Privacy Policy

Last updated: 12 September 2026

This Privacy Policy explains how the Go2Grow hub processes personal data when you visit go2grow.eu, create an account, publish or manage a learning opportunity, contact us, save searches or bookmarks, submit a registration enquiry, or otherwise use the platform.

1. Data controller and contact

The data controller for the Go2Grow hub is the operator of Go2Grow. For privacy questions or to exercise your data protection rights, use the Go2Grow contact page. The operator’s formal identification and public privacy contact details will be stated here before full commercial launch. Where a learning provider receives participant information for its own registration, course administration or contractual purposes, that provider acts as an independent controller for its own subsequent processing unless another arrangement is expressly agreed.

2. Personal data we process

• Account data: username, email address, name, account role and profile information.
• Provider data: organisation and representative details, provider contact information, website, listings, programme information and account activity.
• Participant and enquiry data: name, email, institution or organisation, country, optional message, selected opportunity and consent record when a registration enquiry is submitted.
• Platform interaction data: bookmarks, saved searches, reviews, messages and other functions you choose to use.
• Technical and security data: IP address, browser/device information, login and security records, cookies and information required to prevent abuse and maintain the service.
• Communications: information you send through contact or support channels.
• Transaction information: where paid Go2Grow services are introduced, information required to administer the service. Payment-card information should normally be handled by the relevant payment service provider rather than stored directly by Go2Grow.

Please do not submit special-category or otherwise sensitive personal data unless it is specifically requested and necessary for a stated purpose.

3. Purposes and legal bases

We process data to create and administer accounts, publish and manage provider listings, operate search and marketplace functions, transmit participant enquiries to the selected provider, provide requested support, secure the platform, prevent abuse, maintain records and comply with legal obligations. Account, provider and enquiry processing is generally necessary to provide the service requested by the user or to take steps at the user’s request before a contract. Security, fraud prevention, service administration and proportionate service improvement may rely on legitimate interests where those interests are not overridden by individual rights. Consent is used where legally required, including for non-essential cookies or optional marketing communications.

4. Provider listings and public information

Information intentionally submitted for publication in a provider profile or learning opportunity may be publicly visible and may be indexed by search engines and AI-enabled search services. Providers must have a lawful basis and appropriate authority to publish any personal contact details, photographs or other personal data included in a listing. Providers should prefer organisational contact information where possible. Go2Grow may moderate, correct formatting, reject or remove submitted content in accordance with the Terms of Use.

5. Registration enquiries and data sharing with providers

When a participant chooses Register / Request a place, Go2Grow collects only the information needed to route and evidence that enquiry. The form explains that the details will be shared with the selected course provider. Go2Grow processes the enquiry within the hub and transmits it to that provider; the provider may then process the received information under its own privacy notice for registration, course administration and related communication. Go2Grow does not authorise providers to use enquiry data for unrelated marketing without an independent lawful basis.

6. Cookies and analytics

Go2Grow uses cookies and similar technologies for several distinct purposes. We separate technologies that are necessary to provide the service from optional technologies that require a user choice.

• Strictly necessary cookies: used for login, account sessions, security, load balancing, forms, shopping or booking functions where applicable, and other functionality specifically requested by the user. These are used only to the extent necessary to provide the service.
• Preference cookies: remember choices such as interface or consent preferences where enabled.
• Analytics cookies: if enabled, help us understand how visitors use Go2Grow so we can improve navigation, content and platform performance. Analytics that is not strictly necessary is activated only after the required consent.
• Marketing or third-party tracking: if introduced, these technologies will be disabled by default until valid consent has been provided.

Where consent is required, optional cookies must not be placed before the user makes a choice. Users must be able to accept or reject optional categories and withdraw consent as easily as it was given. The platform should remain usable at a basic level when optional cookies are refused. Cookie providers, purposes and retention periods will be reviewed and listed when the relevant services are enabled.

7. Recipients and processors

Personal data may be processed by service providers supporting hosting, infrastructure, security, backups, transactional email, forms, analytics where enabled, payments where enabled and AI functionality. Processors must be subject to appropriate contractual and security requirements. Data is also disclosed to the learning provider deliberately selected by a participant when an enquiry or registration is initiated, and may be disclosed where required by law.

8. International transfers

Some technology providers may process personal data outside the European Economic Area. Where GDPR transfer restrictions apply, Go2Grow must rely on an appropriate transfer mechanism such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard, together with supplementary measures where required.

9. Retention

Personal data is retained only for as long as necessary for the stated purpose. Account and provider-profile data are normally retained while the account is active and for a limited period afterwards where needed for security, dispute handling or legal obligations. Registration-enquiry records are retained only for the period reasonably needed to manage, evidence and resolve the enquiry and related communications, after which they should be deleted or anonymised unless a longer period is legally required. Security logs, backups and technical records may have separate limited retention periods. Persistent AI chat-history logging and chat IP-history storage are disabled in the current configuration.

10. AI assistant

Go2Grow may provide an AI assistant to help users navigate information available within the hub. User messages and relevant Go2Grow content may be processed by the configured AI service provider to generate a response. The assistant is configured not to browse the wider web for answers. Users should not submit sensitive personal data. AI output may be inaccurate and is not official Erasmus+ funding, eligibility, legal or financial advice.

11. Security and access controls

Go2Grow applies technical and organisational measures intended to protect personal data, including role-based account access, authentication controls, anti-spam and rate-limiting measures, restricted administrative access, backups and reasonable platform security controls. Access to participant enquiries should be limited to authorised Go2Grow administrators and the relevant provider. No internet service can guarantee absolute security, and users remain responsible for protecting their account credentials.

12. Data protection rights

Subject to applicable law, individuals may request access, correction, erasure, restriction or portability of their personal data, object to certain processing and withdraw consent where processing is based on consent. Individuals also have the right to lodge a complaint with the competent data protection supervisory authority. Privacy requests can be submitted through the contact page.

13. Data obtained from other sources

If Go2Grow imports publicly available opportunity information rather than receiving it directly from a provider, we aim to minimise personal data and use organisational information wherever possible. Where personal data is obtained indirectly, applicable transparency obligations will be assessed and the source of the information will be recorded where appropriate.

14. Third-party websites

Listings may link to provider websites, registration systems, city guides or other independent services. Their processing is governed by their own terms and privacy notices. Go2Grow is not responsible for the privacy practices of independent third-party websites.

15. Children

Go2Grow is intended for professional learning and staff mobility and is not designed as a service directed to children.

16. Changes to this policy

This Privacy Policy may be updated when the platform, processors, legal requirements or processing practices change. The current version will be published on this page with its revision date.