Legal

Privacy Policy

Last updated: March 2026

1. Data controller

The Institute for Global Peacecraft (organisationsnummer 802513-2468) is the data controller for personal data processed through this website. The registered address is Stockholm, Sweden. For all data-related enquiries, contact info@globalpeacecraft.org.

2. What personal data we collect

We collect personal data only when you provide it voluntarily through our contact form. The categories of data collected are: your name, email address, organisation name (optional), subject line, and the content of your message.

We do not collect personal data passively through cookies, analytics tools, or tracking pixels. This website does not use cookies of any kind.

3. How and why we use your data

Contact form submissions are used solely to respond to your enquiry and, where relevant, to follow up on potential collaborations, speaking requests, or research partnerships. We may retain your contact details for ongoing correspondence if a professional relationship develops.

Legal basis (GDPR Article 6): Processing is based on legitimate interest (Article 6(1)(f)) for the purpose of responding to enquiries and facilitating the institute's charitable mission. Where you subscribe to a mailing list or request ongoing communications, processing is based on your consent (Article 6(1)(a)), which you may withdraw at any time.

4. Third-party services and data transfers

Google Fonts. This website loads typefaces (Playfair Display and Inter) from Google Fonts, a service operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you visit a page, your browser establishes a connection to Google's servers to retrieve the font files. In doing so, Google receives your IP address, the referring URL, your browser's user agent string, and related HTTP header data. Google states that this data is not combined with other Google services or linked to Google accounts.

This data transfer to the United States is covered by Google's participation in the EU-US Data Privacy Framework. For more information, see Google's Privacy Policy and Google Fonts Privacy FAQ.

Email. Enquiries submitted through the contact form are delivered via email. Our email infrastructure is hosted by a third-party provider. Emails are transmitted using TLS encryption where supported.

Hosting. This website is hosted by a third-party hosting provider. The hosting provider may process server log data (IP addresses, request timestamps, pages visited, browser type) for security and operational purposes. This processing is governed by the hosting provider's own data processing agreement with us.

No other third-party services, analytics platforms, advertising networks, social media trackers, or content delivery networks are used on this website.

5. Data sharing

We do not sell, rent, trade, or otherwise share your personal data with third parties for their own purposes. Personal data may be disclosed only in the following circumstances: to comply with a legal obligation under Swedish or EU law; to protect the vital interests of any person; or to our data processors (hosting provider, email provider) who act strictly on our instructions under appropriate data processing agreements.

6. Data retention

Contact form submissions and related correspondence are retained for as long as necessary to fulfil the purpose for which they were collected, typically no longer than 24 months after the last communication. If a professional relationship develops, data may be retained for the duration of that relationship plus a reasonable wind-down period. You may request earlier deletion at any time.

7. Your rights under the GDPR

Under the General Data Protection Regulation (EU) 2016/679, you have the following rights with respect to your personal data:

Right of access (Article 15): You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data.

Right to rectification (Article 16): You may request that inaccurate or incomplete data be corrected.

Right to erasure (Article 17): You may request deletion of your personal data where there is no compelling reason for its continued processing.

Right to restriction of processing (Article 18): You may request that processing be restricted in certain circumstances, for example while the accuracy of data is being verified.

Right to data portability (Article 20): Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.

Right to object (Article 21): You may object to processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to withdraw consent (Article 7(3)): Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact info@globalpeacecraft.org. We will respond within 30 days.

8. Supervisory authority

If you believe your data protection rights have not been adequately addressed, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):

Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm, Sweden
www.imy.se

9. Children's privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a child without appropriate parental consent, we will take steps to delete that data promptly.

10. Security measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include TLS encryption for data in transit, access controls limiting data access to authorised personnel, and regular review of our security practices.

11. Automated decision-making

We do not use automated decision-making or profiling as defined in GDPR Article 22. No decisions affecting you are made solely by automated means.

12. Changes to this policy

We may update this policy to reflect changes in our practices or applicable law. The "last updated" date at the top of this page will reflect any revisions. Material changes will be communicated through a notice on this website. Continued use of the website after changes are posted constitutes acceptance of the revised policy.

13. Contact

For any questions, concerns, or requests related to this privacy policy or the processing of your personal data, contact:
Institute for Global Peacecraft
Stockholm, Sweden
info@globalpeacecraft.org