Legal

Privacy & Cookie Policy

Last updated: March 2026

Who We Are

European Digital Resilience Labs is a Special Interest Group operating under the EuroCham umbrella (European Chamber of Commerce, Silicon Valley). Our website is located at edrlab.eu.

What Information We Collect

We collect information you provide directly when you use our contact form: your name, email address, organisation, and the content of your message. We do not collect any information automatically beyond what is described in the Cookies section below.

We do not collect sensitive personal data, payment information, or data from minors.

Why We Collect It

We use your information solely to respond to your enquiry and, where relevant, to follow up on your expressed interest in the SIG. We do not use your data for automated decision-making or profiling.

Legal basis (GDPR): Legitimate interests — responding to direct enquiries from individuals who have chosen to contact us.

How Long We Keep It

Contact form submissions are retained for up to 12 months and then deleted. If you become a member or partner, we retain relevant contact information for the duration of that relationship and up to 24 months thereafter.

Who We Share It With

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data is processed by WordPress.com (Automattic), who provide our website hosting and infrastructure, acting as a data processor on our behalf under appropriate data processing agreements.

Cookies

We use two categories of cookies:

Essential cookies

Required for the website to function. These include session management and security tokens. These cannot be disabled.

Analytics cookies — optional

We use Google Analytics to understand how visitors use this site. Google Analytics sets cookies that collect information about your visit in anonymised form, including pages visited, time on site, and approximate location. This data is processed by Google LLC and may be transferred to and stored in the United States.

Data retention is set to 14 months. You can opt out at any time via the cookie banner or by installing the Google Analytics opt-out add-on.

A cookie banner appears on your first visit. Change your preference at any time via cookie settings in the footer.

Your Rights

Depending on where you are located, you may have the following rights:

Under GDPR — EEA and UK residents

—Right to access your data

—Right to rectification

—Right to erasure ("right to be forgotten")

—Right to restrict processing

—Right to data portability

—Right to object to processing

Under CCPA — California residents

—Right to know what personal information is collected and how it is used

—Right to know whether personal information is sold or disclosed and to whom

—Right to opt out of the sale of personal information — we do not sell personal information

—Right to non-discrimination for exercising your rights

—Right to deletion of personal information

To exercise any of these rights, please use the contact form. EEA and UK residents may also lodge a complaint with their national data protection authority. California residents may contact the California Privacy Protection Agency.

Data Transfers

Our website is hosted in the United States. If you are located in the EEA or UK, your data is transferred to and processed in the US. This transfer is covered by Automattic's standard contractual clauses and participation in appropriate data transfer frameworks.

Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. We will not reduce your rights under this policy without explicit notice.