About the Hub · Your information

Privacy,
made clear.

What stays on your device, when other services receive a request, and how to ask about your data.

Updated

01 · Your browser, your choices

What stays on your device

The Hub saves some choices in this browser profile, using local storage. They do not sync to a Student Hub account. The Hub does not automatically upload your saved choices or drafts.

Study & practice
Your course choices and statuses, four-semester study plan, chosen track, Notes and lecture progress, flashcards, quizzes, reflections and saved study list. The Health Economics mock keeps its current attempt and up to eight earlier attempts.
Thesis workspace
Your saved ideas, topic, research question, planning notes, possible supervisor and checklist. This workspace saves edits automatically on this device.
Toolkit & planners
Bookmarks, personal list names and reviewed items; up to six recent tool IDs only if you enable that option. Budgets, study tasks, moving checklists, document dates and career notes are saved only when you choose Save on this device.
Stories & drafts
Saved Student Experiences story IDs and contribution drafts you explicitly save (reply email and review acknowledgement are excluded from these drafts). Importing a draft fills the current form; it does not save it permanently until you choose Save, and it does not submit it. The Right to Health Workshop also saves preparation text only when you choose Save.
Places & shortlists
Saved city-guide sections, university first-week checklists, roadmap plan IDs and fictional profile bookmarks. Saving a roadmap item is a personal shortlist, not a vote or a subscription.
Display preferences
Light or dark mode, timetable and Study Plan views, Notes library layout, “My courses only” and the welcome checklist.

Some work is temporary

The Fundamentals Statistics mock uses this tab's session storage for answers and its deadline; closing the tab normally clears that session. The Right to Health casebook, support questionnaires, Toolkit comparisons, Track Explorer quiz answers and comparison notes, and unsaved planners stay in page memory and can be lost on reload. Track Explorer downloads include your notes only when you choose Download; its comparison links exclude those notes.

Offline copies

In supported browsers, visiting the Hub can save copies of public pages, resources and data for offline use. This can happen without installing the app. These copies are separate from your personal study progress.

Backups, sharing & clearing your data

Use a feature's own export and clear controls where available. Notes, Study Plan, Thesis, Toolkit and Experiences have different backups; a Notes backup is not a backup of the whole Hub. Exports can include free-text notes, financial plans or application details.

To remove local storage and offline copies, clear this site's data in your browser settings. Export anything you want to keep first. Clearing browser data does not delete downloaded backups, email messages or information you have sent elsewhere.

Files you export and messages you send are shared only if you choose to share them. Some search and filter choices appear in page URLs and can enter browser history or shared links. Adding a plan-specific calendar passes the selected public calendar-feed address to your chosen calendar provider.

02 · What connects, and when

External services

A service receives an internet request when your browser loads something from it. That request can include your IP address and ordinary connection information. Each provider has its own privacy practices.

GitHub PagesWhen you visit
Hosts the Hub's pages and files. GitHub logs visitors' IP addresses for security, including visitors without a GitHub account. The Hub does not control GitHub's hosting logs.GitHub Pages data collection ↗
University of BolognaWhen live dates load
Timetable and exam views can request public data directly from corsi.unibo.it. Filtering it by your saved courses happens in your browser.Official programme website ↗
Cloudflare cdnjsOn some study pages
Notes, course, contribution and city-guide pages use code or formatting assets from cdnjs.cloudflare.com, including text rendering and mathematical notation. The main interface fonts, Inter and Source Serif 4, are hosted with the Hub.Cloudflare privacy policy ↗
WikimediaWhen extra campus photos load
Some university-gallery images load from Wikimedia's image servers. Their requests use a no-referrer policy, so the Hub page address is not sent with those image requests.Wikimedia privacy policy ↗
AnnouncementsFrom the Hub's own files
An automated update copies published announcements from a Google Sheet into the site's files. Reading announcements does not make your browser load that source Sheet.
Google Apps Script & SheetsWhen you send either form
When the forms are available, choosing Send to the Hub on Contact or Send for private review on Student Experiences sends your request to Google Apps Script for validation and storage in a restricted Google Sheet owned by the Student Hub account. Opening either page or typing a draft does not contact this service. The public website cannot read the inbox.Google privacy policy ↗
Email & other linksWhen you choose an action
Email links open your chosen email app; sending is your separate action. Links to maps, calendars, Virtuale, Toolkit services and story sources take you to their own services. Those destinations handle what you choose to send or open under their policies.Google privacy policy (the Hub's Gmail inbox) ↗

Accounts, cookies & tracking

The public Hub needs no student login. Its code does not set its own cookies or add visitor analytics, advertising trackers or marketing pixels. Browser storage and service requests still work as described above. The prepared editor dashboard is not connected in this release, so it provides no working editor sign-in.

Providers may process requests outside the European Union; their linked policies explain their own safeguards and retention. We do not describe their services as having no logs or no data collection.

03 · If you get in touch

Messages you choose to send

Contact brings corrections, ideas, privacy requests and contributions to the Hub's administrator. Student Experiences can also send a contribution to the same private inbox for review. The page shows the available way to send your message, with email as an alternative.

The on-site form needs JavaScript and an internet connection. You can always use the email address on Contact.

Choose what to share

On Contact, choose a topic and describe your request; name and reply email are optional. Contact drafts stay in the open page without browser storage. Student Experiences drafts stay in the open page unless you choose Save or Download; those drafts exclude reply email and the review acknowledgement.

Send when you're ready

Choose Send to submit the form’s selected answers and preferences. A confirmed receipt means the request was saved in the private inbox; it does not mean an administrator has read it.

We review your request

The administrator uses the information to answer you, correct the Hub or handle the request. Include an email if you want a reply. A contribution starts a review and is not automatically published.

What the form sends & how it is kept

Contact sends your topic, message, optional name and email, and only the extra details for that topic: a relevant page or source link, a privacy request type, or a contribution link and preferred credit. Student Experiences sends your answers, chosen story context and publication preferences as a contribution message, with your optional reply email and preferred credit. These preferences do not authorize automatic publication. Both forms use the same private inbox and handling described here. They do not upload files or ask for a student account.

The inbox also records a random request identifier, receipt, time received, notice version and processing status. A fingerprint of the submitted text helps recognise a repeated send attempt; it stays private with the request. These records are not included in the site's public files, search or announcements. There are no automatic email notifications.

The administrator reviews unresolved form requests at least every 30 days. Closed requests and spam are scheduled for deletion 90 days after they are marked closed or spam, unless specific information is still needed for an applicable legal obligation. Deletion is a manual administrator task, not an automatic website process; Google's service history and backup retention follow its own policy. You can ask for earlier deletion, subject to any applicable exception.

The form uses a hidden spam field and overall submission limits, without tracking cookies. Google still receives the connection information associated with submitting to its service. The form's notice version is contact-v1-2026-10.

If you use email: an email link opens your own app, and you decide whether to send it. Your sender address, name if supplied, message and chosen attachments go to euhem.studenthub@gmail.com. Email correspondence is kept while needed to resolve the request and relevant follow-up, or meet an applicable legal obligation. There is no automatic mailbox-deletion schedule.

We handle ordinary correspondence to respond to requests and maintain the student project (our legitimate interests, Article 6(1)(f) GDPR). We handle data-rights requests to meet our legal obligations (Article 6(1)(c)). Messages are not added to a public profile or published merely because you contacted us.

A page link and a short explanation are usually enough. Avoid sending passwords, identity documents or private information about other people.

Choose a contact topic

04 · Current status & prepared terms

Student Directory

Registration is not open yet.

The submission connection is switched off. You can explore the Join form, but it cannot send a registration. The Students explorer currently displays 40 fictional demo profiles; its Public and Verified-member previews do not sign anyone in or reveal real student profiles.

The terms below describe the prepared registration process for when registration is enabled. They retain the existing consent choices and retention schedule. They do not mean that registration, member access or profile publishing is available now.

Registration terms · 7 topics
Who can register & what is requested

Who can register

  • Current EU-HEM students and EU-HEM alumni: they can have a Student Directory profile.
  • Students from another programme who attend courses shared with EU-HEM, and faculty, staff and programme partners: they can register, but they are never added to the Student Directory. Their information stays private with the Student Hub team.

Which group you belong to decides whether you can appear in the Directory. Our server decides this from your answer, not your browser.

What the form asks for

  • Everyone: how you are connected to EU-HEM, your full name and an email address. An institutional or university email is preferred, but any address is accepted (alumni may no longer have one).
  • Current students and alumni, required: your EU-HEM cohort, the country you represent, your previous academic field and your EU-HEM track or specialisation. You may answer that you have not chosen a track yet, or that you prefer not to share it.
  • Current students and alumni, optional: a profile photo, an additional country you also identify with, your highest degree and university before EU-HEM, a short bio and LinkedIn.
  • Current students and alumni, optional "Mobility experience": your citizenship group and your own study-visa experience for the first EU-HEM semester in Italy (see below).
  • Students from another programme: your home institution, home programme and the shared course(s) you attend; LinkedIn is optional.
  • Faculty, staff and partners: your institution or organisation and your role; the courses or areas you are involved with and LinkedIn are optional.
  • Everyone, optional: which parts of the Student Hub you would like to use or see improved, and a suggestion. We use this only to decide what to build next.
  • Not collected: phone numbers, Instagram, and the longer list of interests that the first version of the form asked for.
  • Added automatically: the date and time you registered, a random registration number, which version of this privacy information you agreed to, whether you confirmed your email, and whether an administrator has verified your connection to EU-HEM.

A photo is made smaller in your own browser before it is sent. This also removes hidden data stored by phone cameras, such as the location where it was taken. Students from another programme and staff are not asked for a photo.

Optional mobility experience

Optional: citizenship group and study-visa experience

Current students and alumni may answer two optional questions, or skip them:

  • Citizenship group: EU / EEA / Swiss citizen, Non-EU / EEA / Swiss citizen, or "Prefer not to say". We do not ask which country, and never for passports or other documents.
  • Study-visa experience: whether you needed to apply for a study visa before travelling for your first EU-HEM semester in Italy (Yes, No, Not sure, Not applicable, Prefer not to say). This is your own experience, not a legal assessment; we do not collect visa or passport numbers, refusals, residence status or immigration documents.

Why: to understand students' administrative and mobility experiences, so the Student Hub can offer better practical guidance and, later, help students with similar experiences find each other.

Private by default. Each answer has its own choice: "Keep private" (the default) or "Share with verified EU-HEM students". These answers are never public, even if your profile is Public, and nothing is shared from a profile you chose not to publish. "Prefer not to say" and skipped questions are never shared. Sharing will only work once secure member access exists; until then, these answers stay in the private Sheet and are never sent to the website.

We never work out your citizenship group or visa experience from the country you represent, your name, your university or anything else, and we never assume that a non-EU citizen needed a visa. Your answers do not affect whether you can register, appear in the Directory or use any part of the Student Hub. They are not included in the confirmation email. The same correction, deletion and retention rules as for the rest of your registration apply to them.

Email checks & private storage

Your email address

We use your email to confirm that the registration is really yours. It is never shown publicly. By default it is hidden from everyone. Current students and alumni can choose, under "Advanced privacy settings", to allow it to be shown to verified EU-HEM members only, once a secure login exists.

The confirmation email

After you register, we send one email with a link. The link opens a page with a "Confirm my email" button; only pressing that button confirms that the address is yours (email security systems sometimes open links automatically, so opening the link alone does nothing). The link works for 14 days. If a registration is not confirmed within that time, we delete it, including any photo. If you received such an email but did not register, simply ignore it.

Three separate checks: email, connection to EU-HEM, approval

  • Email confirmed only shows that you control that address.
  • Connection verified means a person from the Student Hub team has checked your relationship with EU-HEM (for example, that you are really a current student). Confirming your email does not do this.
  • Approved is a separate review decision by the team.

None of the three happens automatically because of another, and nothing is published automatically.

Where your information is stored

When registration opens, your answers will be stored in a private Google Sheet, and your photo in a private Google Drive folder. The intended setup uses the Student Hub's own Google account, which also sends the confirmation email, and only the person responsible (see below) can open them. Google stores and processes this data for us as part of its services. The form sends your answers directly to a small Google program (Google Apps Script) that saves them there; the website itself never stores or shows them. This is a student project, not a University of Bologna service.

Google may process information on servers outside the European Union. Its privacy policy explains international processing and transfer protections. The account setup and applicable terms must be reviewed before registration opens; this page does not claim that a live storage setup has already been checked.

Consent & profile visibility

Why we are allowed to use your information

We only use your information because you agree to it by submitting the form (your consent, Article 6(1)(a) of the EU General Data Protection Regulation, GDPR). You can withdraw your consent at any time by asking us to delete your registration. This does not affect anything done before you asked.

Who can see a Directory profile: three choices

Current students and alumni choose one; no option is preselected.

  • Public (marked "Best for networking" in the form): the details you set to Public may appear on the public Students page, but only once your email is confirmed, your connection to EU-HEM is verified and the profile is approved. Your email is never public.
  • EU-HEM students only (marked "More private"): your profile stays private for now. It may later be shown only to verified EU-HEM members, once a secure login exists, and only with the same three checks.
  • Do not publish my profile yet: we keep your information, but your individual profile is not displayed anywhere.

"Advanced privacy settings" let you choose for each detail separately (countries, academic background, degree, previous university, track, short bio, photo and LinkedIn): with a Public profile you can still keep any of them for EU-HEM members only, or hidden. An "EU-HEM students only" profile can never have public details. Your email can never be public. A detail you set yourself is never made more visible automatically when you change your profile choice, and the form shows a summary of every setting before you send it.

Who "EU-HEM members" are: verified participating EU-HEM students and alumni across the supported cohorts, whose connection has been checked by the Student Hub team (not by the university). Students from other programmes and staff are not included. If we ever want to widen this group, we will update this page and ask you first.

No real Directory profile is displayed in the current release. Student accounts, secure member access and profile editing are planned features. This prepared registration process does not create an account or make a profile visible. Contact the Hub to ask about your information.

Choices about combined statistics

Anonymous statistics

Current students and alumni are asked whether their non-contact information (such as the country they represent, academic background, cohort and EU-HEM track) may be counted in anonymous, combined statistics about the EU-HEM community (for example, the number of countries represented). If you answer No, you are left out. Your name, photo, email and individual profile are never part of these statistics. Any group with fewer than 5 people is not shown separately (it is merged into "Other" or left out), and we also hide numbers that could be worked out by subtraction. This lowers the risk that someone is recognised, but no rule can rule it out completely, so we only publish broad, whole-cohort figures. These safeguards apply to statistics built from registration answers, which have not been published. The separate origins map uses supplied group totals, described under Public content and the cohort map.

Mobility statistics are a separate, optional choice. A box that is not ticked in advance asks whether your citizenship group and study-visa answer may be counted in anonymous, combined mobility statistics. Saying no does not affect your registration or profile. No individual citizenship or visa answer is ever published; small groups are combined or left out, and the figures count only people who agreed and gave one of the actual answers. Registrations made before this question existed are not included unless the person actively agrees later.

Changing, deleting & keeping records

Changing or deleting your information

To change or delete your information at any time, contact us or reply to the confirmation email. If you withdraw your consent or ask us to delete your information, we delete your entry in the Sheet and your photo (and empty the Drive bin) without unnecessary delay, and at the latest within 30 days, unless the law requires us to keep a specific record. This includes your citizenship-group and study-visa answers. If your profile was public, we remove it from the Student Hub, but we cannot remove copies that other people or services (for example, screenshots or web caches) may already have made.

How long we keep your information

We keep it only as long as it is needed for the reason you registered:

  • Unconfirmed registrations: deleted after 14 days, including any photo.
  • Rejected or invalid registrations: deleted within 30 days of the decision, unless you have an open privacy or support request with us.
  • Current EU-HEM students: kept while you are enrolled, then for up to 6 months after your cohort's expected graduation (30 September of its final year). Before that, we may invite you to continue as an alumnus; if you say yes, the alumni rule applies, otherwise we delete your profile and photo.
  • EU-HEM alumni: kept for at most 24 months after you last confirmed that you want to stay. We ask at least every two years; if you do not confirm within 60 days of our reminder, we delete your profile and photo.
  • Students from another programme: deleted 12 months after the end of the course or academic period you attended, unless we have agreed another use with you.
  • Faculty, staff and partners: kept while you are involved with EU-HEM and for up to 12 months after your last confirmed involvement.

We also review all registrations once a year and delete those that are no longer needed.

Spam protection

Protection against spam

The form uses a hidden field that only automated programs fill in, and checks that the form was not filled in impossibly fast. These checks use no cookies and no tracking.

05 · What is already public

Public content & the cohort map

Supplied group totals

105 people · 24 countries

The origins map uses the supplied 2026–2028 distribution labelled “103+2 pax”. It contains country counts, with no names or links to individual profiles. These totals are independent of Directory registrations and do not establish anyone's citizenship or visa status.

View the origins overview

Fictional profile data

40 demo profiles

The Directory cards, profile-based filters and demonstration statistics use invented people. The supplied origins map is a separate dataset; it should not be read as a map of those fictional profiles.

Explore the labelled demo

Some supplied country totals are small. They are not subject to the prepared Directory's separate rules for combining small groups in future registration-based statistics. We do not promise that any published group total is impossible to associate with someone using other information.

The Hub also publishes programme information, permitted role mailboxes, election announcements and summaries attributed to their published story sources. Those named people are separate from the fictional Directory demo. Current Student Experiences cover images are locally hosted editorial illustrations, not photographs of the story authors.

The cohort group photo

The homepage shows a photo of the EU-HEM cohort. If you appear in it, or if something concerning you on the Hub needs correction or removal, contact us. You can ask for the image to be blurred, replaced or removed; we will act on the request promptly.

06 · Ask, correct, or remove

Your data rights

Where the GDPR applies, you can ask about personal information the Hub holds concerning you. The rights available depend on the information and the reason it is used.

  • Access & a copyAsk what information we hold, how it is used and for a copy.
  • CorrectionAsk us to correct inaccurate or incomplete information.
  • Deletion or restrictionAsk us to remove information or limit its use where the relevant conditions are met.
  • Objection & portabilityObject to processing based on legitimate interests, or request a portable copy where that right applies.
  • Withdrawal of consentWithdraw permission for consent-based processing at any time, without changing the lawfulness of earlier processing.

Write to the contact below. We respond without unnecessary delay and normally within one month. If a lawful extension is needed for a complex request, we explain why within that first month. We may ask for only the information needed to confirm that the request is yours.

If you are dissatisfied, you can complain to Italy's Garante per la protezione dei dati personali or the competent data-protection authority where you live or work. The European Commission explains these rights.

We cannot see or recover study data that exists only in your browser. Use the page's local controls or your browser settings for that data; email us about information you have sent to the Hub or that appears on the site.

07 · A person you can reach

Who is responsible

The EU-HEM Student Hub is an independent volunteer project. Adnan Tarabishi, an EU-HEM student, is responsible for the Hub's handling of personal information described here (the data controller under the GDPR). This is not a university service.

euhem.studenthub@gmail.com

For questions, corrections, access or deletion requests, use this dedicated inbox or the Contact page. No public comment or social-media post is needed.

Updated 8 October 2026

This revision adds the separate Contact form's fields, private reception, optional reply details and manual retention process, with its availability stated above. It also clarifies the inactive Directory, separate origins map, on-device tools, offline caching and external requests. Directory registration fields, visibility choices and retention periods are unchanged. We will update this notice when the relevant features or data practices change.