Article 1 — Data Controller
ALPECO (Algeria Poland Exchange Council), a registered association (stowarzyszenie) under Polish law, KRS [0001258741], NIP [6793372939], REGON [545410842], with its registered seat in Kraków, Poland, is the controller of personal data processed through this website. Contact: contact@alpeco.org.
Article 2 — Scope
This policy applies to personal data collected via the ALPECO website, including membership registration, contact/newsletter forms, event registration, and visa invitation letter requests.
Article 3 — Categories of Data Collected
Membership registration: full name, email, address, phone (as required by ALPECO's member register)
Newsletter sign-up: email address
Event registration (e.g. Summit): name, email, organization, dietary/accessibility needs if applicable
Visa invitation letters: full name, passport details, nationality, and other information necessary to issue the invitation
Technical data: IP address, browser type, cookies (if analytics are used)
Article 4 — Purpose and Legal Basis of Processing
Membership administration: performance of a contract / association membership relationship (Art. 6(1)(b) GDPR), and legal obligation under the Polish Law on Associations to maintain a member registry (Art. 6(1)(c))
Newsletter and event communications: consent (Art. 6(1)(a))
Visa invitation letters: legitimate interest in supporting ALPECO's mission (Art. 6(1)(f)), combined with the data subject's explicit request and consent
Website analytics/cookies: consent, where non-essential
Article 5 — Data Retention
Membership data: retained for the duration of membership and up to 1 year afterward for legal/archival purposes
Newsletter data: retained until consent is withdrawn
Visa invitation letter data: retained only as long as necessary for the specific request, then securely deleted
Cookies: per the retention periods disclosed in the Cookie Policy
Article 6 — Data Recipients and Transfers
Data may be shared with: hosting/email service providers, and — where relevant to a visa invitation — Polish consular or immigration authorities, or the Algerian institutions involved in the request. If any processor is located outside the EU/EEA, ALPECO ensures appropriate safeguards (e.g. Standard Contractual Clauses) are in place.
Article 7 — Data Subject Rights
Under GDPR, individuals have the right to: access their data, rectify inaccuracies, request erasure, restrict or object to processing, request data portability, and withdraw consent at any time without affecting prior lawful processing. Requests can be sent to "contact@alpeco.org".
Article 8 — Right to Lodge a Complaint
Data subjects may lodge a complaint with the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych, UODO) if they believe their data has been processed unlawfully.
Article 9 — Security Measures
ALPECO applies appropriate technical and organizational measures to protect personal data, including restricted access, secure storage, and staff awareness of confidentiality obligations — particularly for sensitive visa-related documentation.
Article 10 — Cookies
[Details of cookies used — essential, analytics, marketing — cross-referenced with a separate Cookie Policy and consent banner]
Article 11 — Changes to this Policy
ALPECO may update this policy as needed; the current version is always available on this page, with the effective date indicated below.
Effective date: 10.08.2026