Data Protection Notice

Information on the processing of personal data on the EU OS website in accordance with Articles 13 and 14 GDPR.

This notice explains which personal data is processed when you visit this website (<eu-os.eu>) and what rights you have under the General Data Protection Regulation (GDPR).

Controller

The controller within the meaning of Article 4(7) GDPR is:

Robert Riemann, Brussels, Belgium Email: robert-eu-os@riemann.cc

Robert Riemann operates this website on behalf of the EU OS community project and runs the web analytics software described below on a server hosted by Uberspace (hosting provider acting as processor). The website itself is a static site published via GitLab Pages.

Web analytics with Matomo

This website uses Matomo, a free and open source web analytics software, self-hosted by the controller. Data is not shared with Matomo's developers or any other third party.

Data processed

When you visit a page, your browser sends the following data to the Matomo server:

  • pages visited and time of the visit
  • referrer website (the page you came from)
  • browser type and version, operating system, device type and screen resolution
  • browser language
  • your IP address, which is anonymised immediately (see below), and the approximate country or region derived from it

Safeguards

  • No cookies: Matomo is configured without cookies. No information is stored on your device.
  • No third-party cookies and no cross-site tracking. You are not tracked across other websites.
  • IP anonymisation: your IP address is truncated before it is stored. The last 2 bytes are masked (for example, 192.168.123.45 becomes 192.168.0.0). The full IP address is never stored.
  • No visit logs: individual visit logs are disabled. Only aggregated statistics are retained.
  • No profiling and no automated decision-making within the meaning of Article 22 GDPR.

Because of these measures, the remaining data cannot be used to identify you directly.

Purposes

The data is processed only to:

  1. evaluate and improve the outreach campaign of the EU OS project, for example by understanding which content and channels reach interested readers; and
  2. identify regions with interest in EU OS, in order to guide the direction of the EU OS project.

The legal basis is our legitimate interest under Article 6(1)(f) GDPR in understanding how the website is used and in improving the project's outreach. Given the safeguards above (no cookies, anonymised IP addresses, no visit logs, aggregated statistics only), the impact on your privacy is minimal and does not override this interest. As no information is stored on or read from your device, your consent under the ePrivacy rules is not required.

Retention

Analytics data is stored for 180 days and then deleted automatically.

Recipients and transfers

Data is accessible only to the controller and the project maintainers who need it for the purposes above. The hosting provider processes data on the controller's behalf. Your data is not transferred to third countries or shared with advertising or analytics vendors.

Your rights

You have the right to:

  • access your personal data (Article 15 GDPR)
  • rectification (Article 16)
  • erasure (Article 17)
  • restriction of processing (Article 18)
  • data portability (Article 20)
  • object to the processing at any time on grounds relating to your particular situation (Article 21)

To exercise these rights, contact the controller using the address above. Please note that, because IP addresses are anonymised and no identifiers are stored, the controller generally cannot single out data relating to you and may therefore be unable to identify your data (Article 11 GDPR). You are not required to provide any data to use this website, and you can block requests to the analytics server with your browser or a content blocker.

Opt Out

Complaints

You have the right to lodge a complaint with a supervisory authority. The competent authority in Belgium is:

Autorité de protection des données (APD) / Gegevensbeschermingsautoriteit (GBA) Rue de la Presse 35 / Drukpersstraat 35 1000 Brussels, Belgium Website: dataprotectionauthority.be Email: contact@apd-gba.be

You may also contact the authority of your habitual residence or place of work.

Changes

We may update this notice when the analytics setup changes. The current version applies.

Last updated: 29 September 2026

FAQ