Privacy notice

Who is responsible

The controller for personal data processed by StudentSafe Europe is the association StudentSafe Europa, Zagreb, Croatia. Contact for privacy requests: contact@student-safe.com. The association’s registration details are given in the legal notice once its entry in the register is confirmed.

What we collect

Through this website, nothing. Specifically:

• No cookies and no local storage are set by the website.
• No analytics, advertising, tracking pixels, social-media widgets or session recording.
• No third-party resources: fonts, scripts and images are served from our own domain. Outbound links send no referrer.
• No forms: the website cannot receive messages, uploads or account details.

This follows the principle of data minimisation in our Statute: we process personal data only on a lawful basis and only as far as our statutory goals require.

Hosting and technical data

The website at student-safe.com is hosted on GitHub Pages by GitHub, Inc. When you visit, GitHub necessarily processes technical data such as your IP address, browser user agent and the page requested, in order to deliver the site and protect it against abuse, and may keep this in its logs. We have no access to those logs and do not use that data to identify visitors. The domain name is registered with Cloudflare, Inc., which also answers DNS queries for it.

The legal basis is our legitimate interest in operating a secure, reachable website (GDPR Art. 6(1)(f)).

Contributions through GitHub

Research contributions, corrections and organisational interest are submitted through our public GitHub repository. Anything submitted there is public and stays in the repository history. GitHub’s own privacy statement and terms apply. You may use a pseudonymous account. Please never include personal data about yourself or others, allegations, or health information.

Writing to us by email

If you write to contact@student-safe.com, we receive your email address, your message and anything attached to it. We use them only to read and answer your message. The legal basis is our legitimate interest in answering the people who contact us (GDPR Art. 6(1)(f)). Email for student-safe.com is hosted by Google, which processes messages on our behalf.

Please do not send complaints, allegations, health information or documents about an individual situation by email either. We cannot act on them and do not yet have a secure, properly governed way to hold them.

Personal data in research

Our research is based on publicly available institutional documents — laws, statutes, regulations and codes — and is not directed at identifying individuals. The research data contains no names of staff or students, no allegations and no case details.

We do not currently operate any programme that receives information about individual situations. If we ever do, it will have its own privacy notice, enhanced security, restricted access and defined retention periods before it starts, as our Statute requires.

Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability, where these rights apply. You also have the right to lodge a complaint with a supervisory authority — in Croatia, the Personal Data Protection Agency (AZOP), or the authority in the EU country where you live or work.

Changes

If the way this website handles data changes — for example if a contact form or privacy-friendly statistics are added — this notice will be updated first, and the change recorded in the public history. See also our legal notice.