This policy explains what personal data the Compass AI website collects, why, and what your rights are. It covers compassai.eu only.
Who is responsible
The controller is EIBIR gemeinnützige GmbH (European Institute for Biomedical Imaging Research), Am Gestade 1, 1010 Vienna, Austria, which manages the Compass AI project on behalf of the consortium. You can reach us at office@eibir.org.
What we collect, and why
If you sign up for the newsletter
We collect your email address and a record of your consent: the date and time, and the consent wording you agreed to. We use this to send you updates about Compass AI. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time, and every newsletter will include an unsubscribe link.
If you email us
We keep your message and our reply for as long as we need to deal with it, and for two years afterwards. The legal basis is our legitimate interest in answering correspondence (Article 6(1)(f) GDPR).
When you visit the site
We use Framer’s built-in analytics to see which pages are visited and which links are followed. It does not use cookies. Our host also keeps standard server logs, including IP addresses, to deliver and secure the site. The legal basis is our legitimate interest in running a secure and useful website (Article 6(1)(f) GDPR).
Who has access to your data
The website is built and hosted by Framer B.V., Amsterdam (Netherlands), which acts as our processor. Newsletter signups and emails are delivered to Compass AI mailboxes, managed for the consortium by EIBIR.
We do not sell personal data, share it for advertising, or use it for automated decision-making.
How long we keep it
Newsletter addresses are kept until you unsubscribe or ask us to delete them. The record of your consent is kept for as long as we hold your address, and for a reasonable period afterwards. Correspondence is kept as described above.
Your rights
You can ask for access to your personal data, and for correction, deletion, restriction or portability. You can object to processing based on legitimate interest, and withdraw consent at any time. Write to office@eibir.org and we will respond within one month.
You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) at dsb.gv.at, or with the supervisory authority in the EU country where you live or work.
Changes to this policy
We will update this page when anything changes. If the change is significant and we hold your address, we will let you know.
Last updated 16 October 2026.