Subscribe

Privacy & e-Privacy Policy

Last updated on: 31 March 2026.

  1. General terms

This Privacy Policy (‘Privacy Policy’ or ‘Policy’) is an integral part of the Website and its content, if and to the extent provided or otherwise made available in any way and from time to time by PopEye–a Research and Innovation Action funded by the European Union’s Horizon Europe programme (HORIZON-CL3-2023-BM-01) under Grant Agreement No. 101168317 (‘PopEye’ or ‘the Project’)–to the visitor and/or user of the Website ( the ‘User’). This Policy governs the privacy and related matters, when using the Website and its content, and how a User can exercise their rights regarding their Personal Data, in accordance with the General Data Protection Regulation (‘GDPR’) and other related laws and regulations.

The PopEye Website and content made available on https://popeye-project.eu are hereinafter collectively referred to as: ‘the Website’. By accessing, browsing, or using the Website (which includes, without limitation, any services, whether from PopEye or third parties), the User acknowledges that the User has read, understood, and agrees to be bound by this Policy and to comply with all applicable laws and regulations. If the User does not agree to this Policy or the compliance obligations, please do not use PopEye’s Website.

For purposes concerning this Policy, the Website is hosted in the Netherlands and is operated by the European Association for Biometrics (‘EAB’), as consortium partner of PopEye. In this context: PopEye is the data controller, defining the means and the goals of the data processing; EAB is the data processor, processing data on behalf of PopEye; and the Website is part of PopEye’s dissemination and communication strategy –any data processing operation, related to the Website, is for the benefit of the Project and its objectives. The content on this Website is provided only for general information purposes and ‘as-is’, which may not be accurate. As such, it may not be fully complete and should in no way be perceived as strategic or any other professional advice.

When visiting the Website, PopEye processes Personal Data of Users as provided herein. PopEye may collect and otherwise process Personal Data of Users only under the following circumstances: (i) when a User contacts PopEye (including subscription to the PopEye newsletter or other electronic communications) for the purpose of obtaining information, accessing certain content, or engaging in activities related to the ordinary business operations of the Project, in which case the User’s contact information (e.g., name and email) is processed solely for the purposes of providing such communications or responding to the User’s requests and for no longer than is necessary for these purposes; or (ii) when a User exercises their rights as a data subject in accordance with the GDPR, in which case data are processed only for the purpose of enabling the User to effectively exercise their rights and for no longer than necessary for this goal.

More precisely, when the User completes the newsletter registration form on this Website or sends an email to popeye@eab.org, PopEye may retain those communications in order to process the queries, respond to requests, improve this Website or provide assistance to Users regarding PopEye’s activities. In such cases, PopEye will need to process (e.g., collect or store) the following personal information: name, organisation, and email address. The same applies to other communications, for instance, complaints or other requests regarding data processing (see below under 3 on data subjects’ rights), where PopEye may process the above data (name, organisation and email address) with a view to processing queries, responding to requests, improving the Website or assisting Users concerning PopEye’s activities.

Information that Users provide will only be used to contact Users; for example, for information, updates or other content in connection with the Website and related activities, unless the User informs PopEye (through our Website or via email to popeye@eab.org) that the User does not wish to receive any communication from PopEye. PopEye will not use this Website to collect or otherwise process special categories of personal data, such as information regarding political views, race, religious beliefs, health, criminal-law, financial data, or other matters.

The User is strongly encouraged not to include personal details in the User’s answers or other feedback, and to limit the sharing of personal details when contacting and otherwise engaging with PopEye.

  1. Cookie notice and links to/from other sites

When visiting this Website, PopEye sets only absolutely essential/required Cookies, in accordance with the ePrivacy Directive (article 5(3)). That is, only strictly necessary Cookies that are essential to deliver the content of the Website (and only where explicitly requested by the User) or Cookies that are necessary for the functioning of the Website. Other (non-necessary) cookies that may be related to the User’s preferences (such as language settings, login details, device information, like time and location, and IP-address to remember a User’s choices in order to optimise user experience and to recognise the User’s device or browser upon any subsequent access to the Website using the same device or browser) are only set upon consent of the User (e.g., via Cookie banners or consent management tools appearing before non-necessary Cookies are set). No other Cookies will be set by PopEye on this Website.

In addition to the cookies collected via the Website, PopEye will work with various companies (third parties) to help PopEye analyse how the Website is used, and to optimise the Website to deliver the best possible user-experience. Currently, PopEye uses (i) Google Analytics by Google Inc. in order to help PopEye monitor the Website traffic, (ii) Google Search Console in order to help PopEye improve the Website visibility, troubleshoot technical issues, and optimize the search performance, (iii) Brevo in order to help PopEye manage newsletters and contact forms, (iv) Google Capthca v2 by Google Inc. in order to help PopEye monitor the Website traffic, and (iv) LinkedIn in order to enable Users to conveniently access their LinkedIn account in order to follow PopEye or engage with related content on that platform.

This Website may include links to or from other internet sites. Those websites are provided by independent third parties over whom PopEye has no control. PopEye does not accept any responsibility for the content, policies, or practices of third-party sites nor for their availability and/or content of those sites. PopEye does not control the dissemination of these third-party Cookies and cannot block Cookies from those sites.

PopEye makes every effort to respect the User’s cookie preferences; however, it cannot be ensured that every Cookie will be detected or managed accordingly. If this is a concern, Users are advised to adjust their cookie settings directly through their browser. Further information on how to do so can be found in the help section of the respective browser. This Policy does not apply to third-party websites that may be accessed through hyperlinks on the Website

  1. Data subjects’ rights

Data subjects, namely Users of the Website have the following rights under the GDPR:

  • The right to be informed (GDPR, articles 13 and 14) on any type of personal data processing operation (e.g., collection or further use of personal data).
  • The right to access personal data and supplementary/additional information (GDPR, article 15). Access requests can be sent via emailing the Project’s Data Protection Officer (DPO) or through the Project’s Website.
  • The right to have rectified inaccurate personal data or completed if they are incomplete (GDPR, article 16). Related requests can be sent via emailing the Project’s DPO or through the Project’s Website.
  • The right to erasure (GDPR, article 17). Deletion-related requests can be sent via emailing the Project’s DPO or through the Project’s Website.
  • The right to restrict processing (GDPR, article 18). Restriction-related requests can be sent via emailing the Project’s DPO or through the Project’s Website.
  • The right to data portability (GDPR, article 20), including the right to receive data in an appropriate (structured, commonly used and machine-readable) format, as well as to transfer these data to another entity. Related requests (e.g., to receive data) can be sent via emailing the Project’s DPO or through the Project’s Website.
  • The right to object to the processing (GDPR, article 21) – including the right to withdraw consent at any point in time. Objections can be sent via emailing the Project’s DPO or through the Project’s Website.
  • The right to complain to the relevant Supervisory Authority (GDPR, article 77). Complaints can be submitted to the Dutch Data Protection Authority (DPA), Autoriteit Persoonsgegevens (‘AP’) – see contact information of the AP.

For any information, including requests and complaints, Users of the Website can contact PopEye via the Project’s Website or through the following emails: 

From time to time, PopEye will revise this Policy. PopEye recommends that the User regularly checks whether/when it has been revised. However, PopEye will notify the User via prominent notification on the Website about any major changes that would negatively impact the User’s interests. PopEye does not envision any such changes in the near future.

This Policy is exclusively governed by the laws of the Netherlands. Any and all disputes that may arise with respect to this Policy will be referred exclusively to the competent court in Amsterdam, the Netherlands.

v2026.0.2