Skip to main content

Privacy notice

Version 1.0, last updated 8 July 2026.

1. About this notice​

This notice explains how EUROPEUM-EDIC processes personal data in connection with the EBSI Hub (hub.ebsi.eu), a public technical-documentation platform. The Hub has no user accounts, no login, and no registration: it consists of publicly accessible documentation pages, a search function, an AI-assisted search tool ("Ask AI"), and a page-feedback widget. This notice is limited to these features. It does not cover other EUROPEUM or EBSI websites, which are governed by their own notices.

It is the Hub-specific implementation of the EUROPEUM-EDIC Information Policy on Cookies and Other Trackers, the common parent policy that also covers the institutional site (europeum.eu) and the EBSI website. The EBSI Hub follows a separate, lighter regime from those sites because it is a public technical documentation platform with no account, login, or advertising, as explained in Section 4.

2. Who is responsible for this processing​

EUROPEUM-EDIC ("EUROPEUM", "the Consortium", "we") is the data controller within the meaning of Article 4(7) GDPR.

EUROPEUM-EDIC is a European Digital Infrastructure Consortium (EDIC), established by Commission Implementing Decision (EU) 2024/1432 of 21 May 2024, on the basis of Article 13 of Decision (EU) 2022/2481 establishing the Digital Decade Policy Programme 2030. It has its own legal personality, is governed by Union law and its statutes and, on a subsidiary basis, by the law of its host Member State, Belgium. Its registered office is established in Brussels.

Registered office: Rue Belliard 40, 1040 Brussels, Belgium Company / VAT number: BE 1011.199.165 Data Protection Officer: data.protection@europeum.eu

This notice is established pursuant to:

  • Article 5(3) of Directive 2002/58/EC (ePrivacy), transposed into Belgian law by Article 129 of the Act of 13 June 2005 on electronic communications;
  • Regulation (EU) 2016/679 (GDPR);
  • the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data;
  • Regulation (EU) 2024/1689 (AI Act), for the transparency obligations applicable to AI-generated content.

Unlike some other EUROPEUM and EBSI sites, the Hub does not display a cookie consent banner for audience measurement. Matomo, described in Section 5, does not store or read anything on your device, so Article 5(3) ePrivacy / Article 129 of the Belgian Act is not engaged there. The Ask AI feature described in Section 6 does use your browser's local storage, on terms set out in that section.

None of the processing described in this notice involves profiling or automated decision-making, and none of it is used for advertising, retargeting, or cross-site tracking.

5. Audience measurement​

We use Matomo, self-hosted on infrastructure located in the European Union, configured in cookieless mode to measure overall visits, page views, and traffic sources.

In this configuration:

  • no cookie or identifier is stored on your device;
  • IP addresses are anonymised before storage;
  • the "Do Not Track" browser signal is respected;
  • data is retained for approximately 180 days before deletion.

Because no information is stored on, or read from, your device, Article 5(3) ePrivacy is not triggered. This processing relies on our legitimate interest (Article 6(1)(f) GDPR) in understanding how the documentation is used and improving it, rather than on your consent.

Matomo is an open-source analytics platform that we operate ourselves, on our own infrastructure located within the European Union; it is not provided or hosted by an external analytics vendor. Accordingly, this data is not disclosed or transferred to any third party. It is processed exclusively for our own internal purposes, namely to inform the ongoing development and improvement of the Hub.

If you use the "Was this page helpful?" widget, your answer and any comment you submit are sent to the same analytics tool for the sole purpose of improving the documentation. Please avoid including personal information in your comments.

Right to object. You may object to this processing at any time, free of charge, using the opt-out control provided below.

6. Search and the "Ask AI" assistant​

The Hub provides a search function and an AI-assisted assistant ("Ask AI") that answers questions based solely on the public documentation. The only personal data processed is the text you choose to enter.

  • Search is powered by Algolia. Search queries are processed on infrastructure located in the United Kingdom. The European Commission has recognised the United Kingdom as ensuring an adequate level of data protection (adequacy decision under Article 45 GDPR, renewed on 19 December 2025 and valid until 27 December 2031); no additional transfer safeguards are therefore required for this processing.
  • Answer generation is powered by the Mistral AI language model, under a data processing agreement within the meaning of Article 28 GDPR, on infrastructure located in the European Union.
  • Answers generated by Ask AI are clearly labelled as AI-generated, in accordance with the transparency obligation of Article 50 of Regulation (EU) 2024/1689 (AI Act).
  • Your current conversation with Ask AI is kept only in your browser's local storage, on your own device, for the duration of your session. It is not transmitted to us and is not used for tracking, profiling, or any other purpose. You can remove it at any time by clearing your browser's local storage for this site.
  • Data processed by Algolia and Mistral AI is retained according to their respective policies and our processing agreements with them.

We recommend not entering personal data about yourself or others into the search or Ask AI fields beyond what is necessary to ask your question.

7. Your rights​

Under the GDPR, you have the right to:

  • access (Art. 15), rectify (Art. 16), and erase (Art. 17) your data;
  • restrict processing (Art. 18) and request data portability (Art. 20), where applicable;
  • object to processing based on legitimate interest (Art. 21).

These rights may be exercised by contacting our Data Protection Officer: data.protection@europeum.eu.

If you consider that your rights have not been respected, you may lodge a complaint with the Belgian Data Protection Authority (APD), Rue de la Presse 35, 1000 Brussels (www.autoriteprotectiondonnees.be), or with any other competent supervisory authority under Article 77 GDPR.

8. Updates to this notice​

This notice may be updated to reflect technical, regulatory, or organisational changes. Any update takes effect upon publication.