Privacy Policy | Girls Future Ready

Privacy Policy

Last updated: April 2025

This privacy policy outlines the principles governing the processing of personal data and the use of cookies by the Girls Future Ready Foundation, in connection with all services and programs delivered via the website https://www.girlsfutureready.org and related digital platforms.

1. General Information

  1. This policy applies to all users of the website and participants of Girls Future Ready programs, including but not limited to:
    • Girls Future Ready Summit
    • HerStory
    • HerStory Masterclass
    • Youth Advisory Board
    • Girls Global Ready
  2. The website operator and data controller is:
    Girls Future Ready Foundation
    Address: Dzikich Pol 9, Lodz, Poland
    Email: general@girlsfutureready.org
  3. The operator is the controller of your personal data provided voluntarily via the website or program participation.
  4. Personal data is processed for:
    • Program registration and coordination
    • Maintaining a newsletter and mailing list
    • Responding to inquiries
    • Showcasing testimonials or profiles (with consent)
    • Internal analytics and program impact
    • Marketing communications (with consent)
    • Legal obligations
  5. Data is obtained via:
    • Voluntarily entered information in forms
    • Cookies and analytics tools

2. Data Protection Practices

  1. SSL encryption secures data transmission.
  2. Personal data is stored securely.
  3. Administrative passwords are regularly updated.
  4. System backups and updates are maintained.

3. Hosting

The website is hosted on secure servers by a third-party provider compliant with data protection laws.

4. Data Subject Rights

Users may request:

  • Access to their data
  • Rectification or correction
  • Deletion ("right to be forgotten")
  • Data portability
  • Restriction or objection to processing
  • Withdrawal of consent at any time
  • File a complaint with the President of the Office for Personal Data Protection (UODO)

5. Newsletter and Marketing Communications

  1. Legal basis: Article 6(1)(f) GDPR – legitimate interest; Article 6(1)(a) – consent.
  2. Personal data may be used for segmentation and personalization.
  3. Data is retained until unsubscription or consent withdrawal.

6. Program and Event Registration

  1. Data is processed to:
    • Manage registration
    • Share event logistics
    • Share anonymized/aggregate data (with consent if identifiable)
  2. Legal basis: Article 6(1)(b) GDPR – contract; Article 6(1)(a) – consent.
  3. Personal data may be shared with partners (with explicit consent).
  4. Data is retained for program duration + 2 years, unless legally required longer.

7. Use of Forms

  1. Forms may request contact, biographical, or survey data.
  2. IP addresses and timestamps may be recorded.

8. Analytics and Tracking

GFR uses:

  • Google Analytics (for site insights)
  • Behavior tracking tools (e.g., heatmaps, session recordings – anonymized)

These tools use cookies and do not collect personal data unless stated.

9. Final Provisions

  1. This policy may change with regulations or organizational needs.
  2. Significant changes will be communicated via the website or email.
  3. Contact: general@girlsfutureready.org