Privacy Policy

This Privacy Policy explains how the A+H Joint Master Programme website (the “Site”) collects, uses, and protects your personal information when you visit or interact with it. We have tried to keep this document plain-spoken so you can quickly understand what data we hold, why we hold it, and what choices you have.

If anything below is unclear, or if you would like to exercise any of the rights described, you can reach us at the email address listed in the footer of every page.

The Site is operated by the joint Master Programme in Cultural Heritage Landscapes and Design. It is a two-year, English-language postgraduate programme delivered jointly by the National Technical University of Athens (NTUA) and Universität Heidelberg.

The legal data controllers for personal information collected through the Site are the two partner universities. Day-to-day enquiries about this Privacy Policy, including any GDPR-related requests, should be sent to the Programme Office at the email address shown in the footer of every page.

The Site deliberately collects as little personal information as possible. Specifically, there are three categories of data:

Cookies and consent preferences

When you first visit the Site we ask which categories of cookies you accept: Essential, Functional, Analytics, and Marketing. Your choice is saved in your browser’s local storage so we do not have to ask again on every visit. Essential cookies are always on, because the Site cannot function without them; the other three categories are off by default until you opt in. You can re-open the cookie banner at any time from the “Cookie settings” link to change your selection.

Server log data

Like virtually every website, our hosting environment automatically records a small amount of technical information for each request: IP address, user agent (browser and operating system), referring URL, requested URL, and timestamp. These logs are used only for security monitoring and troubleshooting; they are not used to identify or profile individual visitors and are rotated on a short retention schedule.

Information you actively send us

If you contact us via the email address linked from the Site, we receive whatever information you choose to share — typically your name and email address, plus the body of your message. We use that information only to reply to you and we do not add you to any mailing list without your explicit, separate consent.

The cookie banner on the Site offers four categories, each independently controllable except for Essential, which is required:

• Essential — needed for the Site to function (e.g. remembering your cookie choice, supporting the multilingual menu). Always on.
• Functional — quality-of-life improvements such as remembering recent searches or your preferred language. Off by default.
• Analytics — anonymous aggregate measurement (which pages are visited, average time on page, etc.). Off by default.
• Marketing — third-party tracking used for advertising or social-media retargeting. Off by default.

The Site currently does not run any third-party analytics or marketing trackers. If we add Google Analytics or a similar measurement tool in the future, it will load only if you have explicitly consented to the “Analytics” category. The same applies to any marketing pixel.

Some pages on the Site may embed content hosted by third parties — for example, videos, maps, presentation slides, or social-media posts. Embedded content behaves exactly as if you had visited the third-party website directly: those services may set their own cookies, run their own analytics, and monitor your interaction with the embedded element.

We have no control over what third-party services do with the data they collect. Before interacting with embedded content, please consult the respective service’s privacy policy.

The Site is hosted on infrastructure provided by, or contracted by, the partner universities. Both NTUA and Universität Heidelberg maintain their own information-security frameworks aligned with national and EU requirements.

Access to any personal data submitted through the Site is restricted to authorised members of the Programme Office. Enquiry emails are retained only for as long as is necessary to reply to you and to keep a reasonable audit trail. Routine server logs are rotated automatically on a short retention schedule.

If you are based in the European Union you have the following rights with respect to personal data we hold about you:

• Access — you can request a copy of any personal data we hold about you;
• Rectification — you can ask us to correct any data that is inaccurate or out of date;
• Erasure — you can ask us to delete personal data we hold about you, subject to limited legal exceptions;
• Withdrawal of consent — you can change or withdraw any consent you gave for non-essential cookies at any time by re-opening the cookie banner;
• Complaint — you can lodge a complaint with the data protection authority in your country (in Greece, the Hellenic Data Protection Authority; in Germany, the Baden-Württemberg Commissioner for Data Protection and Freedom of Information).

To exercise any of these rights, contact us using the email address shown in the footer.

We may update this Privacy Policy occasionally to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will indicate the update date at the bottom of this page; the latest version is always available at this URL.

For any questions about this Policy or about how we handle your personal data, please contact us at the email address listed in the footer of every page.