This website is dedicated to the dissemination of the ‘Improving and upscaling primary prevention of cancer by addressing childhood obesity through implementation research – the PREVENT approach’ (the “PREVENT project”). The PREVENT project is co-funded by the European Commission’s Horizon programme under the Grand Agreement No. 101104618.

1) Who does this policy apply to?

This policy applies to all PREVENT website ( users and its goal is to communicate how we, the European Health Management Association (hereinafter “EHMA” and/or “We”/ “Us”), collect and process your personal data.

2) When are your personal data collected and used?

There are several ways in we can collect information about you:

  • We collect your e-mail address when you subscribe to our newsletter.
  • We collect certain information about you when you use this webpage via cookies. Further details on this are provided in our cookie policy available here

3) How is the controller of your personal data and how can I contact them?

This website is controlled by the European Health Management Association who are part of the PREVENT consortium, EHMA is the controller for the data processing occurring here. You can contact us at:

European Health Management Association, AV. DE CORTENBERGH 89, BRUSSELS 1000, Belgium, Tel: +32 (0)2 502 65 25, Email:

Should you have further questions regarding the processing of your personal data, do not hesitate to contact by sending an email to

4) How do we use your data?

We process your personal data for the following purposes:

  • If you subscribed to the newsletter: to regularly send you PREVENT newsletter, including invitations to events and webinars about the project. You may also receive email from us with questions and information about your subscription to our newsletter. You always have the opportunity to unsubscribe from our newsletter by contacting us at or by clicking on the link provided in the newsletter.
  • Improve the website content and experience by analysing the user’s performance.

The purposes for which we use data obtained by our cookies are described in our cookie policy available here

We may also process your personal data to comply with legal obligations or to comply, insofar we are legally allowed, with any reasonable request from competent law enforcement agents or representatives, judicial authorities, governmental agencies or bodies, including competent data protection authorities.

5) What is the legal basis for collecting and using my data?

If you subscribe to our newsletter, you are providing your consent which is the legal basis on which we process your personal data. Your consent is voluntary but necessary to receive the newsletter. You may withdraw your consent at any time by sending an e-mail to or by clicking on the link provided in the newsletter.

6) Are we sharing your data?

The information collected from the website may, when necessary, be shared with:

  • the PREVENT consortium partners (i.e. if you ask a question relating to the role of a particular partner). The list of the partners is available here;
  • potentially also with the European Commission when reporting PREVENT results or governmental or judicial authorities insofar we are required by law to send them your personal data (e.g. police or law enforcement).

We will only share your personal data when necessary. Where possible, data will be anonymized and/or aggregated.

We do not intend to send your personal data outside of EEA. In case any transfer of personal data outside the European Economic Area (the European Economic Area consists of the EU, Liechtenstein, Norway and Iceland) would occur, we assure you that we will only do so in accordance with either Art. 45 GDPR (on the basis of an adequacy decision) or Art 46 GDPR (appropriate safeguards in place).

7) How long do we keep your data?

We process and store personal data as long as it necessary for the fulfilment of our contractual obligations under the Grant Agreement of the project. When this data is no longer necessary for the above purposes, it will be regularly deleted.

All personal data we collect to send you our newsletter we will keep for as long as you remain subscribed to our mailing list.

8) What are your rights as a data subject?

You enjoy a number of rights which you can exercise in the manner described below. You have the right:

  • To ask us whether we process personal data on you, and if so, to obtain access to your personal data processed by us. You can also obtain a copy of your data.
  • To correct/ update your personal data. If possible, please specify the context in which we use your personal data (e.g. to send you newsletters or to respond to a request), so that we may assess your request swiftly and accurately.
  • To request deletion of your data, where applicable. For example, this right could be exercised in cases where the personal data is no longer necessary, the personal data processing in unlawful, or you withdraw your consent.
  • To request restriction of the processing of your personal data, where applicable. This could for example be a temporary measure in the case where you contest the accuracy of the personal data of you object to the processing, pending our review of your request.
  • To receive the personal data, which you have provided on the website, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the us (data portability). However, this right only applies to personal data you have provided to us and if they were provided on the basis of your consent or because they were necessary for the execution or the performance of an agreement with you.
  • To object to processing of your data. You can exercise this right when we process your personal data on the basis of our legitimate interests, i.e. you have not given us your consent and we do not need them for the execution or performance of an agreement nor to comply with legal obligations. When our interest relates to direct marketing, we will grant you your request immediately. For other interests, e.g. our security interests, we will ask you to describe your specific circumstances giving rise to request. We then need to balance our interests against your circumstances. If this balancing exercise results in your circumstances outweighing our interests, we will cease processing your personal data.
  • To withdraw your consent for the processing of personal data when we have collected your personal data on the basis of your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can exercise these rights by sending an email to

In case you remain unsatisfied with our response you have the right to contact the competent supervisory authority of the Member State. In Belgium, the supervisory authority is the Belgian Data Protection Authority ( The list of the European data protection authorities is available on the website of European Data Protection Board ( ).