GDPR and personal data protection

1. Data controller

The controller of personal data is:

[PROJECT / ORGANISATION NAME]

[Address]

[Company ID / contact email]

2. What data we collect

When you sign the petition we collect the following personal data:

• Name – to identify the signatory
• Email address – to confirm the signature and for communication
• Country – for statistical overview and geographic record of signatures

3. Purpose of processing personal data

We process your personal data solely for these purposes:

• recording and verifying the petition signature
• sending confirmation of the signature to your email address or communication with you
• possible updates on the results and progress of the petition

Your data will not be used for marketing without your explicit consent.

4. Legal basis for processing

We process personal data on the basis of your free and informed consent.

You give consent by ticking the box when signing the petition. You may withdraw consent at any time.

5. Data retention period

We will keep your personal data for the duration of the petition and for a further [TO BE COMPLETED] after it ends, or until you withdraw your consent — whichever comes first.

After that period your data will be deleted promptly and securely.

6. Sharing data with third parties

To operate the platform, your data may be shared with the following categories of recipients:

• Email service provider – to send confirmations and notifications (e.g. Mailchimp or equivalent). These providers are contractually required to protect your data and may not use it for their own purposes.
• Hosting / cloud infrastructure provider – for secure storage of data.

We do not sell, rent, or otherwise transfer your personal data to any other third parties.

7. Your rights

As a data subject you have the following rights:

• Right of access – you may ask whether we process your data and request a copy of that data.
• Right to rectification – you may ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) – you may ask us to delete your data where no other legal basis for processing applies.
• Right to object – you may object to processing of your data.
• Right to withdraw consent – you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

8. Withdrawal of consent

You may withdraw consent to processing of personal data at any time:

by sending an email to: [GDPR EMAIL]

After withdrawal we will delete your data from all systems without delay.

9. Contact

For any questions about personal data protection you can contact us at:

[GDPR EMAIL]