GCT Privacy Policy

The data controller responsible for your personal data is:

GCT processes personal data in its capacity as a registered Norwegian non-profit organisation and international civilizational leadership institution.

All personal data collected and processed by GCT is governed by:

• The General Data Protection Regulation (GDPR), Regulation (EU) 2016/679
• The Norwegian Personal Data Act (Personopplysningsloven) 2018
• Any applicable national data protection legislation in GCT's countries of operation

GCT processes personal data on the following legal bases:

• Consent — where you have explicitly given consent for a specific purpose
• Contractual necessity — where processing is necessary to fulfil a membership agreement or service
• Legitimate interests — where processing is necessary for GCT's institutional operations and does not override your rights
• Legal obligation — where processing is required to comply with applicable law

3.1   Membership Applicants and Members

• Full name, date of birth, nationality, and country of residence
• Email address and phone number
• Institutional or company name, type, and website where applicable
• Areas of professional interest and engagement preferences
• Skills, experience, and voluntary information submitted in applications
• Payment records for membership contributions

3.2   Website Visitors

• IP address and browser information collected via cookies and analytics tools
• Pages visited, time spent, and navigation behaviour
• Contact form submissions including name, email, and message content

3.3   Event Participants and Volunteers

• Name, contact details, and institutional affiliation
• Participation records, volunteer availability, and role preferences
• Photographs and recordings taken at GCT events, where consent has been obtained

GCT collects and processes personal data solely for the following purposes:

• Processing and managing membership applications and renewals
• Maintaining membership records and communication
• Sending GCT newsletters, event invitations, and institutional updates to members who have consented
• Organising and managing GCT events, convenings, and volunteer coordination
• Processing membership contribution payments
• Improving the GCT website and digital platforms through anonymised analytics
• Complying with legal and regulatory obligations

GCT does not sell, rent, or trade personal data. Data may be shared only in the following limited circumstances:

• With GCT's trusted technology service providers — such as payment processors, email platforms, and website hosting providers — who are bound by data processing agreements and GDPR compliance obligations
• With GCT's internal governance bodies — including the World Governing Assembly Secretariat and Membership Committee — for institutional oversight purposes
• Where required by Norwegian or applicable law, or by a competent regulatory authority

All third-party processors engaged by GCT are required to process data only on GCT's instructions and in compliance with GDPR.

GCT retains personal data only for as long as necessary for the purposes for which it was collected:

• Active membership records are retained for the duration of membership and for five years following membership lapse, in accordance with institutional governance requirements
• Unsuccessful membership applications are retained for twelve months and then securely deleted
• Payment records are retained for seven years in compliance with Norwegian accounting and tax legislation
• Website analytics data is anonymised and retained for a maximum of twenty-six months
• Event participation records are retained for three years following the event

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. For full details please refer to the GCT Data Retention Policy.

As a data subject under GDPR, you have the following rights in relation to your personal data held by GCT:

• Right of AccessYou may request a copy of the personal data GCT holds about you.
• Right to RectificationYou may request correction of inaccurate or incomplete data.
• Right to ErasureYou may request deletion of your personal data, subject to legal retention obligations.
• Right to RestrictionYou may request that GCT restricts processing of your data in certain circumstances.
• Right to Data PortabilityYou may request your data in a structured, machine-readable format.
• Right to ObjectYou may object to processing based on legitimate interests.
• Right to Withdraw ConsentWhere processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact GCT through the Contact page at www.gct-int.org. GCT will respond to all data subject requests within thirty calendar days in accordance with GDPR requirements.

The GCT website uses cookies to ensure functionality and to analyse website usage. Cookies are small text files stored on your device. GCT uses the following categories of cookies:

• Essential cookies — necessary for the website to function correctly
• Analytics cookies — used to understand how visitors interact with the website, collected in anonymised form

You may manage or disable cookies through your browser settings at any time. Disabling cookies may affect certain website functionality. GCT does not use advertising or tracking cookies.

GCT operates as an intercontinental institution. Where personal data is transferred outside the European Economic Area (EEA), GCT ensures that appropriate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses approved by the European Commission where applicable.

If you have concerns about how GCT processes your personal data and are not satisfied with GCT's response, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

GCT may update this Privacy Policy from time to time to reflect changes in legal requirements or institutional practices. The date of the most recent update is displayed at the top of this page. Continued use of GCT's website or membership services following any update constitutes acceptance of the revised Policy.

For any questions regarding this Policy, please contact the GCT Secretariat at secretariat@gct-int.org