Privacy Policy - INTERACT 2027

Last updated: 01.09.2026

Who We Are

Our website address is: https://interact2027.org. The interact2027.org website is hosted on servers located in Estonia.

The data controller responsible for this website is interact2027.org (Tallinn University). If you have questions about this policy or how your data is handled, you can contact us at: contact@interact2027.org.

Data Protection Policy We Follow

In accordance with the GDPR (Regulation (EU) 2016/679) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus), we inform you that we have adapted our communications to comply with regulations on the protection of personal data.

Your personal data will only be processed for the purposes to which you have expressly consented, or where we have another valid legal basis (such as legitimate interest in operating the website securely). Consent is always voluntary, and you can withdraw it at any time in the same way you gave it. If you do not provide personal data, or withdraw your consent, interact2027.org may not be able to fulfil the purpose for which the data was collected (for example, sending you newsletter updates).

You have the right to:

  • Access the data we hold about you

  • Rectify inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

To exercise these rights, or in case of a complaint, please contact us at contact@interact2027.org.

If you believe our processing of your personal data violates data protection law, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia — www.aki.ee.

Your data will be kept until you withdraw consent, or for as long as necessary to achieve the purpose for which it was collected, as detailed in each section below.

The controller, interact2027.org, undertakes to process and protect data in accordance with the Estonian Personal Data Protection Act and Regulation (EU) 2016/679.

Media

If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies. These are for your convenience so you do not have to fill in your details again when you leave another comment. These cookies last for one year.

If you visit our login page, we set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

Newsletter and Email Subscription

If you choose to subscribe to our newsletter or email updates, we use the Newsletter plugin (by Stefano Lissa & The Newsletter Team) to manage the subscription process. When you sign up, we collect:

  • Your email address (required)

  • Your name, if you choose to provide it

Legal basis: Processing is based on your explicit, freely given consent (Article 6(1)(a) GDPR). The Newsletter plugin uses a double opt-in process: after submitting the subscription form, you receive a confirmation email and must click the confirmation link before you are added to our mailing list. This ensures your consent is verifiable and that no one can subscribe an email address without the owner’s approval.

What we use it for: To send you updates, announcements, and content related to interact2027.org. We do not use your email address for any other purpose, and we do not sell or rent it to third parties.

Where the data is stored: Subscriber data collected through the Newsletter plugin is stored in our WordPress database, on servers located in Estonia. [If you use the plugin’s paid email-sending service or connect it to an external SMTP/ESP such as Mailchimp, Brevo, Amazon SES, etc., add: “Emails are sent via [service name], which processes your email address on our behalf as a data processor. [If located outside the EU/EEA: This provider is located in [country], and transfers are safeguarded by Standard Contractual Clauses / an adequacy decision.]”]

Consent records: The Newsletter plugin records the date, time, and IP address associated with your subscription confirmation, so we can demonstrate valid consent if required.

Managing your subscription: Every newsletter email includes an unsubscribe link. You can also manage your preferences or update your data via the subscriber profile page provided by the plugin. Unsubscribing takes effect immediately and stops further emails.

Retention: We retain your email address for as long as you remain subscribed. If you unsubscribe, your data is deleted or anonymized from our active mailing list within 30 days, except where a minimal record is kept in a suppression list to ensure we do not contact you again.

Your rights: You may withdraw your consent at any time by unsubscribing or by contacting us at [insert contact email]. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Embedded Content from Other Websites

Pages on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website directly.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who We Share Your Data With

We may share limited technical data with trusted service providers who assist us in operating and maintaining this website, such as:

  • Our hosting provider (servers located in Estonia)

  • Our cookie consent service, if applicable

  • Our email delivery service for newsletters (see “Newsletter and Email Subscription” above), if an external SMTP/ESP is used

  • Automated spam detection services, for comment moderation

These service providers process data only on our behalf, under our instructions, and in accordance with applicable data protection laws.

How Long We Retain Your Data

  • Comments: Comments and their metadata are retained indefinitely, so we can recognize and approve follow-up comments automatically instead of holding them in a moderation queue.

  • Newsletter subscribers: See “Newsletter and Email Subscription” above — retained until unsubscribe, then deleted/anonymized within 30 days.

  • Registered users (if any): We store the personal information provided in their user profile. Users can see, edit, or delete their personal information at any time (except their username). Website administrators can also see and edit that information.

What Rights You Have Over Your Data

If you have an account on this site, have left comments, or are subscribed to our newsletter, you can request:

  • An exported file of the personal data we hold about you

  • Erasure of any personal data we hold about you (this does not include data we are obliged to keep for administrative, legal, or security purposes)

To make a request, contact us at contact@intract2027.org

Where Your Data Is Sent

Visitor comments may be checked through an automated spam detection service. Newsletter subscription data is processed as described in the “Newsletter and Email Subscription” section above.