Skip to content

Privacy Policy

Last updated: March 2026

1. Data Controller

The data controller for this website is:

CURATOR Project
Fonds National de la Recherche (FNR) Industrial Fellowship
University of Luxembourg
Principal Investigator: François Altwies
Email: contact@brain-curator.org
Website: brain-curator.org

For questions about data protection, contact us at contact@brain-curator.org.

2. What Data We Collect

When you visit brain-curator.org, we collect limited, non-identifying analytics data to understand how our research is being received. We do not collect personal data for commercial purposes.

2.1 Web Analytics (Matomo)

We use Matomo, a self-hosted, open-source analytics platform. Your analytics data is stored on our own server and is never shared with third parties.

  • Matomo runs in cookie-free mode — no cookies are placed on your device
  • Your IP address is anonymised (last two bytes masked) before storage
  • No cross-site tracking occurs
  • Data is retained for a maximum of 13 months
  • Legal basis: legitimate interest in understanding website usage for research communication (GDPR Art. 6(1)(f))

This configuration follows the CNIL-approved consent-exempt analytics approach.

2.2 Google Analytics 4 (optional, consent-gated)

We may use Google Analytics 4 (GA4) to supplement our analytics, specifically to link with Google Search Console for understanding how people find our research.

  • GA4 runs through Cloudflare Zaraz, a server-side proxy — your real IP address is never sent to Google
  • GA4 operates in basic consent mode: no data is sent to Google unless you give explicit consent
  • No cookies are set by GA4 without your consent
  • Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023)
  • Legal basis: consent (GDPR Art. 6(1)(a))

You can withdraw your consent at any time by clearing your browser cookies or using the consent controls on this website.

2.3 Contact Form

If you contact us via the contact form or email, we process your name, email address, and message content solely to respond to your enquiry. This data is not used for marketing and is deleted after the enquiry is resolved.

  • Legal basis: legitimate interest in responding to enquiries (GDPR Art. 6(1)(f))

3. Cookies

This website uses no cookies by default. Matomo analytics runs in cookie-free mode.

If you consent to Google Analytics, a first-party consent cookie may be set by Cloudflare Zaraz to remember your preference. GA4 cookies (_ga, _gid) are only set after explicit consent.

Cookie Purpose Duration Requires consent
zaraz-consent Stores your analytics consent preference 1 year No (strictly necessary)
_ga Google Analytics visitor distinction 2 years Yes
_gid Google Analytics session distinction 24 hours Yes

4. Data Transfers

Matomo: All data stays on our self-hosted server. No international transfers occur.

Google Analytics (if consented): Data is transferred to Google LLC (USA), which is certified under the EU-US Data Privacy Framework. Your real IP address is not included in the transfer (masked by Cloudflare Zaraz).

Cloudflare: This website is served through Cloudflare's CDN. Cloudflare processes web traffic data as a data processor under their Data Processing Addendum. Cloudflare is certified under the EU-US Data Privacy Framework.

5. Your Rights

Under GDPR, you have the right to:

  • Access (Art. 15) — request a copy of your personal data
  • Rectification (Art. 16) — correct inaccurate data
  • Erasure (Art. 17) — request deletion of your data
  • Restriction (Art. 18) — limit how we process your data
  • Data portability (Art. 20) — receive your data in a portable format
  • Object (Art. 21) — object to processing based on legitimate interests
  • Withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at contact@brain-curator.org.

6. Right to Complain

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Luxembourg supervisory authority:

Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux, Luxembourg
Tel: +352 26 10 60-1
Email: info@cnpd.lu
Website: cnpd.public.lu

7. Opt-Out

Matomo: You can opt out of Matomo analytics tracking below. This preference is stored in your browser without setting a cookie.

Google Analytics: If you previously consented to GA4, you can withdraw consent using the cookie consent controls on this website, or by clearing your browser cookies.

8. Changes to This Policy

We may update this privacy policy to reflect changes in our data processing practices or legal requirements. The "Last updated" date at the top of this page indicates the most recent revision.