Privacy Policy
How Democracy Forum processes personal data in accordance with the GDPR. See also our Legal Notice.
Controller
The controller responsible for processing personal data on this website is:
If you have any questions regarding data protection, you may contact us at the contact details above.
General Information on Data Processing
We process personal data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person. This may include, for example, your name, email address, phone number, IP address, organizational details, or any information you submit through our website forms.
We process personal data only where there is a valid legal basis for doing so. Depending on the context, this may include:
- your consent
- the performance of pre-contractual or contractual steps
- compliance with legal obligations
- our legitimate interests, provided these do not override your rights and freedoms
Website Access and Technical Provision of the Website
When you visit our website, certain technical data may be processed automatically in order to display the website and ensure its stability and security. This may include:
- IP address
- browser type and version
- operating system
- date and time of access
- referrer URL
- requested pages or files
- log file data
This processing is necessary to provide the website securely and efficiently.
Hosting and Website Infrastructure
Our website may be hosted or technically operated using external service providers. In this context, personal data may be processed on our behalf to the extent necessary for hosting, security, technical maintenance, or website delivery.
Where such providers act as processors on our behalf, they are engaged in accordance with applicable data protection law.
Contacting Us
If you contact us by email or through a contact form, we process the information you provide in order to handle your request and communicate with you. This may include:
- your name
- your email address
- your phone number
- the content of your message
- any additional information you voluntarily provide
Join Forms for Individuals and Organizations
If you submit one of our join forms, we process the personal data you provide in order to review your application, assess potential membership or cooperation, communicate with you, and manage related follow-up.
Depending on the form, this may include:
- name
- country and city
- contact details
- professional or organizational background
- areas of engagement
- motivation and interests
- public profile links
- website and social media information
- short bio or organizational description
- any other information you voluntarily provide
Email Communication and Follow-Up
If you apply through our forms or otherwise contact us, we may use your contact details to reply to your inquiry, continue the application process, or provide relevant follow-up communication relating to your request.
If you separately opt in to receive updates, invitations, or other information from us, we will process your data for that purpose based on your consent.
Recipients and Service Providers
Your personal data may be disclosed to external service providers where this is necessary for website hosting, form handling, email communication, IT administration, or related organizational processes. Such providers may include:
- website hosting providers
- form service providers
- email communication providers
- IT or administrative service providers
Where required by law, such providers are engaged as processors and are contractually bound to process personal data only in accordance with our instructions.
Transfers to Third Countries
If we use service providers located outside the European Union or the European Economic Area, or if personal data is otherwise transferred to a third country, such transfers will only take place where permitted under applicable data protection law. This may be the case, for example, where:
- an adequacy decision of the European Commission exists, or
- appropriate safeguards are in place, such as Standard Contractual Clauses
Where required, further information on such safeguards can be requested from us.
Analytics, Embedded Content, and Optional External Services
We may use optional external services such as analytics tools, embedded media, maps, or social media integrations only where permitted and, where necessary, based on your consent.
If such services are used, additional information about the specific provider, the nature of the data processed, and the relevant legal basis will be provided in this Privacy Policy or in the corresponding consent layer.
Retention Periods
We retain personal data only for as long as necessary for the purposes for which it was collected or as long as legal retention obligations require. As a general rule:
- contact inquiries are retained only as long as needed to process and conclude the communication
- application or join form data that does not lead to ongoing cooperation, membership, or further engagement is generally deleted after 12 months unless longer retention is required or justified
- data connected to an ongoing relationship may be retained for the duration of that relationship and thereafter as required by law
Provision of Data
The provision of personal data through our forms is generally voluntary. However, fields marked as mandatory are necessary in order for us to process your inquiry or application.
If you do not provide the required information, we may not be able to review your application or respond properly to your request.
Your Rights
Under the GDPR, you have the following rights, subject to the applicable legal conditions:
- the right to access your personal data
- the right to rectification of inaccurate data
- the right to erasure
- the right to restriction of processing
- the right to object to processing based on legitimate interests
- the right to data portability, where applicable
- the right to withdraw consent at any time with effect for the future, where processing is based on consent
If you wish to exercise any of these rights, please contact us using the contact details provided above.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
No Automated Decision-Making
We do not use your personal data for automated decision-making, including profiling, within the meaning of Art. 22 GDPR, unless expressly stated otherwise in a specific case.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time in order to reflect legal, technical, or organizational developments. The version published on this website is the current version.
Last updated: May 13, 2026
