Privacy Policy & Legal Notice

1. Introduction

Mobility Projects (“we”, “us”, “our”) is committed to protecting your privacy and to handling your personal data transparently and lawfully. This Privacy Policy explains what personal data we collect when you visit this website or contact us, why we collect it, how we use and protect it, and the rights you have over it.

This policy is written in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). By using this website you acknowledge that you have read and understood this policy.

2. Who we are (Data Controller)

Mobility Projects is the trading name of Universal Mobility S.L., a company incorporated in Spain that manages and coordinates Erasmus+ and VET (Vocational Education and Training) mobility programmes for students, recent graduates, teachers and professionals across Europe. We arrange host placements in Valencia, Alicante, Tarragona, Granada and Málaga.

For the purposes of data protection law, the data controller responsible for the personal data described in this policy is:

• Company name: Universal Mobility S.L.
• Tax identification number (NIF): B98688963
• Contact email: hello@mobilityprojects.com

2.1. Contacting the controller

If you have any question, request or complaint regarding your personal data or this policy, you can write to us at hello@mobilityprojects.com. We will handle your request in accordance with section 10 of this policy.

3. What personal data we collect

We only collect data that is necessary for the purposes described in this policy. Depending on how you interact with us, this may include:

• Identity and contact data you provide voluntarily — such as your name, surname, email address, telephone number and the organisation or school you represent, when you complete our contact form or write to us directly.
• The content of your communications — the message, enquiry or documentation you send us, including any details you choose to share about your mobility project.
• Participant data shared by partner institutions — where a school, training centre or sending organisation shares participant details with us in order to arrange an internship placement, accommodation or insurance.
• Technical and usage data collected automatically — such as your IP address, browser type and version, device type, operating system, approximate location, referring pages and the pages you visit on this site. This information is generated by your browser and by our hosting provider's server logs.
• Cookie data — small files stored on your device, as described in section 6.

4. How we use your personal data

We process your personal data for the following purposes:

• To respond to your enquiries, requests for information and quotations.
• To organise, coordinate and deliver Erasmus+ and VET mobility programmes, including host company placements, accommodation, transfers, language preparation, monitoring and certification.
• To manage our contractual and pre-contractual relationship with partner schools, sending organisations, host companies and other collaborators.
• To issue documentation associated with mobility projects, such as learning agreements, attendance records, ECVET documentation and certificates.
• To keep our website secure and available, to prevent fraud and abuse, and to diagnose technical problems.
• To analyse, in aggregated and anonymised form, how the website is used so that we can improve its content and usability.
• To comply with our legal, accounting and reporting obligations, including those arising from Erasmus+ programme rules and funding requirements.

5. Legal bases for processing

Under the GDPR we must have a valid legal basis for each processing activity. We rely on the following:

• Consent (Art. 6.1.a GDPR) — when you voluntarily send us an enquiry through the contact form, or when you accept non-essential cookies. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Performance of a contract or pre-contractual steps (Art. 6.1.b GDPR) — when we arrange and deliver a mobility programme for you or for your organisation.
• Legitimate interest (Art. 6.1.f GDPR) — to operate and secure our website, to communicate with our institutional partners, and to improve our services. We have assessed that these interests do not override your fundamental rights and freedoms.
• Legal obligation (Art. 6.1.c GDPR) — where we are required to retain or disclose data to comply with accounting, tax or Erasmus+ programme obligations.

6. Cookies and similar technologies

Cookies are small text files stored on your device when you visit a website. We use them to make this site work correctly and, where you consent, to understand how it is used.

• Strictly necessary cookies — required for the website to function (for example, remembering your language selection, your theme preference and your cookie choices). These do not require consent.
• Analytics or performance cookies — used to obtain aggregated statistics about visits. These are only installed after you accept them in the cookie banner.

6.1. Managing your cookie preferences

You can accept or reject non-essential cookies through the banner shown when you first visit the site. You can change your decision at any time by deleting the cookies stored by this domain in your browser settings, which will cause the banner to appear again on your next visit.

Most browsers also allow you to block cookies entirely or to be notified before one is stored. Please note that blocking strictly necessary cookies may affect how parts of this website work.

7. Sharing your personal data

We do not sell, rent or trade your personal data. We share it only where necessary, and always with appropriate safeguards, with:

• Host companies and training centres — where sharing is required to arrange and carry out your internship or training placement.
• Partner and sending organisations — schools, universities, VET centres or intermediary organisations involved in your mobility project.
• Accommodation, transport and insurance providers — strictly to the extent needed to arrange the services you or your organisation have requested.
• Service providers acting as data processors — such as our website hosting provider, email service and contact-form provider. These parties process data only on our instructions and under a data processing agreement.
• Public authorities and programme bodies — including National Agencies and the European Commission, where required by Erasmus+ programme rules or by law.

8. International data transfers

Your data is primarily stored and processed within the European Economic Area (EEA). Where a service provider processes data outside the EEA, we ensure that an adequate level of protection is in place — for example through an adequacy decision of the European Commission, or through the European Commission's Standard Contractual Clauses together with any additional safeguards required.

9. How long we keep your data

We keep your personal data only for as long as is necessary for the purposes for which it was collected:

• Enquiries that do not lead to a project — deleted or anonymised within a reasonable period once the enquiry has been resolved.
• Mobility project documentation — retained for the duration of the project and afterwards for the period required by Erasmus+ programme rules and by applicable accounting and tax legislation.
• Server and security logs — kept for a short period for security and troubleshooting purposes.

10. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Right of access — to obtain confirmation of whether we process your data and to receive a copy of it.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure (“right to be forgotten”) — to request deletion of your data where it is no longer necessary, or where processing was based on consent that you have withdrawn.
• Right to restriction of processing — to request that we limit the use of your data in certain circumstances.
• Right to data portability — to receive the data you provided to us in a structured, commonly used, machine-readable format.
• Right to object — to object to processing based on our legitimate interest.
• Right to withdraw consent — at any time, where processing is based on consent.

10.1. How to exercise your rights

To exercise any of these rights, please write to us at hello@mobilityprojects.com, indicating which right you wish to exercise. We may ask you to verify your identity before acting on your request. We will respond within one month, which may be extended by a further two months where the request is complex.

If you consider that we have not handled your request appropriately, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD — www.aepd.es), or with the supervisory authority of the EU country where you reside.

11. How we protect your data

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction. These include encrypted connections (HTTPS/TLS), strict access controls limiting who within our organisation can access personal data, security headers and hardening on our web infrastructure, and confidentiality commitments with our staff and providers.

No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security, and any transmission is made at your own risk.

12. Children's privacy

This website is not directed at children. Where a mobility participant is a minor, we process their data only through and with the authorisation of their sending organisation and, where required, their parents or legal guardians. We do not knowingly collect personal data directly from children through this website.

13. Links to third-party websites

This website may contain links to external sites operated by third parties, such as partner organisations, social networks or the official Erasmus+ portals. We are not responsible for the content or the privacy practices of those websites. We encourage you to read the privacy policy of any external site you visit.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, in the services we offer, or in applicable legislation. The version published on this page is always the current one, and the date shown at the top indicates when it was last revised. We recommend that you review it periodically.

15. Legal Notice

In compliance with Spanish Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), the identification and registry details of the companies that operate this website are set out below:

• Universal Mobility, S.L. — Tax ID (CIF): B98688963. Registered office: Calle Santa María Micaela, 18, 46008 Valencia, Spain. Registered at the Commercial Registry of Valencia (Registro Mercantil de Valencia): Volume (Tomo) 9883, Book (Libro) 7165, Folio 123, Sheet (Hoja) V-162566, Entry (Inscripción) 4.
• Universal Mob Spain, S.L. — Tax ID (CIF): B06796460. Registered office: Plaza del Ayuntamiento, 5, 4, 46002 Valencia, Spain. Registered at the Commercial Registry of Valencia (Registro Mercantil de Valencia): Volume (Tomo) 10996, Book (Libro) 8274, Folio 89, Section (Sección) 8, Sheet (Hoja) V-198447, Entry (Inscripción) 1.

15.1. Terms of use and intellectual property

Access to and use of this website attributes the condition of user and implies acceptance of the terms set out in this Legal Notice. Users undertake to make appropriate use of the website and not to employ it for unlawful purposes, to damage its systems, or to infringe the rights of third parties.

All content on this website — including texts, photographs, graphics, images, logos, trademarks, page design and source code — is the property of the companies identified above or of third parties who have authorised its use, and is protected by intellectual and industrial property law. Reproduction, distribution, public communication or transformation of this content without express written authorisation is prohibited.

We reserve the right to modify, suspend or withdraw, at any time and without prior notice, the content and services offered through this website.

16. Confidentiality

All information exchanged between users, participants, partner schools, sending organisations, host companies and our organisation is treated as strictly confidential and used solely for the purposes for which it was provided.

Our staff and collaborators are bound by confidentiality obligations that remain in force after their relationship with the organisation ends. Access to personal data and project documentation is limited to those persons who need it to carry out their duties.

We do not disclose confidential information to third parties except in the cases described in section 7 of this policy, where you or your organisation have given consent, or where disclosure is required by law or by a competent authority.

Any documentation relating to mobility projects — including learning agreements, participant records, evaluations and certificates — is handled under the same confidentiality and security standards described in section 11.

17. Contact

If you have any questions about this Privacy Policy or Legal Notice, about how we handle your personal data, or if you wish to exercise your rights, you can contact us at hello@mobilityprojects.com. We will be glad to help.