How we collect, store and protect your personal data on the VR Freestyle Academy website, in line with the GDPR.
Who we are
This website (academy.vrfreestyle.eu) is operated by Udruga Pannonian (Pannonian Association), the lead beneficiary of the VR Freestyle project, co-funded by the European Union under the Erasmus+ Sport programme (2025–2027).
Udruga Pannonian
Cara Hadrijana 5, 31000 Osijek, Croatia
info@pannonian.org
Pannonian acts as the data controller for personal data collected through this website.
What data we collect
The Academy is a free, non-commercial learning website. You can use it without an account, and we collect very little personal data:
- Server logs: when you visit, our hosting provider records technical data such as your IP address, browser type, the pages you request and the time of the request. This is needed to deliver the website and keep it secure.
- Security logs: failed attempts to log in to the site’s administration area are recorded with the IP address, to protect the site against attacks. This only concerns people who try to log in.
- Analytics: we use Google Analytics 4 to understand how the Academy is used (pages visited, time on page, approximate country, device type). Analytics cookies are only set if you accept them in the cookie banner. Until you do, or if you reject them, Google Consent Mode sends Google limited signals without cookies, which cannot be linked to you across visits.
- Embedded YouTube videos: lesson videos are embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com). When a page with a video loads, your browser connects to Google’s servers, which receive technical data such as your IP address. YouTube may also set cookies in your browser when a page with a video loads, and Google may collect further data when you play a video, under its own privacy policy.
- Email correspondence: if you email us, we store your name, email address and the content of your message in order to reply.
We do not use advertising trackers on this site. There are no comments, contact forms, newsletter subscriptions, user accounts for visitors or e-commerce, and we do not collect sensitive personal data.
How we use your data and legal basis
- Server and security logs: to run the website, fix problems and protect it against misuse. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
- Analytics: to understand which lessons are used and improve the Academy. Legal basis: your consent for analytics cookies (Art. 6(1)(a) GDPR); legitimate interests (Art. 6(1)(f) GDPR) for the limited cookieless signals sent before or without consent.
- Embedded videos: to show the training videos the lessons are built on. Legal basis: legitimate interests (Art. 6(1)(f) GDPR), and your consent where cookies are involved (Art. 6(1)(a) GDPR).
- Email: only to reply to your enquiry and, where relevant, to pass it on to the right project partner. We do not use your email address for marketing. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
How long we keep your data
- Server and security logs: kept by our hosting provider for a limited period for security and troubleshooting, then deleted.
- Analytics data: kept in Google Analytics for 14 months, then deleted automatically.
- Email correspondence: kept for as long as necessary to resolve your enquiry, and no longer than 3 years after that, unless a legal obligation requires otherwise.
Who we share data with
We do not sell or rent your personal data. We share it only in these limited cases:
- Hosting provider: our web host stores the website and its server logs on our behalf, under a data processing agreement.
- Google (Analytics): processes usage data on our behalf under Google’s data processing terms. Google may transfer data outside the EEA under the EU–US Data Privacy Framework.
- Google (YouTube): receives technical data when an embedded video loads or plays. Google acts as an independent controller and may transfer data outside the EEA under the EU–US Data Privacy Framework. See Google’s privacy policy.
- Project partners: if your enquiry concerns a specific partner (Simple Session in Estonia, JB Ride in France, MSSA in Malta or Foton in Slovenia), we may forward your email to them with your knowledge. Partners are bound by their own GDPR obligations.
- Legal obligation: if required by law or a court order.
Cookies
This website uses only a few cookies:
- Technical cookie: our hosting provider sets a session cookie to deliver the site securely. It is deleted when you close your browser.
- Consent cookie: remembers your choice in the cookie banner, so we do not ask again on every page.
- Analytics cookies (
_ga,_ga_4N42ML25EL): set by Google Analytics only after you accept analytics cookies. They distinguish visitors and sessions and expire after up to 2 years. - YouTube: YouTube may store cookies or similar data in your browser when a page with an embedded video loads or when you play it.
- Login cookies: only for site editors who log in to the administration area.
You can change your cookie choice at any time through the cookie banner, and delete cookies in your browser settings. See our Cookie Policy for the full list of cookies.
Your rights
Under the GDPR you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate data.
- Erasure: ask us to delete your data, subject to legal retention obligations.
- Restriction: ask us to limit how we use your data while a dispute is resolved.
- Objection: object to processing based on legitimate interests.
- Portability: receive your data in a structured, machine-readable format.
- Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of earlier processing.
To exercise any of these rights, contact us at info@pannonian.org. We will respond within 30 days. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): azop.hr.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page.