relevant operational and security log-rotation periods; records relating to an incident may be retained until investigation and any resulting claim are resolved. Backup copies remain until replaced through the backup cycle and are not used as an active contact database. Privacy preferences remain on your device until their stated expiry or until you remove them. Consent evidence is retained as needed to demonstrate the choice and address related requests. You can ask the controller for the retention period applicable to a specific record.
6. Cookies and external services
Cookies and similar technologies can store preferences or identifiers on your device. Essential technologies support security, site delivery and the recording of privacy choices. Optional technologies are controlled through the Cookie Compliance panel.
- Cookie Compliance: stores the consent identifier, access level and expiry and records the choice. Select Private and save to allow necessary operations only. Customize provides individual purpose controls and shows services allowed or blocked. The consent record displays the duration of your choice.
- Translation: selecting Italian or Welsh uses GTranslate and its external translation resources. This involves a connection to the provider, which receives technical request data. A language preference may be stored to keep the selected language.
- Fonts: Google Fonts resources, where requested by the theme, are subject to the privacy controls. A remote font request discloses technical connection data to the provider even when it does not set an advertising cookie.
- Administrative cookies: WordPress authentication and preference cookies are used for authorised administrators; visitors do not need an account to read the project website.
Use the Update consent icon to reopen the panel, change your choice or withdraw optional consent. Withdrawal does not affect earlier lawful processing. You can also remove stored cookies or block them in your browser settings; doing so may reset preferences or affect some functions. Scrolling the page or closing the panel does not constitute acceptance. The banner’s generic categories do not mean that all listed types of advertising or analytics are used by this website.
LinkedIn and partner links take you to external websites governed by their own privacy notices. They are ordinary links, not permission for those organisations to use your enquiry for unrelated purposes.
7. Your rights
Subject to the conditions in Articles 15–22 GDPR, you may request access to your personal data, correction, erasure, restriction of processing and portability where applicable. You may object to processing based on legitimate interests on grounds relating to your situation, and withdraw consent at any time where consent is the basis. Contact segreteria@techinnova.eu. We may request proportionate information to verify your identity. Requests are normally answered within one month; any lawful extension will be explained.
You may lodge a complaint with the Italian Garante per la protezione dei dati personali, or with the supervisory authority in the EU country where you live, work or believe an infringement occurred. Concerns about Cardiff University’s processing may also be raised with the UK Information Commissioner’s Office.
8. Changes to this notice
This notice will be updated when the website’s services or processing practices change. The date at the top identifies the current version. Any materially different use of your data will require appropriate information and, where necessary, a new choice before that use begins.
