Privacy Policy
Last updated: 8 October 2026
This policy explains how EU TECH LOOP collects and uses personal data when you visit eutechloop.com, subscribe to our newsletter, or contact us. It is written to meet the EU General Data Protection Regulation (GDPR), the EU rules on cookies, and applicable United States privacy laws.
What this policy covers
This policy covers eutechloop.com, the EU TECH LOOP newsletter and subscriber accounts, and emails you send us. It does not cover other websites we link to, or social media platforms where we have a page (Facebook, X, LinkedIn, YouTube). Those platforms have their own privacy policies.
Data controller
EU TECH LOOP is a project of Consumer Choice Center Europe (2776 S Arlington Mill Dr, Suite 175, Arlington, VA 22206, United States, Website: www.ccceurope.org, EU Transparency Register: 634783053106-61). CCC Europe is a non-partisan, independent consumer advocacy organisation founded in 2024. Its mission is to promote innovative, consumer-centric technology and innovation policies across Europe.
Purpose and legal basis
We process personal data to analyze website traffic, measure user engagement, and identify our most popular articles and content trends. Understanding how visitors interact with our content helps us improve our editorial coverage, optimize website performance, and deliver a better user experience. Legal basis: (Article 6(1)(a) GDPR) and (Article 6(1)(f) GDPR). Where we rely on legitimate interests, we have weighed our interests against your rights. You can object at any time (see "Your rights").
NB: We do not sell your personal data. We do not use it for targeted advertising, and we do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.
| Purpose | Data | Legal basis (GDPR Art. 6(1)) |
|---|---|---|
| Delivering the website and keeping it secure | Technical data | Legitimate interests (f): running a secure, working website |
| Sending the newsletter you asked for | Email, name, subscription status | Consent (a), given when you subscribe; you can withdraw it at any time |
| Running your subscriber account and letting you manage your subscription | Account data | Performance of a contract (b): providing the service you signed up for |
| Understanding which articles and newsletters are read, to improve our content | Usage data, subscriber activity, newsletter opens and clicks, sign-up source | Legitimate interests (f) |
| Google Analytics statistics | Usage data via cookies | Consent (a), given in the cookie banner |
| Showing embedded videos and social media posts in articles | Technical data sent to the platform | Legitimate interests (f): showing the content the article refers to |
| Answering your messages | Contact data | Legitimate interests (f): responding to people who write to us |
| Meeting legal obligations, and establishing or defending legal claims | Any relevant data | Legal obligation (c); legitimate interests (f) |
Categories of data collection
When you browse the site: a) Technical data your browser sends with every request: IP address, browser and device type, operating system, language, the page you requested, the referring page, and the date and time. Our hosting provider uses this to deliver the site and keep it secure. b) Usage data from our analytics tools: the pages you visit, how you arrived, approximate location (country or city, derived from your IP address), and device type. See "Analytics" and "Cookies" below. b) Your cookie choices, recorded by our cookie banner. d) Reading settings (text size, content width, line spacing), stored in your own browser only.
When you subscribe: a) Your email address and, if you give it, your name. b) Your newsletter subscription status and the date you signed up. c) The page you signed up from and how you arrived at the site (for example, from a search engine or a link). d) Your activity as a subscriber: which newsletters you received, whether you opened them and which links you clicked, when you used a link from our emails to confirm or manage your subscription, and which articles you then viewed in that browser. NB: There is no password: when you subscribe or manage your subscription, we email you a one-time link or code.
When you contact us: Your name, email address and the content of your message, and our reply. NB: 1) We do not collect payment details: EU TECH LOOP has no paid subscriptions and takes no payments or donations through the site. 2) We do not ask for special categories of data (such as health, political opinions or religious beliefs). Please do not include them in messages.
Cookies and similar technologies
Cookies are small files stored by your browser. Similar technologies include local storage and session storage in your browser. When you first visit, a banner lets you accept all, reject all, or choose by category. Google Analytics cookies are set only if you accept analytics cookies. You can change your choice at any time using the cookie button at the bottom of every page.
Essential and site functions (set without asking)
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| cookieyes-consent | eutechloop.com (CookieYes) | Remembers your cookie choices | 1 year |
| ghost-members-ssr, ghost-members-ssr.sig | eutechloop.com (Ghost) | Recognise you as a subscriber; set only after you click a confirmation or sign-in link in our emails | Up to 6 months, or until you clear your cookies |
| _cf_bm | Cloudflare (our hosting provider's network) | Distinguishes people from bots to protect the site | 1 hour |
| wire-font-size, wire-content-width, wire-line-height (local storage) | eutechloop.com | Remember your reading settings; never leave your browser | Until you clear your browser storage |
| ghost-history (session storage) | eutechloop.com (Ghost) | Records the pages you visit in this browser tab so that, if you sign up, we know which page you signed up from | Until you close the tab |
Analytics (only with your consent)
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| ga | Google Analytics | Distinguishes visitors to produce statistics | 1 year 1 month |
| ga_JMMC9VBV9Z | Google Analytics | Keeps the state of a visit | 1 year 1 month |
Embedded content
Some articles include videos or posts from YouTube or X (Twitter). When you open such an article, the platform's content loads inside the page: the platform receives your IP address and device data and may set its own cookies (for YouTube, for example YSC, VISITOR_INFO1_LIVE and VISITOR_PRIVACY_METADATA). These platforms are responsible for the data they collect; see the Google Privacy Policy and the X Privacy Policy.
You can also block or delete cookies in your browser settings. If you block them, links in our emails that confirm or manage your subscription will not work.
Analytics
We use two analytics tools: 1) Ghost web analytics, built into our publishing platform. It does not use cookies or other browser storage to identify you. It counts unique visitors within 24-hour periods, so it cannot recognise you across days. If your browser is recognised as a subscriber's (see the cookies above), it records your subscriber ID with the pages you view. The data is processed for us by Ghost and its provider Tinybird and is stored in the EU. 2) Google Analytics 4, provided by Google Ireland Limited. Its cookies are set only if you accept analytics cookies. If you do not accept them, Google Analytics may still receive a basic, cookieless signal that a page was viewed. Google may process this data in the United States.
Newsletter emails
We send the newsletter through our publishing platform (Ghost) and its email delivery provider (Mailgun). Our newsletters contain an invisible image that tells us whether you opened the email, and links that tell us whether you clicked them. We use this to see which content is useful and to remove inactive addresses. Every newsletter contains an unsubscribe link. You can also use the "Manage subscription" link in each newsletter, or write to editor@eutechloop.com.
Who we share data with
We share personal data only with:
1) Service providers who process it for us under contract and only on our instructions: a) Ghost Foundation (Ghost(Pro)): website hosting, subscriber accounts, newsletter sending and web analytics. Ghost stores data in the EU; Ghost staff may access it from outside the EU for support and maintenance. b) Ghost's sub-processors, including Tinybird (web analytics, EU), Mailgun (email delivery) and Cloudflare (network and security). c) jsDelivr (content delivery network): delivers some of the site's scripts, such as sign-up and search, and so receives your IP address. d) CookieYes Limited: our cookie banner and consent records. e) Google Ireland Limited: Google Analytics and Google Tag Manager). f) Our email provider, for messages you send us.
2) CCC Europe staff and contractors who need the data for their work, under confidentiality obligations.
3) Professional advisers (such as lawyers and accountants), where needed.
4) Public authorities, courts or regulators, where the law requires it, or to establish, exercise or defend legal claims.
5) A successor organisation, if EU TECH LOOP or CCC Europe is reorganised or merged; we would tell you in advance.
International transfers
CCC Europe is based in the United States, and some of our providers process data outside the European Economic Area (EEA). When personal data from the EEA is transferred to a country without an EU adequacy decision, we use the safeguards required by the GDPR: transfers to US providers certified under the EU-U.S. Data Privacy Framework rely on the European Commission's adequacy decision; other transfers rely on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards at editor@eutechloop.com.
How long we keep data
| Data | How long |
|---|---|
| Subscriber account, newsletter subscription and activity | While your account exists; we delete it when you ask us to |
| Unsubscribed email addresses | Kept only as long as needed to make sure we do not email you again |
| Ghost web analytics | Reports are aggregated; kept as long as the site uses them |
| Google Analytics data | No longer than 14 months |
| Cookie consent records | 1 year |
| Emails with us | As long as needed to deal with your message, unless needed longer for a legal claim |
| Server and security logs | Kept by our hosting provider for a short period, as set in its policies |
We may keep data longer where the law requires it or to establish, exercise or defend legal claims.
How we protect data
We use providers with appropriate security measures, encrypted connections (HTTPS) across the site, passwordless sign-in, two-factor sign-in for staff accounts on our publishing platform, and access limited to people who need it. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of any data breach when required by law.
Your rights
If you are in the EU or EEA. Under the GDPR you have the right to: 1) access your personal data and get a copy of it; 2) have inaccurate data corrected; 3) have your data deleted; 4) restrict how we use your data; 5) receive the data you gave us in a structured, machine-readable format, or have it sent to another organisation; 6) object at any time to our use of your data based on legitimate interests; 7) withdraw your consent at any time, without affecting what we did before you withdrew it (for the newsletter, use the unsubscribe link; for cookies, use the cookie button at the bottom of every page).
You also have the right to complain to the data protection authority in the EU country where you live or work, or where you think the problem happened. A list of authorities is on the European Data Protection Board website. We would appreciate the chance to deal with your concern first.
If you are in the United States. Depending on the state where you live, you may have the right to: 1) know whether we process your personal data and access it; 2) correct inaccuracies; 3) delete it; 4) get a portable copy; 5) opt out of the sale of personal data, targeted advertising, and profiling with legal or similarly significant effects.
We do not sell personal data or use it for targeted advertising. We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of these. If we decline a request, you may appeal by replying to our decision or writing to editor@eutechloop.com with the subject "Appeal". We will respond within the time the law requires. If you are not satisfied with the result of an appeal, you may contact your state Attorney General. We will not discriminate against you for exercising any of these rights.
How to make a request
Email editor@eutechloop.com. You can also update your name, email, and newsletter preferences using the "Manage subscription" link in any newsletter. To delete your account or get a copy of your data, email us. We may need to confirm your identity, usually by replying from the email address linked to your account. We will reply within one month (GDPR) or 45 days (US state laws); these periods can be extended where the law allows, and we will tell you if that happens. Requests are free unless they are clearly unfounded or excessive. An authorised agent may make a request for you where state law allows, with proof of authorisation.
Children
EU TECH LOOP is written for adults and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, please contact us and we will delete it.
Changes to this policy
We will update this policy when our practices or the law change. The date at the top shows the latest version. If we make significant changes, we will tell subscribers by email or with a notice on the site before they take effect.
Contact
Questions or requests about privacy: editor@eutechloop.com
Post: Consumer Choice Center Europe, 2776 S Arlington Mill Dr, Suite 175, Arlington, VA 22206, United States
