Controller and contact
The operator information supplied for this website identifies QAP, Olowiana 2/4/65, 53-434 Wroclaw, Poland, VAT PL8321785173. Contact info@verifiedreuse.org about personal data. No Data Protection Officer is identified unless the operator confirms an appointment.
What is processed and why
Forms collect contact details, organisation and country, the selected subject, message and relevant scope information. These are used to respond, discuss requested participation, handle complaints or correct records. Required fields are necessary to process the online request; telephone and other marked fields are optional. Do not send identity documents or unnecessary sensitive data.
Legal bases
Pre-contractual steps requested by a person acting for themselves may rely on Article 6(1)(b) GDPR. Professional correspondence, handling concerns and protecting the service may rely on documented legitimate interests under Article 6(1)(f), subject to a balancing assessment. Optional change-notice subscriptions rely on consent, confirmed by email. A privacy acknowledgement is not marketing consent.
Regulation (EU) 2016/679, Articles 6, 13, 14 ↗Verified on 7 November 2026Access and service providers
Submissions are stored in a private database and sent separately to three operator-designated mailboxes, including Gmail-hosted addresses. They are accessible to the persons authorised to manage those mailboxes. Hosting, SMTP, Cloudflare Turnstile and, when loaded, Airtable may process technical or correspondence data. This is not an anonymous or committee-only channel.
Retention and international transfers
Correspondence is retained for the period needed to handle the matter and any applicable legal or claims-related retention. Subscriptions last until withdrawal, with only necessary evidence retained afterwards. The operator must set deletion schedules for the database, mailbox copies and backups. Provider agreements and any transfer safeguards outside the EEA require confirmation; this website does not claim that all data remain in the EU.
Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, portability or object to processing based on legitimate interests. Consent may be withdrawn without affecting earlier lawful processing. You may complain to the competent supervisory authority. Contact the operator to exercise rights; removal is not unconditional where retention is legally justified.
Regulation (EU) 2016/679, Articles 12–22, 77 ↗Verified on 7 November 2026Registers and automated processing
Register records are supplied by the operator through Airtable. The intended OP public view excludes names and private contact details. Corrections can be requested through the contact form. Form security and queue processing do not make certification decisions, and the site does not profile visitors for marketing.