This notice explains how personal data is collected, used, and protected within the framework of “Creating with Purpose – Inspiring Communities Through Art” (CreatePurpose), a project co-funded by the European Union under the Creative Europe programme (Grant Agreement No. 101256122, CREA-CULT-2025-COOP). It applies to everyone whose personal data is processed in connection with the project: open call applicants, selected artists, youth participants, festival/event audiences, and partner staff or representatives.
1. Who is responsible for your data (Data Controllers)
Personal data collected through this website and through project activities is processed jointly by the members of the CreatePurpose consortium, each acting as controller for the data it collects directly:
- Heinrich-Böll-Stiftung Schleswig-Holstein (HBS) – Kiel, Germany (Project Coordinator)
- STIPO – Athens, Greece
- Asociația Culturală Atelierul European de Artă (AEA) – Bucharest, Romania
For questions regarding your data, you may contact the project team at: createpurpose.team@gmail.com, or the partner in your country directly.
2. Whose data we process, and why
a) Open call applicants (artists)
If you apply to the artist open call, we process the data you submit in your application (name, contact details, CV, portfolio, motivation letter, and any information required by the selection questionnaire) to:
- evaluate and score your application against the published selection criteria;
- communicate with you about your application and the selection outcome;
- where required, collect additional information (e.g. age range, group membership) needed for EU reporting on programme participation quotas.
Legal basis: your consent, given by submitting your application; and, for shortlisted candidates, steps necessary to enter into a contract.
b) Selected artists and residency participants
If you are selected to take part in the project, we additionally process contract and payment information (e.g. bank details, tax identification), travel and accommodation details for mobility periods, and any material you produce or that documents your participation (photos, video, audio, artistic outputs), to:
- manage your participation, contract, and payments;
- document and report project activities to the European Education and Culture Executive Agency (EACEA), as required under the Grant Agreement;
- promote the project and your work through the website, social media, and public events.
Legal basis: performance of a contract; compliance with our legal/reporting obligations towards EACEA; and consent for the use of your image, voice, or artistic work in communication materials.
c) Youth participants (aged 15–30)
Young people who take part in the residencies and community activities may have their name, contact details, and participation (including photos or video of activities) recorded for project documentation, monitoring, and reporting purposes, and for promotion of the project.
Legal basis: consent. Participants under 18 take part with the informed consent of a parent or legal guardian, in addition to their own.
d) Event and festival audiences
At public festivals, presentations, and community events, photos and video may be taken for documentation and promotional purposes. Where practical, this is signalled at the event; attendees who prefer not to appear in published material may inform the organisers on site.
e) Partner staff and representatives
Names, professional contact details, and roles of partner staff involved in project coordination may appear in public deliverables, reports, or communication materials, as required for transparency towards EACEA and the public.
3. Special protection for minors
Where a participant is under 18, we apply additional safeguards: participation and any use of image, voice, or personal data requires the consent of a parent or legal guardian; sensitive personal data relating to minors is not published; and images or names of minors are used in public communication only with explicit prior consent, which may be withdrawn at any time.
4. Who receives your data
Your data may be shared, strictly on a need-to-know basis, with:
- the CreatePurpose consortium partners (HBS, STIPO, AEA);
- the European Education and Culture Executive Agency (EACEA) and the European Commission, for grant management, monitoring, and audit purposes, via the EU Funding & Tenders Portal;
- service providers strictly necessary for running the website or managing payments, under confidentiality obligations.
We do not sell personal data or use it for purposes unrelated to the project.
5. How long we keep your data
Application data of candidates who are not selected is kept only for the duration needed to manage the selection process and handle any related queries, after which it is deleted. Data relating to selected participants and project implementation is kept for the duration required by EU grant rules for audit and reporting purposes (generally several years after the project’s final payment), after which it is deleted or anonymised.
6. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data, where applicable;
- object to or request restriction of processing;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with your national data protection authority (in Romania: the National Supervisory Authority for Personal Data Processing, ANSPDCP – www.dataprotection.ro).
To exercise any of these rights, contact us at createpurpose.team@gmail.com.
7. EU Funding & Tenders Portal Privacy Statement
Where your data is transmitted to EACEA/the European Commission for grant management purposes, it is also processed under the terms of the Funding & Tenders Portal Privacy Statement, available at: ec.europa.eu – Funding & Tenders Portal Legal Notice.
For information regarding cookies and similar technologies, please consult our Cookie Policy.
Some technical service providers may process data outside the European Economic Area under the safeguards provided by the GDPR (such as the European Commission’s Standard Contractual Clauses).
We do not use automated decision-making or profiling when evaluating applications.
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Information submitted through the contact form or by email is processed solely for the purpose of responding to your enquiry.
We may update this notice from time to time to reflect changes in the project, legal requirements, or our data processing activities. The latest version will always be available on this page.