Introduction

Last updated: 14 of August, 2025

As part of its daily operations and function, GeSI needs to gather and use certain information about individuals. These can include customers, suppliers, business contacts, employees and other people the organisation has a relationship with or may need to contact.

The Global Enabling Sustainability Initiative (GeSI) is committed to protecting your privacy and ensuring your personal data is handled in a safe, transparent, and lawful manner. This policy explains how we collect, use, store, and protect your personal data in line with the EU General Data Protection Regulation (GDPR).

Who We Are

Controller:

Global Enabling Sustainability Initiative (GeSI)

Rond-point Robert Schuman 6, 1041 Bruxelles, Belgium

Email: info@gesi.org

Why This Policy Exists

This data management policy ensures GeSI:

• Complies with data protection law and follows good practices;
• Protects the rights of members, staff and partners;
• Is transparent about how it stores and processes individuals’ data;
• Protects itself from the risks of a data

Data Protection Law

The General Data Protection Regulation (GDPR) applies in Belgium and across the EU from May 2018. It requires personal data shall be:

1. Processed lawfully, fairly and in a transparent manner in relation to individuals;
2. Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research or statistical purposes shall not be considered to be incompatible with the initial purposes;
3. Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
4. Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
5. Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by GDPR in order to safeguard the rights and freedoms of individuals;
6. Processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational
7. The controller shall be responsible for, and be able to demonstrate, compliance with the

Scope of Information to be Processed

Data Processing

We may collect and process the following categories of personal data:

• Identification data: Name, date of birth, place of birth, picture, proof of identity (ID, Passport), Photo, Bank Details, job title, organisation, country,
• Contact details: Email address, postal address.
• Professional information: Industry, area of expertise, role in sustainability/digitalisation initiatives, Social Security details, Email, Telephone numbers, Digital Signature, License Plate number, CV, work contracts
• Event participation data: Registrations, attendance, session preferences.
• Website usage data: IP address, browser type, pages visited, cookies.
• Corporations: Postal addresses, VAT numbers, Annual revenue, Bank details, Company contacts, Supplier information, Branding materials, Contracts and agreements

Data Collection

We collect data:

• When you visit our websites (GeSI and Digital with Purpose owned websites).
• When you subscribe to our newsletters or updates (GeSI and Digital with Purpose newsletters).
• When you register for our events, webinars, or initiatives. (e.g. DWP Global Summit)
• When you contact us directly.
• Through cookies and similar technologies (see our Cookie Policy).

Consent

Companies and individuals agree to the process of data by:

• Signing the GeSI Constitution
• Signing partnership agreements
• Subscribing to the GeSI and DWP Newsletter
• Registering for our events or webinars

 Data Storage

 Data is stored in:

• GeSI Protected SharePoint accessible via all staff laptops
• GeSI Members Portal
• DWP Members Portal
• GeSI Email accounts
• Microsoft Office 365 GeSI Environment
• GlueUp – Customer Relationship Manager tool

 

GeSI only processes data of individuals who have a direct relationship with GeSI (such as our members, subscribers of our newsletter, etc.). In addition to this policy, GeSI’s Data Controller is registered and located in Belgium, therefore, we also comply with all the policies under Belgian and European law.

Sharing Your Data

We do not sell or rent your personal data. We may share it with:

• Service providers who help us operate our website, manage events, and send communications.
• Partner organisations involved in joint initiatives or events you choose to attend.
• Public authorities, when required by law.

When transferring data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other lawful mechanisms.

Data Retention

We keep your personal data only as long as necessary for the purposes it was collected, or to meet legal and contractual obligations.

• Newsletter subscribers: until you unsubscribe or withdraw your consent.
• Event participants: until you unsubscribe or withdraw your consent.

Your Rights Under GDPR

You have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Restrict or object to processing.
• Withdraw consent at any time (without affecting prior lawful processing).