Політика конфіденційності
INNO-STEM BRIDGE – Building Sustainable Innovation Ecosystems and Fostering Deep Tech Entrepreneurial Talents in STEM
This is the Privacy Policy of the project INNO-STEM BRIDGE “Building Sustainable Innovation Ecosystems and Fostering Deep Tech Entrepreneurial Talents in STEM”, implemented under the EIT Higher Education Initiative (EIT HEI) in 2026–2028. The project is herein referred to as “INNO-STEM BRIDGE”, “the Project” or “we”.
This Privacy Policy explains how personal data are processed via the INNO-STEM BRIDGE website innostembridge.ztu.edu.ua (“the Website”), the Project’s social media channels and e-newsletter, and during INNO-STEM BRIDGE events and activities – trainings, co-creation challenges and hackathons, acceleration cohorts, the Women-Led track, TTO/KTO programmes, Demo Days and the STEM Education & Industry Summit, etc. It must be read in conjunction with the Cookie Policy.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law of Ukraine “On Personal Data Protection” No. 2297-VI, and the applicable national data protection legislation of the partner countries (Sweden, North Macedonia, Turkey).
This Privacy Policy may be updated, for example in connection with new Website features or new legal, contractual or administrative obligations. Important changes will be announced on the Website. This version was last modified on 25/10/2026.
1. Who is responsible for processing your personal data?
On behalf of INNO-STEM BRIDGE, the Controller for personal data processed via the Website is Zhytomyr Polytechnic State University (10005, Zhytomyr, Ukraine, 103 Chudnivska str.), INNO-STEM BRIDGE project coordinator. E-mail for data protection matters:
Personal data collected by a partner institution for its own local activities (e.g. registration for a training it delivers) are processed by that partner as a separate controller, in line with this Policy and its own institutional rules.
Processing may also be carried out by trusted processors engaged on our behalf (e.g. IT service and hosting providers, online registration, survey, newsletter and videoconferencing tools).
2. Purposes, legal basis and retention of data processing
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Operating the Website and ensuring its security and proper functioning | Technical data (IP address, browser, device, logs) | Legitimate interest (art. 6(1)(f) GDPR) | Up to 12 months, unless needed for security incidents |
| Answering enquiries sent via contact forms or e-mail | Name, e-mail, organisation, message | Legitimate interest (art. 6(1)(f)); consent where requested (art. 6(1)(a)) | Until the enquiry is closed, max. 2 years |
| Registration and participation in trainings, challenges, hackathons, acceleration cohorts, events | Name, contact details, organisation, position/study programme, participation and completion records | Performance of the Project / participation conditions (art. 6(1)(b)); legitimate interest (art. 6(1)(f)) | 5 years after the end of the Project |
| Monitoring, evaluation and reporting to the EIT / European Commission (KPIs) | Participation, attendance, completion and feedback data; reporting mostly aggregated | Legitimate interest in reporting to the EIT / European Commission under the Grant Agreement (art. 6(1)(f) GDPR) | 5 years after the end of the Project |
| Inclusion and gender monitoring (e.g. Women-Led track) | Voluntary demographic data (e.g. gender) | Consent (art. 6(1)(a)) | Until consent is withdrawn or 5 years after the end of the Project; reported only in anonymised form |
| Sending the quarterly e-newsletter | E-mail, name (optional) | Consent (art. 6(1)(a)) – opt-in | Until you unsubscribe |
| Photos, video and audio recordings at events used for communication | Image, voice, name (where indicated) | Consent or legitimate interest with prior notice (art. 6(1)(a), (f)) | Up to 5 years after the end of the Project, or until objection/withdrawal |
| Website analytics (if enabled) | Pseudonymised usage data, cookies | Consent (art. 6(1)(a)) | As set out in the Cookie Policy |
| Establishing, exercising or defending legal claims | Data relevant to the claim | Legitimate interest (art. 6(1)(f)) | Until the limitation period expires |
3. What data do we process?
We process personal data that you provide when using the Website, subscribing to the newsletter, registering for or attending INNO-STEM BRIDGE events and programmes, applying to open calls (e.g. as a team, mentor, challenge owner or investor), or cooperating with the Project. This may include:
- your name and contact details (e-mail address, telephone number), position, organisation, faculty or study programme;
- application information for Project programmes (e.g. team composition, idea or start-up description, motivation);
- attendance, completion and assessment records, certificates and mentoring allocation records;
- your responses to surveys, feedback forms and competitions;
- any special requirements or points of interest you indicate when registering for events;
- voluntary demographic data used solely for inclusion monitoring;
- photographs, video and audio recordings made during events;
- technical data collected when you visit the Website: IP address, browser type and version, operating system and platform, time zone setting, pages visited, referring and exit URLs, date and time of visit, page response times and download errors.
We apply the principle of data minimisation and do not intentionally collect special categories of personal data (art. 9 GDPR).
4. Who has access to your personal data?
Access is role-based and limited to authorised staff. Personal data may be shared with:
- INNO-STEM BRIDGE consortium partners, to the extent necessary to implement the Project: Zhytomyr Polytechnic State University (ZPSU, Ukraine, Coordinator); Chernihiv Polytechnic National University (CPNU, Ukraine); Ukrainian Catholic University (UCU, Ukraine); KTH Royal Institute of Technology (KTH, Sweden); Eskişehir Osmangazi University (ESOGU, Turkey); Foundation “Prof. Dr. Dimitar Stamboliev” (FS, North Macedonia); M6 Educational Centre (M6, North Macedonia); Amplifiers Program (AP, Ukraine).
- the European Institute of Innovation and Technology (EIT), the European Commission and the relevant EIT Knowledge and Innovation Communities (EIT KICs), for monitoring, reporting and audit purposes – Project data are entered into the EIT Portal and the eCORDA system;
- trusted processors (IT and hosting providers, event and registration platforms, newsletter services, videoconferencing tools), bound by data processing agreements;
- public authorities, where required by law or court order.
Some partners and service providers are located outside the European Economic Area (e.g. Ukraine, Turkey, North Macedonia). In such cases, transfers take place on the basis of an adequacy decision or appropriate safeguards under Chapter V GDPR, such as Standard Contractual Clauses. We do not sell your personal data or use it for commercial marketing.
5. Social media and external links
INNO-STEM BRIDGE maintains pages on social media (e.g. LinkedIn, Facebook, Instagram). When you interact with these pages, the respective platform also processes your data under its own privacy policy. The Website may contain links to other websites, including partner websites, which are not controlled by us; we recommend reading their privacy policies.
6. What rights do you have?
In relation to the processing of your personal data you have the right to:
- request access to your personal data;
- request rectification of inaccurate or incomplete data;
- request erasure or restriction of processing;
- request data portability (to receive your data in a structured, commonly used and machine-readable format);
- object to processing based on legitimate interest (art. 21 GDPR);
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with a supervisory authority – in Ukraine, the Ukrainian Parliament Commissioner for Human Rights (https://ombudsman.gov.ua); in the EU/EEA, the data protection authority of your country (https://edpb.europa.eu/about-edpb/about-edpb/members_en).
Requests can be sent to innostembridge@ztu.edu.ua. We will respond within one month of receipt. Applicable legislation may impose conditions on exercising these rights.
7. Where do we obtain data?
As a rule, we obtain data directly from you. Where data are received from another source (e.g. from a partner institution that nominated you for a programme), you will be informed separately and clearly.
8. How do we protect your personal data?
We take appropriate technical and organisational measures to protect personal data against destruction, loss, alteration and unauthorised access, including secure institutional systems and approved consortium collaboration environments, access control and encrypted connections (HTTPS). Data are not kept longer than necessary for the purposes for which they were collected; as a rule, Project records are retained for 5 years after the end of the Project, as required by the Grant Agreement, and then deleted or anonymised.
9. Is providing data voluntary?
Providing personal data is voluntary. However, certain data are necessary to participate in specific activities (e.g. a contact e-mail for event registration or an application form). Required fields will always be clearly marked on the relevant form.
Participants under 18. A minor takes part in Project activities and appears in photographs, video or audio recordings only with the written consent of a parent or legal guardian. Without it we do not publish images, voice or names of minors. A parent or guardian can withdraw the consent at any time by writing to the contact in section 11, and we then remove the materials from the channels we control.
10. Cookies and analytics
The Website uses cookies necessary for its operation and, subject to your consent, analytics cookies to understand how the Website is used. Analytics data are pseudonymised and IP anonymisation is enabled. You can manage or withdraw consent via the cookie banner or your browser settings, and opt out of Google Analytics using the add-on at https://tools.google.com/dlpage/gaoptout. Details are provided in the Cookie Policy.
11. Contact
For any questions about this Privacy Policy or the processing of your personal data, please contact the INNO-STEM BRIDGE WP7 team at Chernihiv Polytechnic National University: innostembridge@ztu.edu.ua.
Funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Institute of Innovation and Technology. Neither the European Union nor the granting authority can be held responsible for them.