Last updated: 8 July 2026
GCIRD respects the privacy of its readers and seeks to minimise the personal data processed through this website.
GCIRD does not sell personal data, operate an advertising network, create behavioural advertising profiles, or intentionally request sensitive personal information from website visitors.
GCIRD does not ordinarily collect personal information merely because a person reads an article. However, limited technical information may necessarily be processed by the website’s hosting, security, and infrastructure providers to deliver pages, maintain security, prevent abuse, and diagnose technical problems.
Additional information is processed only when a visitor voluntarily contacts GCIRD, submits a comment, subscribes to publications, or consents to optional analytics.
This policy describes those limited processing activities and the rights available to individuals.
1. Data Controller
The controller responsible for personal data processed through this website is:
GCIRD
11 allée des Tilleuls
92400 Courbevoie
France
Email: contact@gcird.org
GCIRD determines the purposes for which the website, its essential infrastructure, and any optional website services are used.
Service providers such as the website host, security provider, email provider, analytics provider, and content-management platform may process limited information on GCIRD’s behalf or under their own applicable privacy obligations.
2. Information Processed Through the Website
A. Ordinary website visits
GCIRD does not require visitors to create an account or provide their identity in order to read publicly available publications.
When a visitor accesses the website, limited technical information may nevertheless be processed automatically by hosting, security, content-delivery, and website-maintenance systems. This may include:
-
IP address;
-
date and time of access;
-
requested page or file;
-
browser and device information;
-
operating system;
-
referring webpage;
-
server errors;
-
security events; and
-
information necessary to identify malicious or automated traffic.
GCIRD does not use this technical information to identify ordinary readers unless this is reasonably necessary to investigate abuse, protect the website, comply with law, or respond to a security incident.
Purpose: website delivery, reliability, troubleshooting, fraud prevention, spam prevention, and security.
Legal basis: GCIRD’s legitimate interests in operating and securing the website under Article 6(1)(f) GDPR.
B. Email communications
When a person contacts GCIRD by email, the information contained in that communication may be processed, including:
-
name;
-
email address;
-
professional affiliation, where provided;
-
message content;
-
attachments; and
-
subsequent correspondence.
GCIRD uses this information to respond to the communication, evaluate the request, and maintain necessary administrative records.
Legal basis: legitimate interests under Article 6(1)(f) GDPR or, where applicable, steps taken at the individual’s request before entering into an agreement under Article 6(1)(b) GDPR.
GCIRD asks correspondents not to send sensitive personal information unless it is strictly necessary.
C. Comments
Where comments are enabled, the comment form may request:
-
a display name;
-
an email address;
-
an optional website address;
-
the comment itself; and
-
information necessary to detect spam or abuse.
The commenter’s display name, optional website address, and approved comment may be published publicly. The email address will not be displayed publicly.
IP addresses, browser information, or similar technical information may be processed by the website or a spam-prevention service to identify automated, malicious, or abusive submissions.
Comments may be reviewed before publication. GCIRD may decline, edit, restrict, or remove comments that are unlawful, abusive, irrelevant, misleading, defamatory, threatening, discriminatory, promotional, or otherwise inconsistent with the purpose of the website.
Legal basis: GCIRD’s legitimate interests under Article 6(1)(f) GDPR in facilitating responsible discussion, maintaining editorial standards, and preventing misuse.
Where a visitor chooses to save comment details in their browser, the associated optional cookie is based on consent.
D. Email subscriptions
Where an email-subscription facility is active, GCIRD processes the subscriber’s email address for the purpose of sending the publications or updates expressly requested by that person.
Subscription information will not be sold or provided to unrelated organisations for their own marketing.
Legal basis: consent under Article 6(1)(a) GDPR.
Subscribers may withdraw their consent at any time through the unsubscribe mechanism included in relevant messages or by contacting contact@gcird.org.
Withdrawing consent does not affect the lawfulness of messages sent before consent was withdrawn.
A limited record of an unsubscribe request may be retained where necessary to ensure that the address is not accidentally added to the mailing list again.
E. Analytics
Where Google Analytics or another optional audience-measurement service is active, it is used to understand aggregated website use, such as page views, referral sources, approximate geographic areas, device categories, and general interaction with publications.
Optional analytics technologies are activated only after the required consent has been provided through the cookie-preference mechanism.
GCIRD does not intentionally use analytics for:
-
personalised advertising;
-
cross-site behavioural tracking;
-
identifying individual readers;
-
selling visitor profiles; or
-
making decisions producing legal or similarly significant effects.
Legal basis: consent under Article 6(1)(a) GDPR.
Consent may be withdrawn at any time through the website’s cookie-preference controls.
3. Cookies
The website may use:
Strictly necessary technologies
These are required to provide website functions, store security settings, distribute website traffic, prevent abuse, or remember privacy choices.
They are used only where technically necessary and are not used for behavioural advertising.
Comment-preference cookies
A visitor who submits a comment may be offered the option of saving their name, email address, and website in their own browser for convenience.
These cookies are optional.
Analytics cookies
Analytics cookies or similar technologies are used only after consent where prior consent is legally required.
Visitors may refuse optional analytics without losing access to GCIRD’s public articles.
The website should provide a cookie-preference mechanism through which optional consent can be accepted, rejected, or withdrawn.
4. No Sale or Advertising Use
GCIRD does not:
-
sell personal data;
-
rent subscriber or commenter information;
-
use personal data for behavioural advertising;
-
share personal data for cross-context behavioural advertising;
-
knowingly create commercial visitor profiles; or
-
knowingly permit unrelated third parties to use GCIRD visitor information for their own marketing.
Information may be shared only with service providers needed to operate the website or where disclosure is required by law.
5. Service Providers
Limited information may be processed by providers supporting:
-
website hosting;
-
domain and network services;
-
website security;
-
content delivery;
-
content management;
-
email communications;
-
email subscriptions;
-
backups;
-
technical maintenance;
-
spam detection; and
-
optional website analytics.
GCIRD seeks to use reputable service providers and appropriate contractual, organisational, and technical safeguards.
GCIRD does not control the independent websites, privacy practices, or services of third parties linked from GCIRD articles.
6. International Transfers
Some service providers may process information outside France or the European Economic Area.
Where required, transfers are based on an applicable adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.
GCIRD does not independently transfer visitor databases outside the European Economic Area for sale or advertising.
7. Retention
Personal data are retained only for as long as reasonably necessary for the purpose for which they were processed.
In particular:
-
technical and security logs are retained according to legitimate operational and security needs;
-
ordinary correspondence is retained only while necessary to respond, administer the relationship, or address legal matters;
-
subscription details are retained until the person unsubscribes or the subscription service ends;
-
approved comments may remain available while the relevant discussion or publication remains online;
-
rejected spam or abusive submissions may be retained temporarily to prevent repeated abuse; and
-
analytics information is retained according to the shortest reasonably appropriate analytics retention setting.
Information may be retained for a longer period where required by law or reasonably necessary to establish, exercise, or defend legal claims.
8. Individual Rights
Subject to applicable law, individuals may request:
-
access to their personal data;
-
correction of inaccurate information;
-
deletion of information;
-
restriction of processing;
-
objection to processing based on legitimate interests;
-
data portability where applicable; and
-
withdrawal of consent.
Requests may be sent to contact@gcird.org.
GCIRD may request limited information necessary to verify the identity of the person making the request.
Individuals may also lodge a complaint with the French supervisory authority, the Commission Nationale de l’Informatique et des Libertés, or with another competent European data-protection authority.
9. Security
GCIRD uses reasonable technical and organisational measures intended to protect information from unauthorised access, loss, disclosure, alteration, and misuse.
No internet service or email transmission can be guaranteed to be completely secure. Visitors should therefore avoid submitting unnecessary confidential or sensitive information through public comments or ordinary email.
10. Children
GCIRD is intended primarily for an academic, professional, and general public-policy audience. The website is not designed to knowingly solicit personal data from children.
Where GCIRD becomes aware that a child’s personal data have been submitted improperly, reasonable steps will be taken to remove or restrict that information.
11. Changes to This Policy
This policy may be updated when the website, its service providers, or applicable legal requirements change.
The latest version will be published on this page together with the date of its most recent revision.
12. Contact
Questions or privacy requests may be addressed to:
GCIRD
11 allée des Tilleuls
92400 Courbevoie
France
Email: contact@gcird.org