Introduction
This privacy notice applies to the website of the Institute for Global Peacecraft at www.globalpeacecraft.org (“the Site”). The controller of the personal data described here is the Institute for Global Peacecraft, a non-profit association (ideell förening) registered in Sweden under organization number 802513-2468, with its seat in Stockholm. The Institute processes personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and with Swedish law. Questions about this notice may be sent to [email protected].
This notice describes what information is collected when the Site is visited, which service providers handle it, on what legal basis, how long it is kept and how visitors may exercise their rights.
What is collected
The Site has no contact form, no sign-up forms, no user accounts and no advertising. Information is collected in three ways.
- Hosting. The Site is hosted on Cloudflare Pages. To deliver each page and to protect the Site against attack and misuse, Cloudflare processes technical data about each request, including the Internet Protocol (IP) address of the device, the browser type, the page requested and the date and time.
- Visit statistics. The Site uses Cloudflare Web Analytics to count visits. It records which pages are viewed, the referring site, the type of browser and device and how quickly pages load, and reports these figures in aggregated form. Cloudflare states that this service “does not use any client-side state, such as cookies or localStorage, to collect usage metrics” and does not identify individuals by their IP address.
- Fonts. Pages load typefaces from Google Fonts. To deliver these files, Google receives the IP address of the device, the browser type and the address of the page.
Personal data provided voluntarily
Personal data that visitors choose to send by email to [email protected], such as a name, an email address, an institutional affiliation, the content of a message and any attached documents, are used only to reply and to deal with the matter raised. Applications for traineeships, sent by email in response to a published call, are used only for the selection concerned. Personal data are not sold and are not passed to third parties for their own purposes.
Service providers and transfers
The Institute uses the following service providers, each of which processes personal data on its behalf or delivers content that the Site requests:
- Cloudflare, Inc.: hosting, security and Web Analytics;
- Google: Google Fonts, and the hosting of the Institute’s email.
Some of these providers process data outside the European Economic Area, including in the United States. Such transfers rely on the safeguards that the GDPR recognizes, such as the EU–US Data Privacy Framework or standard contractual clauses.
Lawful bases
The Institute relies on its legitimate interests (article 6(1)(f) of the GDPR) in operating a secure website, in understanding how the Site is used and in replying to correspondence. Where a person applies for a traineeship, the processing is necessary to take steps at that person’s request before an agreement is concluded (article 6(1)(b)). The Institute does not rely on consent for any processing on the Site.
Retention
Visit statistics are held by Cloudflare in aggregated form under its own terms. Correspondence is kept for as long as is needed to deal with the matter and, as a rule, for no longer than 24 months after the last exchange. Applications are kept for no longer than 30 days.
Requests
Visitors have the right to ask what personal data the Institute holds about them, to have those data corrected or erased, to restrict or object to their processing and, where the GDPR provides, to receive them in a portable form. Requests are sent to [email protected] with the subject line “Data protection”. The Institute responds within one month.
Visitors who consider that their data have been handled unlawfully may lodge a complaint with the Swedish supervisory authority, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden, www.imy.se.
Third-party sites
The Site contains links to other websites, including those of the United Nations, publishers and partner organizations. This notice does not cover those sites, which have their own privacy notices.
Notification of changes
The Institute may amend this notice, in particular when the services used by the Site change. Amendments are posted on this page and take effect on the date shown below.
Last updated: 1 November 2026
Data protection requests [email protected]