Privacy & Cookie Policy
The European Association for the History of Nursing (EAHN) is committed to protecting your personal privacy and maintaining transparency in all our data handling practices. This document explains how we collect, use, safeguard personal information, and utilize cookies and local storage technologies on www.eahnursing.eu in compliance with the General Data Protection Regulation (EU Regulation 2016/679 - GDPR) and the ePrivacy Directive.
1. Data Controller#
The Data Controller responsible for the processing of your personal data is:
- Organization: European Association for the History of Nursing (EAHN)
- Website: www.eahnursing.eu
- Official Contact Email: eahnursing@gmail.com
If you have any inquiries regarding data protection, your personal rights, or this policy, please contact us directly via email.
2. Personal Data We Collect and Process#
As an academic non-profit association, we adhere strictly to the principle of data minimization (Article 5(1)(c) GDPR). We do not collect personal data unnecessarily or engage in commercial profiling.
A. Information Submitted Through the Contact Form#
When you contact us using our website form, we collect:
- Full Name
- Email Address
- Subject of Inquiry
- Message Content
- Submission Timestamp
B. Technical and Hosting Server Logs#
When accessing our website, our hosting provider (Netlify, Inc.) automatically logs technical connection data necessary for network transmission, system security, and DDoS protection:
- IP address (anonymized/truncated where applicable)
- Date and time of the request
- HTTP request method and resource path
- HTTP status response code
- Browser user-agent and operating system details
3. Purposes and Legal Bases for Processing (GDPR Art. 6)#
| Category of Data | Purpose of Processing | Legal Basis (GDPR) |
|---|---|---|
| Contact Form Data | Responding to academic inquiries, membership questions, conference submissions, or general communications | Art. 6(1)(b) GDPR (Performance of a contract or pre-contractual measures) and Art. 6(1)(a) GDPR (Explicit consent) |
| Technical Server Logs | Ensuring website security, network integrity, and defense against malicious attacks | Art. 6(1)(f) GDPR (Legitimate interest in maintaining a secure web service) |
| Theme & Consent Storage | Remembering user interface preferences (dark/light theme) and cookie consent state | Art. 6(1)(f) GDPR (Legitimate interest in delivering the requested user experience) |
4. Cookie & Local Storage Policy#
What are Cookies and Local Storage?#
Cookies and browser storage (localStorage) are small data tokens stored directly in your web browser. They allow websites to remember user preferences across sessions.
Our Policy: Privacy-First, Zero Third-Party Advertising Cookies#
- No behavioral tracking: We do not use tracking pixels, ad-tech cookies, or marketing trackers.
- No third-party profiling: We do not sell or monetize any visitor data.
- Strictly Necessary Storage: We only employ essential local storage keys required for the website to render properly.
Summary of Storage Keys Used by EAHN:#
| Key / Name | Type | Duration | Purpose |
|---|---|---|---|
appearance | LocalStorage | Persistent | Remembers your preference between Light mode and Dark mode. |
eahn_cookie_consent | LocalStorage | 1 Year | Records whether you accepted the cookie notice and your preference choices. |
_load_timestamp | Form Session | Ephemeral | Anti-spam honeypot mechanism ensuring human submissions without intrusive captchas. |
Third-Party Embedded Content#
Certain academic articles, event recordings, or bulletins may occasionally embed videos (such as YouTube or Vimeo).
- When embedded, we enforce Privacy-Enhanced Mode (e.g.,
youtube-nocookie.comand Do-Not-Track headers for Vimeo), ensuring external platforms do not set non-essential cookies until you actively interact with the media player.
How to Manage or Revoke Cookie Preferences#
You can review or change your cookie choices at any time by clicking “Cookie Preferences” in the website footer or by clearing your browser’s site data and cookies in your browser settings.
5. Third-Party Data Processors (Service Providers)#
We rely on trusted technical infrastructure partners who act as Data Processors under Article 28 GDPR:
- Netlify, Inc. (Hosting & Form Processing)
- Location: United States / Global CDN
- Function: Static asset distribution and encrypted transmission of contact form submissions.
- Compliance: Compliant with the EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs) to guarantee European data protection standards.
- GitHub, Inc. (Version Control & CI/CD Pipeline)
- Location: United States
- Function: Source code hosting and automated build deployment.
6. Data Retention Period#
Personal information sent via our contact form is retained only as long as necessary to address your inquiry or fulfill our ongoing academic communication:
- General inquiries: Deleted after the communication has concluded, unless long-term historical or institutional record keeping is required.
- Membership records: Retained throughout the duration of active affiliation.
- Technical server logs: Automatically purged by our hosting infrastructure according to standard security retention cycles (typically 30 days).
7. Rights of the Data Subject (GDPR Articles 15–22)#
Under European data protection law, you have the following guaranteed rights regarding your personal data:
- Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): You may ask us to correct inaccurate or incomplete information.
- Right to Erasure / “Right to be Forgotten” (Art. 17): You can request the deletion of your personal data when it is no longer necessary for the purposes collected.
- Right to Restriction of Processing (Art. 18): You may request that we limit how we use your data in certain circumstances.
- Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, machine-readable format.
- Right to Object (Art. 21): You can object at any time to the processing of your data based on legitimate interests.
- Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw your consent at any time without affecting lawful processing prior to withdrawal.
To exercise any of these rights, simply email our Data Protection contact at:
👉 eahnursing@gmail.com
You also have the right to lodge a complaint with a competent European Supervisory Authority (such as the Data Protection Authority in your EU Member State) if you consider that the processing of your data infringes the GDPR.
8. Security Measures#
We enforce rigorous technical and organizational security measures to protect your information:
- Full Transport Layer Security (TLS/HTTPS): All communications between your browser and our servers are encrypted using modern SSL/TLS certificates with automated renewal and HSTS.
- Static Architecture: Our website is statically generated without dynamic databases, eliminating major attack vectors such as SQL injections or server-side script vulnerabilities.
- Spam & Abuse Protection: Contact forms use cryptographic and time-based honeypots, eliminating the need to pass your data to third-party ad-based CAPTCHA providers.
9. Updates to This Policy#
We may update this Privacy & Cookie Policy from time to time to reflect modifications in our association activities, legal requirements, or technical implementations. Any updates will be published on this page with an updated revision date.
Last updated: 10 September 2026