Privacy and Data Protection
Purpose of data collection:
To carry out our functions as National Agency under the Erasmus + programme.
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Union institution or body pursuant to Regulation (EU) No 1288/2013 of the European Parliament and of the Council of 11 December 2013 establishing Erasmus+.
What categories of data we process:
Name, contact details, application details, some limited special category data (in case additional supports are needed).
Who it is shared with:
We share data with the European Commission as required under our Erasmus+ grant agreement.
How long do we retain this data?
HEA follows EC guidelines for retention of data, and this is reflected in our Records Management Policy. We will not process your data for longer than is necessary to meet the purpose for which we collect it.
Technical & organisation measures to protect personal data:
In order to protect your personal data, the HEA as National Agency has put in place a number of technical and organisational measures in place. Technical measures include appropriate actions to address online security, risk of data loss, alteration of data or unauthorised access, taking into consideration the risk presented by the processing and the nature of the personal data being processed. Organisational measures include restricting access to the personal data solely to authorised persons with a legitimate need to know for the purposes of this processing operation.
Contact information: You may contact the HEA’s DPO via email@example.com, or you may contact the Data Protection Officer firstname.lastname@example.org with regard to issues related to the processing of your personal data under Regulation (EU) 2018/1725.
How do we support data protection rights? You have specific rights as a ‘data subject’ under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular, the right to access your personal data and to rectify them in case your personal data are inaccurate or incomplete. Where applicable, you have the right to erase your personal data, restrict the processing your personal data, and object to the processing. You have the right to object to processing your personal data, which is lawfully carried out pursuant to Article 5(1)(a) on grounds relating to your particular situation.
You have a right to withdraw your consent for management (modification) of your data included in the organisational data by the National Agencies; this applies to the processing of personal data of organisations’ contact persons and authorised users. Your rights may be restricted based on objectives of public interest of the Union, in particular the objectives of the financial interest of the Union, including budgetary matters. In addition, your rights may be restricted to safeguard monitoring, inspection, or regulatory function connected to the exercise of official authority of the Union body based on Art. 132(1) of Regulation (EU, Euratom) 2018/1046 of the European Parliament and of the Council of 18 July 2018 on the financial rules applicable to the general budget of the Union. Archiving sample data, which includes your personal data, beyond the retention period provides the controller with derogations from the rights referred to in Articles 17 (right of access by the data subject), 18 (right to rectification), 20 (right to restriction of processing), 21 (notification obligation regarding rectification or erasure of personal data or restriction of processing), and 23 (right to object) subject to the conditions and safeguards referred to in Article 13 (safeguards relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes).
How can I exercise my rights?
You can exercise your rights by contacting the Data Controller (email@example.com) or, in case of conflict, the Data Protection Officer of the European Commission (firstname.lastname@example.org). If necessary, you can also address the European Data Protection Supervisor. Where you wish to exercise your rights in the context of one or several specific processing operations, please provide their description (i.e., their Record reference(s) as specified under the section below) in your request.
European Commission Privacy Notice
Please click here to access the European Commission Privacy Notice
European Commission Mobility Tool Privacy Statement
The European Commission Mobility Tool Privacy Statement can be found here
What is a cookie?
Cookies are small pieces of information that are placed on your device by a website that you visit. Cookies can store information about your preferences and other information that can be read by the website on any subsequent visit by you. The information stored in a cookie relates to how you browse the website and allows the website to remember you and your preferences when you return to it. More information on cookies, including how to disable cookies, can be found on aboutcookies.org.
Types of Cookies
Session cookies only last for the duration of your visit to the website, and are deleted when you close your browser.
Persistent cookies remain after you have closed your browser, and allow a website to remember your actions and preferences when you return. These cookies are only used when you have given your consent for them.
There is also a cookie set when closing the cookie consent notification so you do not need to close it every time you visit the website. This cookie is necessary and is not based on consent.
Cookies do not in any way compromise the security of your computer.
Cookies in use:
All statistics cookies are based on consent.
|Cookie Name||Purpose||Session / Persistent||Expiry Period||Cookie Type||First / Third Party||Name of Third Party (if applicable)|
|_cfduid||Identify individual clients behind a shared IP address and apply security settings.||Persistent||11 months||Necessary.||Third party||Highcharts|
|_ga||Google Analytics||Persistent||Self-resetting (-1 day)||Statistics||Third Party||Google Analytics|
(0 days – same time as refresh)
|Statistics||Third Party||Google Analytics|
(1 day from refresh time)
|Statistics||Third Party||Google Analytics|
|VISITOR_INFO1_LIVE||YouTube||Persistent||180 days||Preference, Video, advertising||Third Party||YouTube|
|PREF||YouTube||Persistent||243 days||Preference, video||Third Party||YouTube|
|IDE||Advertising cookie for YouTube||Persistent||1 year||advertisement||Third Party||Doubleclick.net (YouTube)|
You can configure your browser to block cookies.
While we process cookies based on consent, you can also manage your cookie settings varies from browser to browser. You can find more information about how to change your cookie settings from your browser’s help menu.
For Internet Explorer™: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
For more information about cookies and how to manage them, you can visit the website of the Irish Data Protection Commission https://www.dataprotection.ie/
 A device in this context can be a PC, a mobile device or any other device that can store information.
 Please refer to the E-Privacy Regulation for more information.