Privacy & Data Protection
Last updated: 8 November 2026
This notice explains how Menstrual Common Ground handles personal information collected through this website, our community-interest survey and optional community updates, in accordance with the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data?
Menstrual Common Ground is a project operated by Fiore Insight Lab, obrt za djelatnosti agencija za promidžbu, vl. Federica Fioretto (a Croatian sole proprietorship), Ilica 71, 10000 Zagreb, Croatia. Business identification number (OIB): 83402386315. Federica Fioretto is the proprietor and the contact for privacy matters.
Privacy contact: federica@fioreinsightlab.com.
2. What information do we collect?
If you complete our survey, we may collect your name, email address (if provided), how you describe your relationship to menstrual health, your preferences for community activities, your answers to multiple-choice questions, and anything you voluntarily write in open-text responses.
Because menstrual health is a sensitive topic, your answers may reveal information about your health or other special categories of personal data. Please share only what you are comfortable sharing. We do not ask you to provide a diagnosis, medical records or identifying details about other people.
When you visit the website, our hosting provider may process technical information such as IP addresses, browser information and security logs.
3. Why do we use your information?
Community research: to understand needs, evaluate ideas and shape future resources, conversations and events. We rely on your freely given, informed consent (GDPR Article 6(1)(a)). Where survey answers include health-related or other special-category information, we rely on your explicit consent (Article 9(2)(a)).
Optional community updates: to send you news about Menstrual Common Ground only if you separately opt in (Article 6(1)(a)). Supplying an email address does not automatically subscribe you.
Website operation and security: to provide and protect the site, where applicable based on legitimate interests (Article 6(1)(f)) or other applicable grounds.
4. Your choices and consent
Taking part in the survey is voluntary. You can skip optional questions and choose not to receive updates. Consent for survey participation and consent for email updates are separate choices. You can withdraw either consent at any time by emailing the privacy contact above; withdrawal does not affect processing carried out before withdrawal.
We use survey responses to identify themes and trends. Public summaries will be aggregated or anonymised; we will not knowingly publish identifiable personal stories or quotes without additional permission.
5. How long do we keep data?
We aim to review identifiable survey responses within 12 months of collection and then delete or anonymise information no longer needed for the community research purpose. Email addresses collected for optional updates are kept until you unsubscribe, withdraw consent, or the mailing list is discontinued, subject to limited records needed to honour opt-outs. Technical records are retained according to the relevant provider’s policies and operational needs.
If a response has already been irreversibly anonymised and can no longer be linked to you, it may not be possible to identify it for deletion.
6. Services and recipients
We use Airtable to collect and manage survey responses and WordPress.com to host the website. These providers may process information under their respective terms, roles and data-protection arrangements. We do not sell personal data.
We do not share identifiable survey responses with community members, partners or the public as part of normal community research.
7. International data transfers
Our technology providers may process information outside the European Economic Area. Where required, such transfers must rely on a recognised adequacy decision or appropriate safeguards, such as standard contractual clauses. You may contact us for information about the safeguards relevant to our use of these services.
8. Cookies and similar technologies
WordPress.com and its infrastructure may use cookies or similar technologies for essential site functions, security and potentially other purposes depending on the site’s configuration. This page is not a completed technical cookie audit. We will update the notice if we introduce optional analytics, marketing technologies or other tracking that requires additional information or consent.
9. Your GDPR rights
Subject to applicable conditions, you may request access to your data, correction, deletion, restriction of processing, data portability, or object to certain processing. Where processing is based on consent, you may withdraw it at any time. Contact federica@fioreinsightlab.com. You may also lodge a complaint with the Croatian data-protection authority, AZOP.
10. Automated decisions and updates
We do not use survey answers to make solely automated decisions that have legal or similarly significant effects on participants.
We may revise this notice when our community activities, tools or data practices change. The latest version will be published here.
