Privacy Policy

Last updated: 12 September 2026

This Privacy Policy explains how Go2Grow processes personal data when you visit go2grow.eu, create an account, publish or manage a learning opportunity, contact us, save searches or bookmarks, submit a registration or booking, or otherwise use the platform. Go2Grow is an independent learning and staff mobility discovery platform.

1. Data controller and contact

The data controller for this website is the operator of Go2Grow. For privacy questions or to exercise your data protection rights, please contact us through the Go2Grow contact page. Where a provider independently receives participant data through its own registration process, that provider may act as a separate data controller for that processing.

2. Personal data we may process

• Account data, such as username, email address, first and last name, account role and profile information.
• Provider and listing data, such as organisation information, contact details, opportunity descriptions, dates, prices, locations and registration links.
• Interaction data, such as bookmarks, saved searches, reviews, comments, enquiries, registrations or booking-related information where those functions are used.
• Technical and security data, such as IP address, browser/device information, login records, cookies and information needed to protect the platform against abuse.
• Communications you send to Go2Grow through forms or other support channels.
• Transaction-related information where paid services are enabled. Payment card data, where applicable, is normally handled by the relevant payment service provider rather than stored directly by Go2Grow.

3. Why we use personal data and our legal bases

We process personal data only where a lawful basis applies. Account creation, provider submissions, participant enquiries and requested platform functions are generally processed because they are necessary to provide the requested service or to take steps at your request before entering into a contract. Security, abuse prevention, service administration and limited service improvement may be based on our legitimate interests in operating a safe and reliable platform, provided those interests are not overridden by your rights. We use consent where consent is legally required, for example for non-essential cookies or optional communications, and we process data where necessary to comply with legal obligations.

4. Public information and providers

Information intentionally submitted for publication in a provider profile or learning opportunity may be publicly visible. Providers are responsible for ensuring that they have a lawful basis to publish personal contact details or other personal data included in their listings. Go2Grow may moderate submitted content before publication.

5. Cookies and similar technologies

Go2Grow uses cookies and similar technologies that are necessary for core website functions such as login, account sessions, security, preferences, forms and platform operation. Additional analytics, marketing or third-party cookies should only be used in accordance with applicable consent requirements. Embedded or externally linked services may apply their own privacy and cookie rules when you interact with them.

6. Who may receive data

Personal data may be processed by service providers that support website hosting, infrastructure, email delivery, security, forms, backups, payments or other platform functionality, subject to appropriate contractual and security safeguards. Data may also be shared with a learning provider when you intentionally contact, register with or book an opportunity from that provider, or where disclosure is required by law.

7. International data transfers

Some technology providers may process data outside the European Economic Area. Where GDPR transfer restrictions apply, appropriate safeguards must be used, such as an adequacy decision or approved contractual safeguards.

8. How long we keep data

We keep personal data only for as long as needed for the purpose for which it was collected. Account and provider-profile data are normally retained while the account remains active and for a limited period afterwards where needed for security, dispute handling or legal obligations. Registration-enquiry records are retained for the period needed to manage and evidence the enquiry and related provider communication. Go2Grow has disabled persistent AI chat-history logging and IP-address storage for chat history. Messages still need to be processed transiently by the configured AI service to generate a response. Security logs, backups and technical records may be retained for shorter operational periods or longer where necessary to investigate abuse, maintain system integrity or comply with law. Data that is no longer required is deleted or anonymised where appropriate.

9. Your data protection rights

Subject to applicable law, you may have the right to access your personal data, correct inaccurate data, request erasure or restriction, object to certain processing, receive portable data, and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with the competent data protection supervisory authority. To make a privacy request, use our contact page.

10. AI assistant

Go2Grow may provide an AI assistant to help users navigate learning opportunities and information already available on the platform. User messages and relevant Go2Grow page or listing content may be processed by the AI service provider solely to generate the requested response. The assistant is configured not to browse the wider web for answers and users should not submit sensitive personal data. AI responses may be inaccurate and must not be treated as official Erasmus+ funding, eligibility or legal advice.

11. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No internet service can guarantee absolute security, so users should also protect their passwords and account access.

12. Third-party websites and registration links

Go2Grow listings may link to provider websites, registration systems or other third-party services. Their processing of personal data is governed by their own privacy notices. Go2Grow is not responsible for the privacy practices of independent third-party websites.

13. Children

Go2Grow is intended for professional learning and staff mobility users and is not designed as a service directed to children.

14. Changes to this policy

We may update this Privacy Policy when the platform, legal requirements or our processing practices change. The latest version will be published on this page with an updated revision date.