Privacy Policy

Last Updated: January 2026

The Drone4Build project website (https://drone4build.eu) is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable laws. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit or interact with our website (“Service”), and informs you of your rights. By using our website, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the site.

Data Controller and Contact

The Data Controller for personal data processing on this site is Abstract-Technology GmbH, the project coordinator, located in Berlin, Germany. Abstract-Technology also serves as our Data Protection Officer (DPO) for the Drone4Build project. For any questions or requests regarding your personal data, you can contact us at info@abstract-technology.de. You may also refer to our Legal Notice / Imprint for further contact details.

Personal Data We Collect

We only collect personal data that is necessary for the operation of this educational Erasmus+ project website and to provide you with information or services you request. The types of data we collect include:

Information You Provide Voluntarily: If you contact us via email, contact form, or other means, we collect your name, email address, and any other information you provide in your message. This data will be used solely to respond to your inquiry or request. We will not collect additional personally identifiable information (such as your phone number or affiliation) unless you choose to provide it.

Usage Data and Log Files: When you visit our website, our system automatically collects certain technical information to ensure the site functions correctly and to maintain security. This Usage Data includes details such as your device’s Internet Protocol (IP) address, the date and time of access, the pages or resources viewed, the amount of data transmitted, the page you came from (referrer URL), and information about your browser and operating system. These server log files are essential for diagnosing problems, preventing malicious activity, and analyzing aggregate usage trends. We process this data based on our legitimate interest in ensuring network and information security (GDPR Art. 6(1)(f)). Log data is stored only for a short period (typically up to 7 days) and is deleted or anonymized thereafter, unless retention is required to investigate a specific security incident.

Cookies and Tracking Technologies: Like most websites, we use cookies and similar technologies to enhance your experience and gather analytics. Cookies are small text files stored on your device that help the site remember your preferences and track usage of our pages. For example, we use cookies to remember if you’ve seen cookie consent banners and to collect anonymized statistics on how our site is used. For more details on the cookies we use and how to control them, please see our separate Cookies Policy. We do not use cookies to personally identify you without your consent. Non-essential cookies (such as analytics cookies) will only be activated with your opt-in consent, in compliance with EU ePrivacy rules.

Analytics Data (Google Analytics): We use Google Analytics, a web analytics service provided by Google, to collect information about how visitors use our site. Google Analytics uses cookies to help analyze site usage (e.g. which pages are most visited). The information generated (including your IP address, device and browser info, and on-site behavior) is transmitted to Google and aggregated for us in reports. We have configured Google Analytics 4 (GA4) in privacy-friendly ways: IP addresses of users from the EU are anonymized by default (GA4 does not store full IPs), and data retention is limited. Google Analytics acts as our data processor for analytics, meaning Google processes usage data only on our behalf and under our instructions. We do not receive personally identifying information through Google Analytics. Google may process analytics data on servers outside the EU (e.g., in the United States)

however, Google has committed to GDPR compliance measures and uses Standard Contractual Clauses and other safeguards to protect EU data. You are not tracked by Google Analytics unless you have consented to analytics cookies via our cookie banner. You can also opt-out or disable analytics cookies at any time (see Cookies Policy below and “Your Choices” section).

Social Media Plug-ins: Our site may include links or embedded content from third-party platforms (such as LinkedIn). For example, if we display a LinkedIn “share” button or feed on our page, your browser may connect to LinkedIn’s servers and certain data (like your IP address and possibly cookies) could be transmitted to LinkedIn. We do not collect the personal data from your social network accounts; however, the third-party provider (e.g. LinkedIn) might collect data about your interaction. Please see the Social Media Disclaimer section of this policy and LinkedIn’s own privacy policy for details on how they handle your information.

Other Voluntary Data: If we offer features such as newsletter sign-ups or event registrations in the future, we will collect only the information needed (such as name and email for a newsletter, or name/affiliation for event sign-up) and provide specific notices at the collection point. All such activities will be optional and based on your consent (GDPR Art. 6(1)(a)).

We do not intentionally collect any sensitive personal data (such as race, health information, etc.) on this site. Please refrain from submitting such data through our contact forms or emails.

Our website is intended for a general audience. We do not knowingly collect personal data from children under the age of 16. If you are under 16, please do not provide any personal information. If we learn that we have inadvertently collected personal data from a child without appropriate consent, we will promptly delete it.

Purposes and Legal Bases for Processing

We use personal data collected through the website only for the following purposes, and rely on the legal bases as noted:

  • Providing and Improving the Website: We process usage data and necessary cookies to display our site to you correctly, maintain security, and measure performance. Legal basis: Legitimate Interest (Art. 6(1)(f) GDPR) - it is in our interest (and yours) to have a secure, well-functioning site.
  • Responding to Inquiries: If you contact us with questions or requests, we use your provided information (e.g. email address) to communicate with you and provide answers or support. Legal basis: Contract or Pre-contractual Measures (Art. 6(1)(b) GDPR) - addressing your inquiry is considered a service you requested from us; alternatively, Consent (Art. 6(1)(a) GDPR) when you voluntarily submit your information.
  • Analytics and Performance: We use anonymized and aggregate analytics (via Google Analytics cookies, if consented) to understand how our site is used (e.g. which pages are popular, how users navigate) and to improve content and user experience. Legal basis: Consent - we will only use analytics cookies if you give consent through our cookie consent banner (Art. 6(1)(a) GDPR). You can withdraw consent at any time (see Your Choices below).
  • Project Communications: As an Erasmus+ project, we may periodically publish newsletters, updates, or results. If you subscribe to a newsletter or mailing list (if available), we will use your email to send those communications, based on your consent at signup. Each email would include an option to unsubscribe.
  • Legal Compliance and Vital Interests: We will process or disclose personal data if necessary to comply with our legal obligations or to protect vital interests. For example, we may process data to meet EU project reporting requirements (in anonymized form), or disclose information if required by law or enforcement requests.

We will not use your personal data for any purpose incompatible with the ones listed above without obtaining your prior consent.

Data Sharing and Disclosure

We treat your personal data with care and confidentiality. We do not sell or rent personal data to third parties. We only share data in the following circumstances:

  • Project Consortium Partners: Drone4Build is a collaborative project with multiple partner organizations. If it is necessary to forward an inquiry you sent us to a relevant project partner (for example, if your question pertains to that partner’s expertise or an event they host), we will do so. All partners are similarly bound by GDPR and by consortium agreements to protect your data. Any such sharing will be limited and purposeful (e.g., sharing your contact info with a partner organizing a training session you signed up for).
  • Service Providers and Processors: We use third-party service providers to support our website and communications. This includes our website hosting provider and analytics provider (Google). These providers process data only on our behalf and under our instructions. We have appropriate data processing agreements in place to ensure they protect your data. For instance, Google Analytics only uses data for our analytics and is not allowed to use it for other Google purposes without consent. Another example is our email server provider which handles email delivery. These third parties are not permitted to disclose or use your data for any other purpose.
  • Social Media Platforms: If you interact with Drone4Build content on third-party platforms like LinkedIn, those interactions (e.g., comments, likes) may be visible to others on those platforms, and the platform provider will process your data under its own terms. We do not pull your social media personal data into our site, though we might see aggregated insights (e.g., number of followers). Please see Social Media Disclaimer for more details.
  • Legal Requirements: We may disclose personal data when required to by law or legal process, or when we in good faith believe that disclosure is necessary to comply with a legal obligation; to protect and defend the rights, property or safety of our project, our consortium members, or website users; or to respond to an emergency involving personal data. For example, if required by the European Commission or auditors for project verification, we may need to provide certain documentation. In all cases, we will limit the disclosure to what is strictly necessary.

Other than the above, we will not disclose your information to third parties. In particular, we do not use third-party advertising networks or share data for marketing purposes.

International Data Transfers

As a European-based project, we strive to store and process personal data within the European Union/European Economic Area when possible. Our main servers are located in the EU. However, some of our service providers might process data in other countries:

  • Google Analytics (United States): Usage data collected via Google Analytics may be transferred to and processed on Google servers in the United States or other countries. We have taken steps to minimize data (e.g., IP anonymization) and rely on Google’s commitment to GDPR compliance. Google is certified under the EU Standard Contractual Clauses for data transfers, which provide a legal mechanism for such transfers. Despite these safeguards, we acknowledge that U.S. authorities could potentially access data for lawful purposes, and we monitor legal developments concerning Google Analytics.

Whenever we need to transfer personal data outside the EU/EEA, we will ensure appropriate safeguards are in place as required by GDPR Chapter V. These may include entering into Standard Contractual Clauses approved by the European Commission, verifying if the recipient is in a country with an adequacy decision, or obtaining your explicit consent if none of the other bases apply.

By using our site or submitting information to us, you understand that your data might be transferred internationally as described. We will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy.

Data Retention

  • Inquiry Data: If you contact us, we will retain your communications for as long as needed to address your request and follow-up, and then delete them within a reasonable period (for example, we might periodically delete inquiry emails older than 1 year). If a correspondence must be kept for legal reasons or project record-keeping, we will archive it securely and not use it for other purposes.
  • Analytics Data: Google Analytics data is retained for the period we have configured (e.g., 14 months, per GA4’s options) and is automatically deleted after that, unless used in aggregated reports.
  • Log Files: Server logs containing IP addresses and other usage data are retained for only a short duration (typically a few days to weeks) unless an issue requires longer retention.
  • Cookies: Cookies have varying lifespans. See Cookies Policy for specific cookie durations. You can clear cookies from your browser at any time to remove data stored in cookies.
  • Project Duration: Drone4Build is a time-limited Erasmus+ project. Personal data collected in the context of project activities will generally be deleted or anonymized upon project completion (unless continued retention is necessary for reporting or legal obligations). We will not keep your data indefinitely.

When we no longer need personal data, we will either delete it or irreversibly anonymize it so that you can no longer be identified.

Data Security

We take appropriate technical and organizational measures to secure your personal data. These include the use of secure servers, encryption of data in transit (our website is served over HTTPS/SSL), and access controls to limit who in the project can access personal information. We regularly update our software and monitor for vulnerabilities to prevent unauthorized access or data breaches.

Despite our best efforts, please note that no Internet transmission or electronic storage method is 100% secure. We cannot guarantee absolute security of information. You are also responsible for using a secure connection (e.g., ensuring your device is protected and using secure networks). If you have reason to believe that your interaction with us is no longer secure (for example, you feel your personal data might have been compromised), please contact us immediately.

If, in the unlikely event, a data breach occurs that affects your personal data, we will notify you and the relevant supervisory authority as required by law.

Your Rights under GDPR

As an individual (“data subject”) in the EU, you have the following rights regarding your personal data that we hold or process:

  • Right of Access
  • Right to Rectification
  • Right to Erasure
  • Right to Restriction of Processing
  • Right to Object
  • Right to Data Portability
  • Right to Withdraw Consent
  • Right to Not Be Subject to Automated Decisions

To exercise any of these rights, please contact us at info@abstract-technology.de with your specific request. We may need to verify your identity to ensure we do not disclose data to the wrong person (for example, by asking you to send the request from the same email address you used to contact us, or by other verification means). We will respond to your request as soon as possible and at the latest within one month, in accordance with GDPR. There is no fee for making a request, unless it is manifestly unfounded or excessive (in which case we can charge a reasonable fee or refuse, as permitted by law).

If you believe our processing of your personal data infringes the law, you also have the right to lodge a complaint with a supervisory data protection authority in your country (for example, your national Data Protection Authority). We encourage you to contact us first so we can address your concerns, but you are entitled to contact the authority at any time.

Your Choices and Controls

Cookie Preferences: When you first visit our site, you will be presented with a cookie consent banner. Non-essential cookies (like analytics) are disabled until you accept them. You can choose to accept or refuse analytics cookies. If at any time you change your mind, you can update your preferences by using the “Manage Cookies” link on our site (if available) or by clearing cookies in your browser and revisiting the site. You can also instruct your browser to block cookies or to alert you when cookies are being sent. Please note that if you disable all cookies, some parts of our site might not function properly (for example, certain preferences might not be saved).

For detailed guidance on how to adjust browser cookie settings or delete cookies, you can consult these resources (external):

  • Google Chrome: [Chrome Support - Clear, enable, and manage cookies]
  • Mozilla Firefox: [Firefox Support - Delete cookies to remove information]
  • Microsoft Edge/Internet Explorer: [Microsoft Support - Enable/disable cookies]
  • Apple Safari: [Apple Support - Manage cookies and website data]

(These links are provided for convenience; we are not responsible for their content.)

Analytics Opt-Out: In addition to managing through our banner or browser settings, Google offers a browser add-on to opt out of Google Analytics tracking on all websites (see Google’s official tools). We honor the Do Not Track (DNT) signal - if your browser is set to DNT, our analytics will be disabled by default.

Email Communications: If you have subscribed to any Drone4Build communications (e.g., a newsletter), you can unsubscribe at any time via the link provided in the email or by contacting us to remove you from the list. We will promptly respect such requests.

Social Media: If you follow us or interact with us on LinkedIn or other social platforms, you can control what information is visible to us via your privacy settings on those platforms. You may unfollow or disconnect at any time. For instance, if you no longer want LinkedIn to show you our updates or share your interactions with us, you can adjust your LinkedIn follow settings.

Links to Other Websites

Our website contains links to external sites, such as partner institution’s pages or relevant resources. If you click on a third-party link, you will be directed to an external website not operated by us. This Privacy Policy applies only to Drone4Build’s website, so we encourage you to review the privacy policies of any external sites you visit. We have no control over and assume no responsibility for the content or privacy practices of third-party websites.

Social Media Presence

The Drone4Build project maintains a presence on third-party platforms, specifically LinkedIn, to disseminate project updates and engage with the community. Please note that if you visit our LinkedIn page or communicate with us through LinkedIn, the processing of your data is primarily governed by LinkedIn’s privacy policy. We do not export your LinkedIn personal data into our systems; however, we can see information you’ve made public on your profile and any direct messages or comments you send to us. We will handle any such information in accordance with this Privacy Policy (for example, if you ask a question via LinkedIn, we may later store that correspondence internally to ensure we address it, just as we would an email inquiry). For more details on this, see our Social Media Disclaimer section.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in legal requirements or our project’s practices. We will post any modifications on this page with a new “Last Updated” date. If the changes are significant, we may also notify you via a notice on our homepage or by email (if you have provided it to us for this purpose), prior to the change becoming effective. We encourage you to review this page periodically for the latest information on our privacy practices.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

Abstract-Technology GmbH (Drone4Build Coordinator)
Manfred-von-Richthofen-Straße 4, 12101 Berlin, Germany
Email: info@abstract-technology.de
Tel: +49 30 214 611 08

Please include in your correspondence any relevant details that will help us assist you (for example, the context in which you provided the data, or the rights you wish to exercise). We will be happy to address your inquiries.