Last updated: 25 August 2026
1. Who We Are
This website supports the establishment and activities of the Sustainable Development Governance & Law Association Global (“SDGLA”, “we”, “us” or “our”).
Until SDGLA is registered as a Charitable Incorporated Organisation in England and Wales, the person responsible for the website and the processing of personal information described in this Notice is:
Interim data controller
Dr Jennifer Maaß
on behalf of SDGLA Global Team
Germany
Email: [email protected]
Website: https://sdgla-global.org
Following registration, this Notice will be updated to identify the Charitable Incorporated Organisation as the data controller, where applicable.
2. Scope of This Notice
This Notice explains how personal information is collected, used, stored and protected when you visit this website, contact us or submit an enquiry through one of our online forms.
We process personal information in accordance with applicable data protection law, including the EU General Data Protection Regulation (“EU GDPR”), the UK General Data Protection Regulation (“UK GDPR”) and the UK Data Protection Act 2018.
3. Information We Collect
Depending on how you use the website, we may collect:
- your name, email address, organisation and professional role;
- information you submit through a contact or branch enquiry form;
- correspondence and other information you choose to provide;
- technical information, including your IP address, browser type, device information, access time and requested pages; and
- your cookie and consent preferences.
Please do not submit sensitive personal information through a general contact form unless it is necessary for your enquiry.
4. How We Use Personal Information
We may process personal information to:
- respond to enquiries and communicate with you;
- coordinate SDGLA activities, prospective national branches and institutional relationships;
- consider expressions of interest in contributing to or engaging with SDGLA;
- operate, maintain and protect the website;
- prevent misuse and investigate technical or security incidents; and
- comply with applicable legal and regulatory obligations.
Depending on the circumstances, our legal basis is:
- our legitimate interest in operating and protecting the website, responding to enquiries and developing SDGLA’s professional and institutional activities;
- taking steps at your request or performing an agreement with you;
- compliance with a legal obligation; or
- your consent, where consent is required.
Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before its withdrawal.
5. Contact and Branch Enquiry Forms
When you submit a contact or branch enquiry form, we process the information you provide in order to assess and respond to your request.
The information may be transmitted to our organisational email account and retained within the protected website administration system. Where necessary, it may be shared with the relevant Founding Trustee, officer, national branch representative or authorised person supporting SDGLA.
Please provide only the information reasonably necessary for us to address your enquiry.
6. Website Operation and Technical Data
When you access the website, our hosting and technical service providers may process information automatically. This may include your IP address, the date and time of access, the page requested, browser and device information and technical log data.
This processing is necessary to deliver the website, maintain its stability and security, identify technical problems and prevent misuse.
7. Cookies and Similar Technologies
This website may use cookies and similar technologies that are strictly necessary for its operation, security and accessibility. These technologies do not require consent where they are used exclusively for essential website functions.
We do not currently use optional cookies for analytics, advertising or cross-site behavioural tracking. If this changes, we will update this Notice and introduce an appropriate consent and preference-management mechanism before such technologies are activated.
You may configure your browser to block or delete cookies. Please note that blocking strictly necessary technologies may affect the operation of the website.
8. Service Providers and International Transfers
We use carefully selected service providers for website hosting, email delivery, technical maintenance and related operational support. These providers may process personal information only to the extent necessary to provide their services or comply with applicable law.
Because SDGLA operates internationally, information may be accessed or processed in the United Kingdom, the European Economic Area, the United States or other countries in which our authorised representatives or service providers are located.
Where personal information is transferred internationally, we use an applicable lawful transfer mechanism. This may include an adequacy decision, approved standard contractual clauses, the UK International Data Transfer Agreement or Addendum, or other safeguards recognised by applicable law.
We do not sell personal information or share it for cross-context behavioural advertising.
9. How Long We Retain Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
Routine enquiries are normally retained for no longer than 24 months after the matter has been concluded. Information relating to an ongoing professional, institutional or branch relationship may be retained for the duration of that relationship and for an appropriate period afterwards.
Technical logs and security information are retained only for as long as required to operate and protect the website. Information may be kept for a longer period where required by law or necessary for the establishment, exercise or defence of legal claims.
10. Your Rights
Subject to applicable law, you may have the right to:
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request deletion of your information;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain information in a portable format;
- withdraw consent at any time; and
- lodge a complaint with a competent data protection authority.
You may object to the use of your personal information for direct marketing at any time.
To exercise your rights, please contact [email protected]. We may need to verify your identity before responding to a request.
You may also lodge a complaint with:
- the Information Commissioner’s Office in the United Kingdom;
- the State Commissioner for Data Protection of Lower Saxony in Germany; or
- another competent supervisory authority in the country where you live or work or where you believe an infringement has occurred.
11. Automated Decision-Making
We do not use personal information submitted through this website for automated decision-making or profiling that produces legal or similarly significant effects.
12. Children and Young People
The general contact functions on this website are not intended for the independent submission of personal information by children under the age of 13.
Where an SDGLA programme or activity specifically involves children or young people, appropriate additional privacy information, safeguarding arrangements and parental or guardian authorisation will be provided where required.
13. Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, loss, misuse or disclosure.
No method of transmission or electronic storage can be guaranteed to be completely secure. We therefore review our safeguards and service arrangements as the website and SDGLA’s activities develop.
14. External Websites
This website may contain links to websites operated by other organisations. We are not responsible for the content, security or privacy practices of external websites. Please review the relevant privacy notice before providing personal information to another organisation.
15. Changes to This Notice
We may update this Notice to reflect changes in our activities, website functions, service providers or legal obligations. The current version and the date of its latest revision will be published on this page.
16. Contact
Questions about this Notice or the use of personal information may be sent to:
SDGLA Global Team
Dr Jennifer Maaß
Interim data controller
Email: [email protected]