Privacy & Data Protection (GDPR)
LEARN Data Hub
Website: https://learn-datahub.com
Last updated: 23 July 2026
The LEARN Data Hub is committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Who we are (Data Controller)
The Data Controller for personal data processed through the Platform is ENVIROMETRICS.
| Data Controller | ENVIROMETRICS |
|---|---|
| Registered address | Kodrou 3, 15232 |
| General contact | info@envirometrics.gr |
| Project context | LEARN Project, funded by the European Union under Horizon Europe, Grant Agreement no. 101057510 |
2. Scope of this Notice
2.1 This Notice covers personal data processed when you visit the Platform, register or use an account, use the API, contact us, or subscribe to updates. It also explains how personal data may (exceptionally) appear within datasets.
2.2 The Platform primarily publishes air-quality and environmental data, which is generally not personal data. This Notice focuses on the limited personal data processed in connection with operating the Platform.
3. Personal data we collect
| Category | Examples |
|---|---|
| Account / registration data | Username, full name, email address, organisation/affiliation, password (stored in hashed form), and your role or permissions. |
| Contributor / profile data | Optional profile details and any dataset or metadata you submit that identifies you as its author or maintainer. |
| Contact & correspondence | Information you provide when emailing us or completing a form, including the content of your message. |
| API usage data | API tokens/keys associated with your account and records of API requests. |
| Technical & usage data | IP address, browser and device type, pages visited, timestamps, and referring pages — collected via server logs and cookies. |
| Cookies & similar | Strictly necessary cookies (e.g. session and CSRF-protection tokens used by the underlying CKAN software) and any analytics cookies you consent to. |
4. Where the data comes from
4.1 Most personal data is provided directly by you (for example, when registering or contacting us). Technical and usage data is generated automatically when you interact with the Platform. In limited cases, data may be provided by a consortium partner that referred you or that submitted a dataset naming you as a contact.
5. Purposes and legal bases for processing
5.1 We process personal data for the following purposes and on the following legal bases under Article 6(1) GDPR:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account; authenticating logins | Performance of a contract / taking steps at your request (Art. 6(1)(b)), or your consent (Art. 6(1)(a)). |
| Operating, securing and maintaining the Platform and API; preventing abuse | Legitimate interests (Art. 6(1)(f)) in providing a secure, functioning service. |
| Publishing datasets and enabling FAIR data reuse in the public interest | Public interest / performance of a task carried out in the public interest (Art. 6(1)(e)) in the context of EU-funded research, and/or legitimate interests (Art. 6(1)(f)). |
| Responding to your enquiries and support requests | Legitimate interests (Art. 6(1)(f)) or steps prior to a contract (Art. 6(1)(b)). |
| Sending newsletters or project updates (if offered) | Your consent (Art. 6(1)(a)), which you may withdraw at any time. |
| Complying with legal, funding, audit and reporting obligations | Legal obligation (Art. 6(1)(c)) and/or public interest (Art. 6(1)(e)). |
5.2 Where processing relies on legitimate interests, we have balanced those interests against your rights and freedoms. You may object to such processing (see section 11).
6. Special category data and children's data
6.1 We do not seek to collect special categories of personal data (Article 9 GDPR) through account registration or use of the Platform.
6.2 The LEARN Project studies air quality in school environments. The datasets published on the Platform are intended to contain environmental measurements, not identifiable information about children or other individuals. Any research data involving pupils, staff or other individuals is expected to be anonymised or aggregated before publication so that individuals are not identifiable.
6.3 Where any personal data relating to a child is nonetheless processed in connection with the project, it is handled with additional safeguards and on an appropriate legal basis, consistent with GDPR and national rules on children's data. Questions about data collected in school settings can be directed to info@envirometrics.gr.
7. Personal data appearing in datasets
7.1 We aim to publish only non-personal, anonymised or aggregated data. If you believe a dataset contains personal data about you or another identifiable person that should not be public, contact us and we will assess and, where appropriate, restrict, anonymise or remove it.
7.2 If you submit a dataset, you are responsible for ensuring you have a lawful basis to share any personal data it contains and for anonymising it where required before submission.
8. Cookies
8.1 The Platform uses strictly necessary cookies required for it to function securely, including session cookies and a cross-site-request-forgery (CSRF) protection token set by the underlying CKAN software. These do not require consent.
8.2 Any non-essential cookies (for example, analytics) are used only with your consent, which you can give or withdraw via the cookie banner or settings.
9. Who we share personal data with
9.1 We share personal data only as necessary and with appropriate safeguards, with the following categories of recipient:
- LEARN Project consortium partners, where necessary for the operation of the Platform and delivery of the project;
- service providers (processors) acting on our instructions under Article 28 GDPR;
- the European Commission, HaDEA or auditors, where required to meet funding, audit or legal obligations;
- public authorities where we are legally required to disclose.
9.2 We do not sell personal data. Processors are bound by written contracts requiring them to protect the data and process it only on our instructions.
10. International data transfers
10.1 We aim to store and process personal data within the European Economic Area (EEA). Where a provider processes data outside the EEA, we ensure an appropriate safeguard under Chapter V GDPR is in place — such as an adequacy decision or Standard Contractual Clauses.
11. How long we keep personal data
11.1 We keep personal data only for as long as necessary for the purposes described, then delete it.
12. Your rights
12.1 Subject to the conditions in the GDPR, you have the right to:
- access your personal data and obtain a copy (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure (“right to be forgotten”) in certain circumstances (Art. 17);
- restriction of processing (Art. 18);
- data portability for data you provided, where processing is based on consent or contract (Art. 20);
- object to processing based on legitimate interests or the public interest, and to direct marketing (Art. 21);
- withdraw consent at any time, without affecting processing already carried out (Art. 7(3)).
12.2 To exercise any right, contact us at info@envirometrics.gr. We will respond within one month, as required by Article 12 GDPR. There is normally no charge; we may ask you to verify your identity.
13. Automated decision-making
13.1 We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you (Article 22 GDPR).
14. Security
14.1 We implement appropriate technical and organisational measures to protect personal data, including access controls, hashed passwords, encryption in transit (HTTPS), logging, and restricting access to authorised personnel. No system is completely secure; if a personal-data breach is likely to result in a risk to your rights, we will notify the competent supervisory authority and, where required, affected individuals, in line with Articles 33–34 GDPR.
15. Right to lodge a complaint
15.1 If you have concerns about how we handle your personal data, please contact us first so we can address them. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU Member State of your residence, place of work, or of the alleged infringement.
16. Changes to this Notice
16.1 We may update this Notice from time to time. The current version, with its effective date, will always be available on the Platform. Material changes will be highlighted by updating the “Last updated” date and, where appropriate, by notice on the Platform.
17. How to contact us
For any question about this Notice or your personal data, contact info@envirometrics.gr.
By continuing to use the LEARN Data Hub, you acknowledge that you have read this Privacy Notice.