Privacy policy
This privacy policy explains how Economic Security Forum Ab ("ESF", "we") processes personal data when you visit economicsecurityforum.org, contact us or subscribe to the ESF Newsletter.
Who is responsible for your data
Economic Security Forum Ab
Business ID: 3525455-3 · Registered office: Espoo, Finland
Office address: Bulevardi 21, 00180 Helsinki, Finland
Email: info@econsecforum.org
Belgian branch: Economic Security Forum (Belgium), Rue des Colonies 11, 1000 Brussels, Belgium. TVA/BTW BE 1035789952 · RPM/RPR Bruxelles
ESF is the controller of the personal data described in this policy. For any question about your data, contact us at info@econsecforum.org.
What data we collect and why
| When | Data | Purpose | Legal basis (General Data Protection Regulation, GDPR) |
|---|---|---|---|
| You contact us through the contact form | Topic of enquiry, name, organisation and work email address (required; without them we cannot respond); role and message (optional) | To respond to your enquiry and, where relevant, to prepare or deliver our services | Our legitimate interest in responding to enquiries (Art. 6(1)(f)), or steps before a contract at your request (Art. 6(1)(b)) |
| You contact us through the enquiry form for the Nordic Economic Security Programme (NESPO) | Name, organisation, work email address and organisation type (required); message (optional) | To respond to your enquiry about participating in NESPO | Our legitimate interest in responding to enquiries (Art. 6(1)(f)), or steps before a contract at your request (Art. 6(1)(b)) |
| You register for NESPO Forum or another ESF event through our registration form | Name, email address, organisation and attendance preference | To organise the event and send you practical information. Where an event is hosted together with a partner, such as the Nordic Investment Bank, we share the attendee list with the host only to the extent needed to run the event. We may photograph or record the event and publish the material on our website and channels; tell us at registration or on site if you do not want to appear | Steps prior to entering into an arrangement with you and our legitimate interest in organising the event (Art. 6(1)(b) and (f)); if you opt in to receive updates on future ESF events and analysis, your consent (Art. 6(1)(a)); for photographs and recordings, our legitimate interest in documenting the event (Art. 6(1)(f)) |
| You subscribe to the ESF Newsletter | Work email address (required); name and organisation (optional) | To send you the ESF Newsletter, including notice of new ESF publications | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| You work with us or are a business contact | Name, title, organisation, contact details, correspondence | To manage our client and partner relationships | Contract (Art. 6(1)(b)) or our legitimate interest (Art. 6(1)(f)) |
| You visit the website | Technical data such as IP address, browser type and pages visited | To run the website securely and protect forms against spam | Our legitimate interest in a secure, working website (Art. 6(1)(f)) |
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
Newsletter
You can unsubscribe at any time through the link in every newsletter, or by emailing info@econsecforum.org. We then stop sending you the newsletter and delete your subscription data, unless we need to keep a record that you opted out.
Cookies and analytics
The website uses only the cookies and similar technologies that are needed for it to work and to protect our forms against spam. To measure visits, we use Plausible Analytics, which does not use cookies or store IP addresses; we see only aggregated statistics. Raw IP addresses are never stored: visits are counted with a daily hashed identifier, and the value used to create it is deleted every 24 hours. Plausible is incorporated in Estonia and processes and stores the data in the EU, on servers in Germany. We do not use marketing cookies. If we introduce them, we will update this policy and ask for your consent first.
Who processes data on our behalf
We use trusted service providers to run the website and our communications. Unless stated otherwise below, they process personal data only on our instructions and under data processing agreements:
• Webflow, Inc. (United States): website hosting and form handling
• Cloudflare, Inc. (United States): spam protection on website forms (Cloudflare Turnstile). For the signals it uses to improve its bot detection, Cloudflare acts as an independent controller under its own privacy policy.
• Google LLC (United States): delivery of web fonts
• Salesforce, Inc. (Heroku, United States): hosting of the Corporate Response Tracker application, which receives your IP address when the tracker loads on our website.
• Plausible Insights OÜ (Estonia, EU): privacy-friendly website analytics without cookies; data stored in the EU.
• Google (Google Workspace): email and office software, including delivery of website form notifications to our team.
• Google (Google Forms): registration for NESPO Forum events.
• jsDelivr, a public content delivery network: delivery of a script used on the News page. When your browser loads the script, jsDelivr receives technical data such as your IP address.
Transfers outside the EU/EEA
Some of these providers are based in the United States. Where personal data is transferred outside the EU/EEA, we rely on the EU-U.S. Data Privacy Framework for certified providers or on the European Commission's Standard Contractual Clauses.
How long we keep your data
• Contact and NESPO enquiries: up to 24 months after our last contact, unless a client relationship follows.
• Event registrations: 12 months after the event; opt-in consent data until you withdraw it.
• Newsletter subscriptions: until you unsubscribe.
• Client and partner data: for the duration of the relationship and as long as required by accounting and other legal obligations.
• Technical data: for as long as our providers need it for security and operation, normally a short period.
Your rights
Under the GDPR you have the right to:
• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to processing based on our legitimate interest
• receive your data in a portable format, where processing is based on consent or contract
• withdraw your consent at any time, without affecting earlier processing
To use these rights, email info@econsecforum.org. We respond within one month.
You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi), or with the data protection supervisory authority of the EU country where you live or work.
Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version.