List of active policies

Full policy

Last update: 19/05/2025

This Cookie Policy explains how cookies are used on the MOUNTADAPT online training platform (Moodle), developed within the Horizon Europe MOUNTADAPT research project (Grant Agreement No.101155958).

The platform is hosted by the University of Deusto and is used solely for educational and research purposes. No advertising, profiling, or marketing cookies are used.

1. What are cookies?

Cookies are small text files placed on your device when you access a website. They enable the website to remember your actions and preferences (such as login details or language) over a period of time, making navigation more efficient.

Cookies can be:

• Session cookies, which are deleted when you close your browser.
• Persistent cookies, which remain stored until they expire or are deleted.

Moodle may also use similar technologies (such as local storage) to ensure proper functioning of learning features.

2. What types of cookies do we use?

We only use the following categories of cookies:

Type	Purpose	Legal basis
Strictly necessary cookies	Required for the platform to operate (login sessions, security, language preferences).	Article 6(1)(e) GDPR – task in the public interest (education & research). Consent not required.
Functional cookies	Remember user preferences (e.g., interface settings, course progress).	Article 6(1)(a) GDPR – consent.
Analytical cookies (optional)	Collect anonymised data on how users interact with the training to improve usability and effectiveness. No tracking beyond our domain.	Article 6(1)(a) GDPR – consent.

You will be asked to consent to the use of non-essential cookies when you first access the platform.

3. Third-party cookies

The MOUNTADAPT Moodle instance may rely on limited third-party services (e.g., Zoom for webinars or Google Analytics if activated for aggregate research metrics).

• No third-party cookies are used for advertising, profiling, or commercial purposes.
• Any analytics tools, if used, operate with anonymised IPs and are restricted to EU servers.

A full list of Moodle’s core cookies is available at https://docs.moodle.org/311/en/Cookies.

4. Cookie Management

You can manage or delete cookies at any time through your browser settings.

Please note that rejecting essential cookies may affect the functionality of the learning platform, such as login or course access.

For more information on how to manage cookies:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Safari

5. Contact

If you have any questions about this Cookie Policy or data protection, you may contact:

University of Deusto

48007 Bilbao, Spain

📧 mountadapt@deusto.es

📧 Data Protection Officer: dpo@deusto.es

Full policy

Effective date: 15/09/2025

This Privacy Policy explains how theUniversity of Deusto (Spain), the University of Piemonte Orientale (Italy), and Health Care Without Harm Europe (Belgium) (hereinafter, “we”, “our”, or “us”) collect, use, and protect your personal data when you register for and participate in the MOUNTADAPT online training on climate change and health hosted at mountadapt-training.eu (the “Site”).

The training is developed within the EU-funded Horizon Europe research project MOUNTADAPT (Grant Agreement No. 101155958). The platform is currently in a pilot phase to evaluate its effectiveness as an educational tool on the impact of climate change on human health in mountain regions.

We adhere to the Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and to applicable national laws on data protection. Your participation in this training is voluntary and your data are processed only for legitimate research and educational purposes.

1. Data Controller

The University of Deusto acts as the main Data Controller, jointly with the University of Piemonte Orientale and Health Care Without Harm Europe, under a Joint Controllership Agreement in accordance with Article 26 GDPR.

Contact details:

University of Deusto

48007 Bilbao, Spain

📧 mountadapt@deusto.es

📧 Data Protection Officer (DPO): dpo@deusto.es

This Privacy Policy applies exclusively to data collected through this Site. Links to third-party websites are provided for information purposes only; we are not responsible for their content or privacy practices.

2. What Personal Data Do We Collect?

We collect only the data necessary for your participation in the training and for research on its effectiveness:

• Personal data:
  • Full Name
  • Gender (optional)
  • Email address
  • Affiliation / Organisation
  • Country of residence
    
    
• Derivative and technical data:
  • IP address, browser and device information
  • Cookies and analytics data (see Cookie Policy)
    
    
• Training participation data:
  • Course enrolment, attendance, and progress
  • Quiz results and certificate issuance
  • Feedback and satisfaction survey responses
  • Optional interaction data with the AI-based virtual evaluator (questions and answers; no personal content)

We do not collect sensitive categories of data (Article 9 GDPR) unless explicitly required and with your prior consent.

No information from minors under 18 years of age is collected.

3. Purpose and Legal Basis for Processing

Your data are processed exclusively for research and educational purposes within the MOUNTADAPT project:

Purpose	Legal Basis
Registration and participation in the training	Article 6(1)(e): processing necessary for the performance of a task carried out in the public interest (educational research within Horizon Europe)
Evaluation of learning outcomes and user satisfaction	Article 6(1)(e): public interest in research
Use of anonymised or pseudonymised data for analysis of platform effectiveness	Article 6(1)(e): public interest in research
Issuing certificates of completion or attendance	Article 6(1)(e): educational task in the public interest
Participation in optional surveys and interaction with the AI evaluator	Article 6(1)(a): consent

Your data will not be used for commercial purposes, direct marketing, or advertising.

4. Data Retention

Personal data will be stored securely until 31 May 2027 or up to five years thereafter, if required to comply with EU audit and reporting obligations under Horizon Europe rules. After this period, the data will be anonymised or deleted.

5. Who Has Access to Your Data?

Access to your data is limited to authorised personnel involved in the MOUNTADAPT project:

• Staff from the University of Deusto, University of Piemonte Orientale, and Health Care Without Harm Europe managing the training and research evaluation;
• Course trainers and facilitators (only relevant data);
• EU project partners (only anonymised or pseudonymised data for reporting and analysis purposes);
• Technical service providers hosting the Site (e.g., Moodle, Zoom, Google Workspace) under GDPR-compliant data processing agreements.
  
  

Personal data will not be shared outside the MOUNTADAPT consortium except with the European Commission or its auditors, if legally required for project verification.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access to the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten”) when legally applicable.
• Restriction of processing in specific circumstances.
• Objection to processing based on legitimate grounds.
• Data portability where applicable.
• Withdrawal of consent at any time (without affecting prior lawful processing).
• Right to lodge a complaint with a supervisory authority (e.g., the Spanish Data Protection Agency, www.aepd.es)..

To exercise your rights, contact us at dpo@deusto.es. Requests may require proof of identity.

Participation in the research components (surveys, chatbot evaluation) is voluntary; declining does not affect your access to the course content.

7. Cookies and Tracking

Our Site uses essential cookies for functionality and optional analytical cookies to improve user experience. For details, see our Cookie Policy.

8. Automated Decision-Making

No automated decision-making or profiling with legal or significant effects on users is carried out.

9. Use of the virtual AI Evaluator in Learning Assessments

As part of the Disaster Preparedness module, participants may interact with an AI-based virtual evaluator (chatbot) designed to assess learning outcomes.

• The evaluator follows a predefined script and rubric validated by the academic team.
• It does not collect personal or sensitive data.
• Responses are used solely for educational and research purposes and stored securely on EU-based servers.
• Data are deleted or anonymised after the retention period specified above.

The virtual evaluator complies with the GDPR, the Spanish LOPDGDD (Organic Law 3/2018), and aligns with the forthcoming EU Artificial Intelligence Act, which classifies educational AI systems as “high-risk”.

The teaching team retains full responsibility for final assessment and fairness. Human review is always possible upon request.

10. Security of your personal data

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

However, please note that no Internet transmission is entirely secure. You are responsible for safeguarding your login credentials and avoiding the transmission of confidential information via unencrypted email.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the project, technology, or applicable laws. Significant updates will be communicated via the Site or by email. The version date at the top of this document indicates the most recent update.

12. Contact

For any questions, requests, or complaints regarding this Privacy Policy, please contact:

University of Deusto

48007 Bilbao, Spain

📧 mountadapt@deusto.es

📧 Data Protection Officer (DPO): dpo@deusto.es