Privacy Policy
Version 1.0 September 14, 2026
Introduction
BEROC is a nonprofit organisation where we conduct academic and applied research, arrange educational programs on modern economics and other outreach activities.
BEROC team cares a lot about your privacy and keeping your personal information safe. Here we explain what kinds of information we might collect from you, how we use it, and what choices you have about your data.
If you have any questions or concerns regarding the protection of your personal data, please contact us via our email: beroc@beroc.org.
The policy extends to:
- our website: https://beroc.org
- our email: beroc@beroc.org
- our online and offline events (e.g. our conferences)
What data, for what purposes, on what grounds and for how long do we process?
We act as a controller in the following processing operations.
| Purpose | Legal ground | Data | Storage period | Data recipients |
|---|---|---|---|---|
| Send you mailings with our updates | Consent | Email First Name Last Name Language preferences | until you withdraw consent | Mailchimp |
| Track online behavior for statistics and content improvement | Consent | Data сollected by Google Analytics | 14 month | Google Analytics |
| Post photos from our offline events | Legitimate interest to promote our events | Speakers and participants photos | as long as you don’t mind this photo being published | Hetzner (website hosting) |
| Register you as a participant of our event and send over the accompanying materials | Contract | Email First Name Last Name Company name | 4 years after the event | Google Forms |
| Get information on how people find out about our events | Legitimate interest to improve promotion of our events | Information on how you found out about the event | 4 years after the event | Google Forms |
| Hold our events and keep a record of it | Legitimate interest to raise awareness in the economic field | Speakers video Voice of the questioners at offline event Names and comments of the online participants | – | YouTube Zoom |
| Manage the alumni base of our educational programs | Legitimate interest to maintain communication and confirm completion of the program. | First Name Last Name Name and dates of the program | 25 years from the date of graduation | – |
| Respond to your inquiries received on our email address | Legitimate interest to maintain communications | Email Name Content of the letter | 2 years after the last activity on our account | Gmail |
Where did we get your data from?
- Directly from youWe may obtain personal data directly from you, for example, when you subscribe to our mailing list.
- BrowserWhenever you go to our website using your internet browser (like Mozilla Firefox, Google Chrome or Microsoft Internet Explorer), we get some information automatically. This information may include the address of the web page you went to, your IP-address, and the version of the browser you used to go to the website.
Who do we share your personal information with?
Hetzner Online GmbH
Our website are hosted by Hetzner Online GmbH. Address: Industriestr. 25, 91710 Gunzenhausen, Germany. Relevant privacy policy available here.
Mailchimp
We use Mailchimp as our email service provider. The services are provided by Intuit Inc. Address: 2700 Coast Ave, Mountain View, CA 94043, USA. Relevant Data Processing Addendum of Mailchimp.
Google LLC
Google Analytics, Google Forms and YouTube services are provided by Google LLC. Address: Google LLC, Google Data Protection Office, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Relevant privacy policy of Google.
Zoom
We use Zoom to hold our online events. The services are provided by Zoom Video Communications, Inc. Address: 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA. Relevant Privacy Statement of Zoom.
Automated decisions
We neither use automated decision-making nor your personal data to automatically assess aspects of your personality (automated profiling).
Cookies
When you visit our website, we may place the following types of cookie files on your computer or mobile device:
| Cookie name | Type | Description | Duration | Provider | Third party privacy policy / cookie information |
|---|---|---|---|---|---|
| PHPSESSID | Functional (strictly necessary) | Identifier for your current session in PHP | Session | – | – |
| _ga | Analytics | Allows to distinguish users, used to identify the visitor, and is updated with each new interaction with the site. | 2 years | Google Analytics | https://policies.google.com/privacyhttps://support.google.com/analytics/answer/7318509?hl=en |
You can exercise your cookie preferences on the cookie banner. Also, you can set or amend your web browser controls to accept or refuse some cookies. If you choose to reject cookies, you may still use our website though your access to some functionality and areas of our website may be restricted.
Your rights
- request information about the processing of your personal data
- obtain access to the personal data held about youUnder Article 15 of the GDPR, individuals have a right of access that gives them the right to obtain a copy of their personal data, as well as other supplementary information. It helps individuals to understand how and why companies are using their data, and check the lawfulness of the processing.
- ask for incorrect, inaccurate or incomplete personal data to be correctedUnder Article 16 of the GDPR, individuals have the right to have inaccurate personal data rectified. An individual may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing.
- request that personal data be erased when they are no longer needed or if processing is unlawfulUnder Article 17 of the GDPR, individuals have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.
- request the restriction of the processing of your personal data in specific casesArticle 18 of the GDPR gives individuals the right to restrict the processing of their personal data in certain circumstances. This means that an individual can limit the way that an organization uses their data. This is an alternative to requesting the erasure of their data.
- receive your personal data in a machine-readable format and send them to another controller (‘data portability’)Under Article 20 of the GDPR, individuals have the right to data portability that gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits those data directly to another controller.
- object to the processing of your personal data for marketing purposes or on grounds relating to your particular situationArticle 21 of the GDPR gives individuals the right to object to the processing of their personal data at any time. This effectively allows individuals to stop or prevent you from processing their personal data.
- request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computersYou also have the right in this case to express your point of view and to challenge the decision
- withdraw your consent at any time
- lodge a complaint with a supervisory authorityIn accordance with Article 77 of the GDPR, you, as a data subject, have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or where an alleged infringement of the GDPR has taken place.
In case some questions about the protection of your personal data remain, you can still contact us via our email beroc@beroc.org.