Privacy Policy

PRIVACY POLICY – EUROPE GULF FORUM

Last updated: 12/05/26

Thank you for your interest in the Europe Gulf Forum. Your privacy is important to us, and we aim to be transparent about how we collect and use personal data.

This Privacy Policy (“Policy”) explains how Europe Gulf Forum (“we”, “us”, “our”) collects, uses, discloses, and protects personal data in connection with our website http://www.europegulfforum.org/ (the “Website”) and related interactions (together, the “Services”).

This Policy also explains your rights and choices.

Controller contact details

Controller: Europe Gulf Forum
Email: concierge@europegulfforum.com

Data Protection Officer (DPO):

What personal data do we collect?

The personal data we collect depends on how you use the Services and what information you choose to provide.

We collect personal data in three main ways: (1) information you provide directly; (2) information we collect automatically when you use the Website; and (3) information we collect from other sources.

Information you provide directly

Depending on which features we make available, you may provide:

  • Newsletter subscriptions to the Atlantic Council: name (optional), email address, preferences, and consent records.
  • Enquiries: name, contact details, and the content of your message.
  • Event-related interactions: registration and attendance details such as name, role, organisation, email address, and logistical preferences.

Information we collect automatically

When you visit the Website, we (and our service providers) may collect:

  • Online identifiers and technical data: IP address, device type, browser type/settings, operating system, referring pages, pages viewed, and timestamps.
  • Cookie and similar technology data (if used): cookie identifiers, preferences, and information about your interactions with the Website.

Information we collect from other sources

We may receive personal data from partners, public sources, or service providers, where relevant to the Services (for example, where we are coordinating invitations, attendee information, or professional contact information). Where required, we will provide appropriate notice.

How do we use personal data?

We use personal data for purposes including:

  • To operate, maintain, and secure the Website and Services.
  • To respond to enquiries and communications (if enabled).
  • To administer events and related engagement (if enabled), including invitations, registration, logistics, and venue/security arrangements where necessary.
  • To send newsletters or other updates you request or agree to receive (if enabled).
  • To analyse and improve the Website and Services (if analytics is enabled).
  • For legal and compliance purposes (for example, to protect our legal rights, handle complaints, and comply with lawful requests).
  • For any other lawful purpose, with your consent.

We may create aggregated or de-identified information that can no longer reasonably identify you. We may use such information for lawful purposes.

Legal bases for processing

Where the UK GDPR and/or EU GDPR applies, we rely on one or more of the following legal bases depending on the context:

  • Consent: for example, where you opt in to receive newsletters or where we use non-essential cookies/trackers (and where required under applicable law). You can withdraw consent at any time.
  • Contract: where processing is necessary to provide a service you request or to take steps at your request before entering into an arrangement (for example, administering your event participation).
  • Legal obligation: where processing is necessary for compliance with law (for example, certain accounting or record-keeping obligations, if applicable).
  • Legitimate interests: where processing is necessary for our legitimate interests (and not overridden by your interests or fundamental rights), such as operating and securing the Website, communicating about our activities, administering events, and improving the Services.

Special category data (if applicable):
If you provide health-related information (eg accessibility/dietary needs), we will only process it where permitted by law and with appropriate safeguards. In many cases this will rely on your explicit consent or another applicable condition.

How do we disclose personal data?

We may disclose personal data to:

  • Service providers (processors) who help us operate the Services, such as website hosting, IT and security, form processing, email delivery, analytics, and CRM tools.
    • Our Website is hosted using Webflow.
    • If enabled, we may use additional providers for newsletters, email delivery, analytics, consent management, or event registration.
  • Event partners, venues, and security providers (if events are administered) strictly as needed to deliver events and manage safety/logistics.
  • Professional advisers (eg legal, audit) where necessary.
  • Authorities where required by law or to protect rights, safety, and security.

We do not sell personal data.

Marketing communications

If you sign up for newsletters or updates (if enabled), we may send you communications by email. You can unsubscribe at any time using the link in our emails or by contacting us at concierge@europegulfforum.com.

If you opt out of marketing communications, we may still send non-marketing service communications where necessary (for example, to respond to an enquiry).

Cookies and similar technologies

If we use cookies or similar technologies on the Website, we will provide clear information about them and, where required, ask for your consent before setting non-essential cookies.

You can manage your cookie preferences via our cookies page.

For more information, see our Cookie Policy.

International transfers

Some of our service providers may process personal data outside the UK and/or the European Economic Area.

Where a transfer is restricted under applicable law, we use appropriate safeguards such as:

  • an applicable adequacy decision/regulation; and/or
  • standard contractual clauses and UK international transfer mechanisms (such as the UK IDTA or the UK Addendum); and/or
  • other lawful transfer mechanisms where available.

You can request more information about relevant safeguards by contacting us at concierge@europegulfforum.com

Your rights and choices

Depending on your location and applicable law, you may have rights including:

  • the right to be informed;
  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to restrict processing;
  • the right to data portability;
  • the right to object (including an absolute right to object to direct marketing); and
  • the right to withdraw consent (where processing is based on consent).

To exercise your rights, contact us at concierge@europegulfforum.com. We may need to verify your identity before responding.

Automated decision-making

We do not use solely automated decision-making (including profiling) that produces legal or similarly significant effects on individuals. If this changes, we will update this Policy and provide required information.

How is personal data protected?

We maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure, or access.

No method of transmission over the internet is completely secure. Please take care with what you submit online.

How long do we keep personal data?

We keep personal data only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

Retention examples (replace with your final retention schedule):

  • Website security logs: [1 year]
  • Enquiries: [up to 3 years]
  • Newsletter subscriptions: until you unsubscribe (plus suppression records as needed)
  • Event administration records: [up to 7 years]
  • Accessibility/dietary data (if collected): [up to 7 years]
  • Payments (if applicable): [up to 7 years]

Children’s privacy

The Services are not directed to children and are intended for an adult, professional audience. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us at the email provided

Links to other sites

The Website may contain links to third-party sites that are not owned or controlled by us. We are not responsible for the privacy practices of those third-party sites. Please review their privacy notices.

Changes to this Policy

We may update this Policy from time to time. The updated version will be posted on the Website with a new “Last updated” date.

Complaints

If you have concerns about how we handle personal data, please contact us first at concierge@europegulfforum.com.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). If you are in the EEA, you may also have the right to lodge a complaint with your local supervisory authority.