Last updated: 06.08.2026
This Privacy Policy explains how Global Pathogen Analysis Platform/DTU ("we," "us," or "our") collects, uses, and protects information when you visit gpap.global (the "Site").
We are committed to handling your data responsibly and in accordance with the EU General Data Protection Regulation (GDPR), as our data is stored and processed in the European Union.
1. Who We Are
Data Controller: Global Pathogen Analysis Platform/DTU Contact email: [email protected]
Location of data storage: Denmark, European Union (DTU servers)
If you have questions about this policy or want to exercise your rights, contact us at the email above.
2. Information We Collect
We collect two categories of information:
a) Newsletter Sign-up
If you subscribe to our newsletter, we collect:
- Email address (required)
- Name (optional)
This information is provided directly by you when you fill out the sign-up form.
b) Website Analytics
We use Umami, a privacy-focused analytics tool, to understand how visitors use our Site. Umami is designed to be cookieless and does not track individuals across sites or collect personally identifiable information. It may record aggregated, anonymized data such as:
- Page views and referral sources
- General browser and device type
- Approximate geographic region (country/city level, derived from IP address, which is not stored)
We do not use this data to identify individual visitors.
3. Why We Collect This Information (Legal Basis)
Email and name: Used to send you the newsletter content you've requested. Legal basis: consent (you opted in).
Analytics data: Used to understand site usage and improve the Site. Legal basis: legitimate interest.
4. How We Use Your Information
- To send you the newsletter you signed up for
- To understand aggregate site traffic and improve the Site
- To comply with legal obligations, if required
We do not sell your information, and we do not use your email for purposes beyond the newsletter without asking you first.
5. Third Parties
- Newsletter delivery: We use [NAME OF EMAIL SERVICE PROVIDER, e.g., Mailchimp/ConvertKit/Resend] to store and send newsletter emails. Your email and name (if provided) are shared with this provider solely to operate the newsletter.
- Analytics: Umami is self-hosted / hosted on [DTU / your own servers], so analytics data does not pass through third-party analytics companies.
We may also disclose information if required by law or in connection with a merger, acquisition, or transfer of assets.
6. Data Retention
- Newsletter data: We retain your email and name for as long as you remain subscribed. You can unsubscribe at any time, after which your data will be deleted within 30 days.
- Analytics data: Aggregated analytics data is retained for [X months/years] and is not personally identifiable.
7. Your Rights (GDPR)
If you are located in the EU/EEA (and we extend these rights to all visitors regardless of location), you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Withdraw consent at any time (e.g., by unsubscribing)
- Data portability — receive your data in a portable format
- Lodge a complaint with a supervisory authority — in Denmark, this is the Datatilsynet (Danish Data Protection Agency)
To exercise any of these rights, contact us at [email protected]
8. Cookies
We do not use cookies on this Site.
9. Security
We take reasonable technical and organizational measures to protect your data from unauthorized access, loss, or disclosure.
10. Children's Privacy
Our Site is not directed at children under 16. We do not knowingly collect personal information from children under 16.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.
12. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact us at: