This policy explains what personal data is processed when you visit myeustory.eu, why, and what rights you have under the EU General Data Protection Regulation (GDPR). The short version: this website has no accounts, no forms and no newsletter, counts visits without cookies, and the only cookies it can ever set are for an optional session-recording tool that stays off unless you accept it in the cookie banner.
1. Who is responsible
myeustory.eu presents MYEUStory, a project by CEM students at SNSPA. The data controller for this website is Oana Tache, who you can reach at tache.oana@gmail.com for anything related to this policy or your data.
2. What we process, and why
Visit statistics
We use Vercel Web Analytics to see which pages are read, so we can improve the site. It records the page viewed, the referring website, your approximate country, and your browser, operating system and device type. It uses no cookies and does not identify you: visitors are told apart only by a short-lived hash of request data that is discarded after 24 hours, and the reports we see are aggregated.
Legal basis: our legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR). Retention: aggregated statistics are kept for the period Vercel offers on our plan.
Session recording (optional)
If you accept the cookie banner, we use Microsoft Clarity to see how visitors interact with the site: clicks, scrolling, mouse movement and page recordings, plus aggregate heatmaps. Clarity sets cookies to recognise your browser across a visit. It is off by default and only loads after you accept; if you reject or ignore the banner, no request is ever made to clarity.ms and no cookie is set. You can withdraw your acceptance at any time with the Cookie settings link in the footer, which stops future recording; it does not delete recordings already made. See Microsoft Clarity's own privacy documentation for exactly which cookies it sets and how long they last.
Legal basis: your consent (Article 6(1)(a) GDPR). Retention:per Microsoft Clarity's own retention period for session data.
Hosting and security logs
Our host, Vercel, processes technical data such as your IP address, browser user agent, the page requested and the time of the request, to deliver the site and protect it from abuse.
Legal basis: legitimate interest in running a secure website (Article 6(1)(f) GDPR). Retention:for a limited period, according to Vercel's log retention.
Emails you send us
If you email tache.oana@gmail.com, we receive your email address, your name if you include it, and whatever you write. We use it only to reply to you.
Legal basis: taking the steps you asked for (Article 6(1)(b) GDPR) or our legitimate interest in answering messages (Article 6(1)(f)). Retention: as long as needed to handle your message; you can ask us to delete it at any time.
Instagram messages
If you message us on Instagram, Meta processes that conversation under its own privacy policy. We only see what you choose to send.
3. Cookies and local storage
By default this website sets no cookies. Our visit statistics (Vercel Web Analytics) are cookieless. The only thing stored in your browser by default is a small note of your cookie-banner choice, so the banner does not reappear on every page; it contains no personal data and is strictly necessary for that purpose.
If you accept the cookie banner, Microsoft Clarity sets its own cookies as described above, for as long as your acceptance stands. You can clear any of this at any time in your browser settings, or change your choice with the Cookie settings link in the footer.
The YouTube video on our Our Work and Media pages is not loaded until you press play. Once you do, it is served by Google from the youtube-nocookie.com domain, and Google may set cookies or similar technologies under its own privacy policy. If you never press play, no request is made to YouTube.
4. External links
We link to Instagram, YouTube and other websites. When you follow those links you leave myeustory.eu, and the other site's own privacy policy applies.
5. Who else processes your data
- Vercel Inc. (United States): hosting, security logs and visit statistics.
- Google: our email inbox (Gmail), and the YouTube video if you press play.
- Microsoft Corporation: session recording, only if you accept the cookie banner.
Where data is transferred outside the European Economic Area, the transfer relies on the EU–US Data Privacy Framework where the provider is certified under it, or on the European Commission's Standard Contractual Clauses.
We do not sell your data and we do not use it for advertising.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we process it;
- receive your data in a portable format;
- withdraw any consent you gave, at any time.
To use any of these rights, email tache.oana@gmail.com. We will reply within one month.
7. Complaints
If you think your data has been handled unlawfully, you can complain to the Romanian data protection authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, www.dataprotection.ro, or to the data protection authority in your own EU country. We would appreciate the chance to sort it out with you first.
8. Changes to this policy
If we change how we handle data, we will update this page and the date at the top. See also our terms of use.