Privacy Notice — COSMOS4HEplus
Last updated: 13 July 2026
COSMOS4HEplus is the network of National Contact Points (NCPs) for Space funded under the European Union’s Horizon Europe research and innovation programme.
This Privacy Notice explains how we collect and process personal data when you visit www.ncp-space.net (the “Website”), subscribe to our newsletter, contact us by email, or use information and services provided through the Website.
This Privacy Notice is intended to align with the EU General Data Protection Regulation (“GDPR”). If anything in this Privacy Notice differs from applicable law, the law applies.
1 Who is responsible for your data
For the operation and technical maintenance of this Website, the data controller is:
Astronomical Observatory of Belgrade
Volgina 7, 11060 Belgrade, Serbia
Website contact: mstojanovic@aob.rs
The Website is maintained by the Astronomical Observatory of Belgrade as a partner in the COSMOS4HEplus consortium.
COSMOS4HEplus is coordinated by FORTH/PRAXI Network, Greece. For project-level questions, including questions about COSMOS4HEplus activities, project information, partner-provided content, or National Contact Point information published on the Website, you may contact:
FORTH/PRAXI Network
Project contact: Vaya Piteli
Email: cl4@praxinetwork.gr
Depending on the nature of your request, your personal data may be handled by the Astronomical Observatory of Belgrade, FORTH/PRAXI Network, or another relevant COSMOS4HEplus partner where this is necessary to respond to your request, maintain accurate project information, or provide National Contact Point support.
No Data Protection Officer has been designated specifically for this Website. Privacy-related questions may be sent to the contacts above.
2 What personal data we collect
We collect and process only limited personal data, depending on how you use the Website.
A. When you contact us by email
The Website does not use a contact form. If you contact us using an email address published on the Website, we may process:
- your name and email address;
- your organisation, role, country, or other contact details, if included in your email;
- the content of your message and any information you choose to provide.
B. Newsletter subscription
If you subscribe to our newsletter, we collect your email address for the purpose of sending you COSMOS4HEplus and Horizon Europe space-related updates.
Newsletter subscription is voluntary. We use an email confirmation process before adding an email address to the newsletter list, so that a subscription is activated only after the email address has been confirmed.
You can unsubscribe from the newsletter at any time by using the unsubscribe link in the newsletter email or by contacting us.
C. National Contact Point contact information
The Website publishes contact information for National Contact Points (“NCPs”) for Space, where such information has been provided to us by the relevant NCP persons.
This may include:
- name and surname;
- official email address;
- official telephone number, where provided;
- organisation, country, and role/function.
We publish only professional contact information provided by the relevant NCP persons for the purpose of enabling users of the Website to identify and contact the appropriate NCP support service.
D. Data collected automatically when you visit the Website
When you visit the Website, certain technical data may be processed automatically through standard server logs, such as:
- IP address;
- browser type and version;
- device and operating system information;
- pages visited;
- date and time of access;
- referring URL;
- similar technical log data.
This data is used for the operation, security, troubleshooting, statistics, and improvement of the Website.
The Website does not provide public user accounts or public user registration.
3 Cookies and similar technologies
The Website does not currently use cookies for public visitors.
The Website does not use Google Analytics, Google Tag Manager, or similar third-party analytics or tracking tools.
We use server-side website statistics available through our hosting control panel, based on web server logs, to understand general Website usage and to maintain and improve the Website. This may include information such as number of visits, pages viewed, referring websites, approximate geographic information derived from IP address, browser type, operating system, date and time of access, and similar technical information.
These statistics are based on server logs and do not require Google Analytics or similar third-party tracking cookies.
If cookies or similar technologies are introduced in the future, we will update this Privacy Notice and, where required by law, request consent before using non-essential cookies.
4 Why we use your data and our legal bases
We process personal data only where we have a legal basis under GDPR.
To operate, secure, maintain, and improve the Website
This includes server logs, troubleshooting, preventing abuse, maintaining website functionality, and producing server-side usage statistics.
Legal basis: legitimate interests, GDPR Article 6(1)(f).
To respond to email enquiries
If you contact us by email, we process your contact details and message content in order to respond to your request.
Legal basis: legitimate interests, GDPR Article 6(1)(f).
To send the newsletter
If you subscribe to the newsletter, we process your email address to send COSMOS4HEplus and Horizon Europe space-related updates.
Legal basis: consent, GDPR Article 6(1)(a).
You may withdraw your consent at any time by unsubscribing or contacting us.
To publish and maintain NCP contact information
We process and publish professional NCP contact information to help Website users identify and contact the appropriate National Contact Point for Space-related Horizon Europe support.
Legal basis: legitimate interests, GDPR Article 6(1)(f).
To maintain accurate project and partner information
We may process limited personal data where necessary to keep COSMOS4HEplus project information, partner-provided information, and NCP information accurate and up to date.
Legal basis: legitimate interests, GDPR Article 6(1)(f).
To comply with legal obligations
Where applicable, we may process personal data to comply with legal obligations.
Legal basis: legal obligation, GDPR Article 6(1)(c).
5 How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this Privacy Notice.
Email enquiries
If you contact us by email, we may keep your message and contact details for the duration of the COSMOS4HEplus project, unless a shorter period is sufficient or deletion is requested and we have no reason to retain the data.
Newsletter subscriptions
If you subscribe to the newsletter, we keep your email address until you unsubscribe, request deletion, or until the newsletter service is discontinued.
NCP contact information
Professional NCP contact information published on the Website is kept only for as long as it remains accurate and relevant. It may be updated or removed when the relevant NCP person or organisation informs us of a change, or when the information is no longer needed.
Website logs and server-side statistics
Technical log data used for security, troubleshooting, and server-side statistics is kept for a limited period according to the hosting provider’s configuration and operational needs.
The COSMOS4HEplus project is scheduled to run until 31 August 2028. After the end of the project, personal data related to the Website will be reviewed and deleted or anonymised where it is no longer needed.
6 Who we share your data with
We do not sell personal data.
We may share or make personal data available to the following recipients where necessary:
- Mint Hosting Serbia, our hosting provider, for the purpose of hosting, securing, maintaining, and operating the Website;
- the web development and technical support provider that maintains the Website and hosting environment on our behalf;
- Mailchimp, which we use to manage and send the newsletter to subscribers;
- relevant COSMOS4HEplus partners, where this is necessary to respond to project-related or NCP-related enquiries, maintain accurate project information, or update NCP contact information.
If you subscribe to the newsletter, your email address is processed in Mailchimp for the purpose of sending COSMOS4HEplus and Horizon Europe space-related updates. Newsletter subscription is voluntary, requires email confirmation, and each newsletter email includes an unsubscribe link.
We do not share your personal data with other third parties unless this is necessary for the purposes described in this Privacy Notice, you have given your consent, or we are legally required to do so.
7 International transfers
Because the Website is maintained by the Astronomical Observatory of Belgrade and hosted by Mint Hosting Serbia, personal data related to Website operation may be processed in Serbia.
Some service providers, such as Mailchimp, may process personal data outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards under GDPR, such as adequacy decisions, the EU-US Data Privacy Framework, Standard Contractual Clauses, or other applicable transfer mechanisms, where applicable.
8 Your rights under GDPR
Depending on your location and the applicable law, you may have the right to:
- access your personal data;
- rectify inaccurate or incomplete personal data;
- erase your personal data;
- restrict the processing of your personal data;
- receive your personal data in a structured, commonly used, and machine-readable format, where applicable;
- object to processing based on legitimate interests;
- withdraw consent at any time, where processing is based on consent;
- lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, please contact us using the contact details provided in Section 1.
We may ask for information to verify your identity before responding to your request.
9 Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
However, no online service is completely secure. If you believe that your personal data or interaction with the Website may have been affected by a security issue, please contact us.
10 Children
The Website is intended for researchers, research organisations, companies, public authorities, National Contact Points, and other persons interested in Horizon Europe space-related funding opportunities and support services.
The Website is not directed at children and our services, including newsletter subscription and contact/support services, are not designed for children.
We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps, including deletion of the data where required.
11 Third-party links and downloadable documents
The Website may include links to third-party websites, including the COSMOS4HEplus LinkedIn profile and websites of project partners, European institutions, or other relevant organisations.
These links are provided for information purposes. We are not responsible for the content or privacy practices of third-party websites. Please review the privacy notices of those websites before providing them with personal data.
The Website may also provide downloadable documents, such as PDF files, deliverables, graphs, figures, or other project-related materials. Downloading these documents may be reflected in standard server logs, as part of the normal technical operation of the Website.
12 Changes to this Privacy Notice
We may update this Privacy Notice from time to time.
The “Last updated” date at the top of this page indicates when this Privacy Notice was last revised. Material changes will be posted on this page.