At The Exchange, we take the security and privacy of our visitors, readers, and members extremely seriously. This Privacy Policy details the types of information we collect, how it is processed and secured, and your rights under the European Union’s General Data Protection Regulation (GDPR) as an association registered under pending status (RY) in Helsinki, Finland.
1. Data Controller Information
The controller for personal data processed through this platform is:
Name: The Exchange association (pending RY registration)
Address: Mannerheimintie 12A, 00100 Helsinki, Finland
Email: privacy@theexchange.org
2. Information Collection and Use
We collect personal data only when voluntarily provided by users. The categories of data collected include:
- Waitlist Signups: Name, email address, institutional affiliation (university or research body), and role/interest select options. This is used solely to coordinate student chapter activities.
- Inquiry Forms: Name, email address, subject line, and message content, used strictly to address direct queries.
- Newsletter Subscriptions: Email addresses collected via the waitlist forms are processed to deliver administrative notices and publications digests.
3. Cookies and Log Data
To optimize portal layout, loading speed, and responsive theme scaling, we process minimal technical log data:
- Technical Metadata: IP addresses (anonymized), browser types, screen sizes, active operating systems, and page navigation history.
- Functional Storage: We use local storage browser parameters (such as `theme`) to persist your light/dark/system mode switches between visits. No tracking cookies are deployed for third-party commercial advertisements.
4. Data Sharing and Third Parties
We do not sell, rent, or lease personal subscriber datasets to third-party commercial advertisers or political campaign units. Your information is accessed only by authorized operational staff members in Helsinki and is handled strictly within secure servers located inside the European Economic Area (EEA).
5. GDPR Compliance Rights
Under the GDPR, individuals residing within the European Union hold the following legal protections regarding their data:
- The right to request a comprehensive print summary of their personal data stored in our records.
- The right to request immediate correction or modification of incorrect details.
- The right to request permanent erasure ("the right to be forgotten") of their data from all email distributions and directories.
- The right to restrict data processing or file formal complaints with the data protection supervisory authority.
6. Storage Retention
Personal data related to waitlists and contact inquiries is kept only for as long as required to coordinate dialogue chapters or respond to messages. If you wish to unsubscribe, email us at contact@theexchange.org for immediate processing.
