Privacy Policy
Last updated: April 2026
1. Introduction
The SUSHI-PACK project ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website (sushipack.net) and interact with our services.
This website is operated on behalf of the SUSHI-PACK research consortium, coordinated by Technological University of the Shannon (TUS), Ireland. The processing of personal data is governed by Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR).
2. Data Controller
Technological University of the Shannon (TUS)
PRISM Research Institute, Athlone Campus
Ireland
Email: info@sushipack.net
3. What Data We Collect
We collect personal data only when you voluntarily provide it:
- Newsletter subscription: Email address only.
- Contact form: Name, email address, subject, and message content.
- Admin accounts: Email address, name, and hashed password (project team members only).
We do not use cookies for tracking purposes. Our website analytics are provided by Cloudflare Web Analytics, which is privacy-first and does not use cookies, does not track individual users, and does not collect personal data.
4. How We Use Your Data
| Data | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Newsletter email | To send annual project updates and research highlights | Consent (Art. 6(1)(a)) |
| Contact form data | To respond to your enquiry | Legitimate interest (Art. 6(1)(f)) |
| Admin account data | Website administration and content management | Legitimate interest (Art. 6(1)(f)) |
5. Third-Party Services
We use the following third-party services to operate this website:
| Service | Provider | Purpose | Data Location |
|---|---|---|---|
| Email delivery | Brevo (France) | Sending newsletters and transactional emails | EU |
| CDN & DNS | Cloudflare (US) | Website performance and security | Global (EU nodes) |
| Analytics | Cloudflare Web Analytics | Privacy-first, cookie-free analytics | No personal data |
| File storage | Cloudflare R2 (EU) | Hosting downloadable files and images | EU |
| Server hosting | Hetzner (Germany) | Backend API and database hosting | EU (Germany/Finland) |
All service providers are either EU-based or operate under appropriate data transfer mechanisms in compliance with GDPR Chapter V.
6. Data Retention
- Newsletter subscribers: Until you unsubscribe, or until the end of the SUSHI-PACK project, whichever comes first.
- Contact form messages: Retained for up to 12 months after the enquiry is resolved.
- Admin accounts: For the duration of the project.
- Analytics: No personal data is stored (Cloudflare Web Analytics is cookie-free).
7. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access — Request a copy of your personal data.
- Right to rectification — Request correction of inaccurate data.
- Right to erasure — Request deletion of your data ("right to be forgotten").
- Right to restrict processing — Limit how we use your data.
- Right to data portability — Receive your data in a structured, machine-readable format.
- Right to withdraw consent — Withdraw your newsletter subscription at any time via the unsubscribe link in every email.
- Right to object — Object to processing based on legitimate interest.
- Right to lodge a complaint — With a supervisory authority (e.g., the Irish Data Protection Commission).
To exercise any of these rights, contact us at info@sushipack.net.
8. Cookies
This website does not use tracking cookies. We use Cloudflare Web Analytics, which operates entirely at the network edge without placing cookies on your device. No cookie consent banner is required as no cookies are set.
If you log into the administration panel, a session token is stored in your browser to maintain your login state. This is a strictly necessary functional token and does not require consent under GDPR and the ePrivacy Directive.
9. Security
We implement appropriate technical and organisational measures to protect your personal data, including HTTPS encryption for all connections, encrypted storage of sensitive data (passwords, API keys), and access controls limited to authorised project personnel.
10. Children's Privacy
This website is not directed at children under the age of 16, and we do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
12. Contact
For any questions regarding this Privacy Policy or your personal data, please contact:
SUSHI-PACK Project
Technological University of the Shannon (TUS)
PRISM Research Institute, Athlone Campus
Ireland
Email: info@sushipack.net