General Data Protection Regulation (GDPR) Policy— CAP Project

Last Updated: 03/22/2025

The CAP Project ("we," "us," "our") is committed to protecting the privacy and personal data of our users in compliance with the General Data Protection Regulation (GDPR). Although our business and website are based in the United States, we recognize that our website may be accessed by individuals in the European Economic Area (EEA). This policy outlines how we collect, use, and protect personal data from users worldwide, including those in the EEA.

  • We collect the following types of personal data:

    a. Newsletter Subscribers

    • Email address (used solely for sending newsletters).

    b. Users Providing Feedback

    • First name

    • Last name

    • Email address

    • User-provided comments (used to improve content and respond to user inquiries if applicable).

    c. Users Registering for Online Training Modules

    • First name

    • Last name

    • Email address

    • Position

    • Type of organization the user is affiliated with

    • Country (and, for U.S. users, state)

    • Responses to optional quizzes or assignments

    We also collect aggregate data on:

    • The number of visits to each webpage

    • The number of downloads of each resource

    • The number of responses to quizzes and assignments

  • We collect and use personal data for the following purposes:

    • Sending newsletters to subscribed users.

    • Improving the content and resources available on our website.

    • Responding to feedback and inquiries.

    • Understanding our audience and level of interest in our resources.

    • Assessing whether online module participants are learning the content.

    • Reporting aggregated usage data to funders.

  • Under GDPR, we process personal data based on the following lawful grounds:

    • Consent: For newsletter subscriptions and feedback submissions, users provide explicit consent by submitting their information.

    • Legitimate Interests: For user registrations, training modules, and aggregated usage data, we collect and use information to maintain and improve our content, assess learning outcomes, and report general usage metrics to funders.

  • We take appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, or misuse. Personal data is stored securely and is only accessible to authorized personnel.

  • We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

    • Newsletter subscription data is retained until a user unsubscribes.

    • Feedback submission data is retained for up to five years to assess long-term trends in content improvement.

    • Training module registration data is retained for up to five years to analyze trends in resource usage and learning outcomes.

    • Aggregate data is maintained indefinitely for research and reporting purposes.

  • If you are located in the EEA, you have the following rights regarding your personal data:

    • Right to Access: Request a copy of the personal data we hold about you.

    • Right to Rectification: Request corrections to any inaccurate or incomplete data.

    • Right to Erasure: Request the deletion of your personal data under certain conditions.

    • Right to Restrict Processing: Request limitations on how we process your data.

    • Right to Data Portability: Request to receive your data in a structured, commonly used format.

    • Right to Object: Object to processing based on legitimate interests or direct marketing.

    • Right to Withdraw Consent: Withdraw consent at any time if processing is based on consent.

    To exercise any of these rights, please contact us at fiona_hollands@edresearcher.net.

  • We do not sell, rent, or trade personal data to third parties. We may share aggregated, non-personally identifiable data with funders. If personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

  • Our website may use cookies or similar tracking technologies to analyze trends and improve user experience. Users can manage their cookie preferences through their browser settings.

  • We may update this policy from time to time. Any significant changes will be communicated via our website or other appropriate means.

  • If you have any questions about this policy or how we process your personal data, please contact us at:

    EdResearcher LLC
    fiona_hollands@edresearcher.net
    76 Dingle Ridge Road, Brewster, NY 10509

By using our website, you acknowledge that you have read and understood this GDPR Policy.