Your privacy and data security are important to us. This privacy policy document describes the types of information that is or may be collected, used or shared by yoimma.com when you visit or use the site.

This website (yoimma.com) is an informational research-outreach website presenting the YOIMMA doctoral research project on the (im)mobility aspirations and capabilities of young people in protracted displacement. The website does not sell products, does not require registration, and does not create user accounts. It collects the minimum personal data necessary to answer your enquiries and to ensure the technical operation and security of the site.This policy explains what personal data we collect, why we collect it, on what legal basis, how long we retain it, and how you may exercise your rights under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"). It applies to all visitors to yoimma.com.

The YOIMMA project is a doctoral research project conducted by Karin Schmidt Martinez, PhD candidate at Maastricht University, Maastricht Economic and Social Research Institute on Innovation and Technology (UNU-MERIT), Boschstraat 24, 6211 AX Maastricht, the Netherlands. For the purposes of this website:

• Data controller: Karin Schmidt Martinez, PhD candidate (Maastricht University / UNU-MERIT), acting in a personal capacity as operator of this public research-outreach website.
• Contact: contact@yoimma.com
• Postal address: UNU-MERIT (attn. Karin Schmidt Martinez), Boschstraat 24, 6211 AX Maastricht, the Netherlands.

Please note: personal data collected through the actual research study  is processed under the separate responsibility of Maastricht University as data controller for the research, in accordance with the project's approved research ethics documentation and Data Management Plan. That processing is governed by the Participant Information Sheet and consent form provided to research participants, not by this website privacy policy. In this policy, "we", "us", and "our" refer to the researcher identified above as data controller for the website. "You" refers to any visitor to yoimma.com.

(a) Data you provide voluntarily through the contact form. If you use the contact form on the Contact section of this website, we receive the message you write and, where you choose to include them, your name, email address, telephone or WhatsApp number, or other contact details. We do not require you to identify yourself in order to send a message.

(b) Server log data collected automatically. When you visit any page of yoimma.com, our hosting provider (Infomaniak SA, Switzerland) automatically records standard technical information for the purposes of security, error diagnosis, and traffic analysis. This information may include your IP address, your browser type and version, the operating system of your device, the date and time of the visit, the pages viewed, the referring page, and error messages. This information is stored in aggregated form and is not used to identify you personally.

(c) Cookies. This website uses only strictly necessary technical cookies that are required for the site to function (for example, to remember your consent to this notice or to display the site correctly). We do not use analytics, advertising, or tracking cookies. Details are given in section 6 below. We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising services on this website. We do not knowingly collect any special-category personal data (such as data concerning racial or ethnic origin, religious beliefs, or health) through this website.

We process your personal data only for the following purposes and on the following legal bases under Article 6 of the GDPR:

• To reply to messages you send us through the contact form: Your consent (Article 6(1)(a) GDPR), given when you submit the form
• To operate, secure, and troubleshoot the website (server logs): Our legitimate interest in the technical operation and security of the site (Article 6(1)(f) GDPR)
• To comply with legal and regulatory obligations that apply to us: Legal obligation (Article 6(1)(c) GDPR)

We do not use your personal data for automated decision-making or profiling. We do not use your data for direct marketing.

We may collect and use non-personal information to help us improve the service, personalise your experience and analyse the use of the service. This Privacy Policy does not limit our use or disclosure of non-personal information collected. We reserve the right to collect, use and disclose such non-personal information to our partners, advertisers and other third parties in our sole discretion.

This website uses a minimal set of strictly necessary cookies to enable core functionality (such as remembering your acknowledgement of the cookie notice and ensuring the site displays correctly). These cookies do not track you across other websites and do not collect information for advertising purposes. You can configure your browser to refuse cookies or to notify you when cookies are being set. If you refuse strictly necessary cookies, some parts of the site may not function correctly. We do not use analytics cookies, advertising cookies, or social-network tracking pixels. If the site adds any non-essential cookies in the future, we will update this policy and ask for your consent before setting them.

We retain your personal data only for as long as necessary for the purposes for which it was collected, as follows:

• Contact form messages: retained for as long as necessary to reply to your enquiry and to keep a record of the exchange, and in any event no longer than twelve (12) months after the last correspondence, unless you ask us to delete the message earlier.
• Server log data: retained by Infomaniak in accordance with their standard retention practices (typically no longer than twelve (12) months) for security and troubleshooting purposes.
• Records related to legal obligations: retained for the period required by applicable law.

After the retention period expires, your personal data will be securely deleted or fully anonymised.

We reserve the right to update or modify this privacy policy at any time without notice. We will post those changes on this page. Please check this document whenever you provide us with personal information. This policy is effective as of 2022/12/14. Your continued use of the website after seven (7) days of changes or revisions to this Privacy Policy will mean that you accept the terms of this revised Privacy Policy. We suggest that you periodically review this Privacy Policy if you are concerned about how your information is used.