Privacy and Data Protection

Purpose of data collection:

To carry out our functions as National Agency under the Erasmus + programme.

Legal basis:

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Union institution or body pursuant to Regulation (EU) No 1288/2013 of the European Parliament and of the Council of 11 December 2013 establishing Erasmus+.

What categories of data we process:

Name, contact details, application details, some limited special category data (in case additional supports are needed).

Who it is shared with:

We share data with the European Commission as required under our Erasmus+ grant agreement.

How long do we retain this data?

HEA follows EC guidelines for retention of data, and this is reflected in our Records Management Policy. We will not process your data for longer than is necessary to meet the purpose for which we collect it.

Technical & organisation measures to protect personal data:

In order to protect your personal data, the HEA as National Agency has put in place a number of technical and organisational measures in place. Technical measures include appropriate actions to address online security, risk of data loss, alteration of data or unauthorised access, taking into consideration the risk presented by the processing and the nature of the personal data being processed. Organisational measures include restricting access to the personal data solely to authorised persons with a legitimate need to know for the purposes of this processing operation.

Contact information: You may contact the HEA’s DPO via, or you may contact the Data Protection Officer with regard to issues related to the processing of your personal data under Regulation (EU) 2018/1725.

How do we support data protection rights? You have specific rights as a ‘data subject’ under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular, the right to access your personal data and to rectify them in case your personal data are inaccurate or incomplete. Where applicable, you have the right to erase your personal data, restrict the processing your personal data, and object to the processing. You have the right to object to processing your personal data, which is lawfully carried out pursuant to Article 5(1)(a) on grounds relating to your particular situation.

You have a right to withdraw your consent for management (modification) of your data included in the organisational data by the National Agencies; this applies to the processing of personal data of organisations’ contact persons and authorised users. Your rights may be restricted based on objectives of public interest of the Union, in particular the objectives of the financial interest of the Union, including budgetary matters. In addition, your rights may be restricted to safeguard monitoring, inspection, or regulatory function connected to the exercise of official authority of the Union body based on Art. 132(1) of Regulation (EU, Euratom) 2018/1046 of the European Parliament and of the Council of 18 July 2018 on the financial rules applicable to the general budget of the Union. Archiving sample data, which includes your personal data, beyond the retention period provides the controller with derogations from the rights referred to in Articles 17 (right of access by the data subject), 18 (right to rectification), 20 (right to restriction of processing), 21 (notification obligation regarding rectification or erasure of personal data or restriction of processing), and 23 (right to object) subject to the conditions and safeguards referred to in Article 13 (safeguards relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes).

How can I exercise my rights?

You can exercise your rights by contacting the Data Controller ( or, in case of conflict, the Data Protection Officer of the European Commission ( If necessary, you can also address the European Data Protection Supervisor.  Where you wish to exercise your rights in the context of one or several specific processing operations, please provide their description (i.e., their Record reference(s) as specified under the section below) in your request.

Use of Cookies

The HEA does not use Cookies to identify your personal information or to detect your subsequent visits to our website.

European Commission Privacy Notice

Please click here to access the European Commission Privacy Notice

European Commission Mobility Tool Privacy Statement

The European Commission Mobility Tool Privacy Statement can be found here




Cookies are files which are transferred to your device[1] hard disk by a website. Cookies can store information about your preferences and other information which you need when you visit a website. uses cookies to monitor our website traffic, to ensure better service levels and in order to provide you with certain features such as the customised delivery of certain information. Non-necessary cookies are only set if you give your consent, these cookies provide us with analytics data about visits to our website.

What is a cookie?
Cookies are small pieces of information that are placed on your device by a website that you visit. Cookies can store information about your preferences and other information that can be read by the website on any subsequent visit by you. The information stored in a cookie relates to how you browse the website and allows the website to remember you and your preferences when you return to it. More information on cookies, including how to disable cookies, can be found on

Types of Cookies
Session cookies only last for the duration of your visit to the website, and are deleted when you close your browser.

Persistent cookies remain after you have closed your browser, and allow a website to remember your actions and preferences when you return.  These cookies are only used when you have given your consent for them.

How does use cookies?
The HEA uses cookies for analytics so it can track the number of visits to the website, the county location of that visit, the type of browser you are using etc. This information is used on an aggregate, and not an individual, basis to help provide visitors with a better experience of our website.  These cookies is set based on your consent.

There is also a cookie set when closing the cookie consent notification so you do not need to close it every time you visit the website.  This cookie is necessary and is not based on consent.[2]

The HEA will not personally identify visitors and will not use cookies to contact you. We are committed to respecting your privacy at all times.

Cookies do not in any way compromise the security of your computer.


Cookies in use:

All statistics cookies are based on consent.

Cookie Name Purpose Session / Persistent Expiry Period Cookie Type First / Third Party Name of Third Party (if applicable)
_cfduid Identify individual clients behind a shared IP address and apply security settings. Persistent 11 months Necessary. Third party Highcharts
_ga Google Analytics Persistent Self-resetting (-1 day) Statistics Third Party Google Analytics
_gid Google Analytics Persistent Self-resetting

(0 days – same time as refresh)

Statistics Third Party Google Analytics
_gat Google Analytics Persistent Self-resetting

(1 day from refresh time)

Statistics Third Party Google Analytics
YSC YouTube Session Session performance Third Party YouTube
GPS YouTube Session Session analytics Third Party YouTube
VISITOR_INFO1_LIVE YouTube Persistent 180 days Preference, Video, advertising Third Party YouTube
PREF YouTube Persistent 243 days Preference, video Third Party YouTube
IDE Advertising cookie for YouTube Persistent 1 year advertisement Third Party (YouTube)


You can configure your browser to block cookies.

While we process cookies based on consent, you can also manage your cookie settings varies from browser to browser. You can find more information about how to change your cookie settings from your browser’s help menu.

For Internet Explorer™:

For Safari™:


For Firefox™:

For Opera™:

For more information about cookies and how to manage them, you can visit the website of the Irish Data Protection Commission


[1] A device in this context can be a PC, a mobile device or any other device that can store information.

[2] Please refer to the E-Privacy Regulation for more information.

Our use of cookies

We use necessary cookies to make our site work. We'd also like to set optional analytics cookies to help us improve it. We won't set these optional cookies unless you enable them. Using this tool will set a cookie on your device to remember your preferences.

For more detailed information about the cookies we use, see our Privacy Policy page

Necessary cookies

Necessary cookies enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.

Analytics cookies

We'd like to set Google Analytics cookies to help us to improve our website by collecting and reporting information on how you use it. The cookies collect information in a way that does not directly identify anyone.