Privacy Policy
Last updated: 19 October 2026
AI for Change Foundation is the public name of AI for Change ry, a Finnish non-profit association. This Privacy Policy explains how we collect and process personal data when you visit our website, contact us, subscribe to our newsletter, register for activities, inquire about supporting membership or communicate with us about collaboration and community participation.
1. Data controller
The data controller responsible for your personal data is:
AI for Change ry
Business ID: 3525551-3
Registered postal address: Alatie 1, Pori, Finland
Email: info@aifcf.org
Website: aifcf.org
For questions about this Privacy Policy or the processing of your personal data, please contact us at info@aifcf.org.
2. Personal data we collect
We collect only the information needed for the relevant purpose.
Information you provide to us
Depending on how you interact with us, this may include:
name;
email address;
organisation, role and country;
information included in a contact, partnership, event, community or volunteer enquiry;
information provided when applying to contribute as an expert, speaker, researcher or volunteer;
supporting membership information, where applicable;
correspondence and other information you choose to share with us.
Please do not send sensitive personal data through our forms unless it is necessary for your enquiry.
Newsletter information
If you subscribe to our newsletter, we process your email address and, where provided, your name. We may also process information about your subscription, consent, delivery status and unsubscribe request.
Our newsletter is managed through MailerLite.
Technical information
When you visit our website, technical information may be processed by Squarespace and other service providers. This may include:
IP address;
browser and device type;
operating system;
pages visited and interaction with the website;
date and time of access;
technical and security information.
The use of cookies and similar technologies is described in our Cookie Policy.
3. Why we process personal data
We process personal data for the following purposes:
Responding to enquiries
We use information submitted through our contact forms or sent to us by email to respond to questions, ideas, collaboration proposals and other enquiries.
The legal basis is our legitimate interest in communicating with people who contact us and, where applicable, taking steps at the person’s request before entering into an arrangement.
Newsletter communication
We use newsletter subscriber information to send our monthly newsletter and related updates about AI for Change Foundation’s work, insights, events and activities.
The legal basis is your consent. You can withdraw your consent at any time by using the unsubscribe link in the newsletter or by contacting us.
Events, community and collaboration
We may process information needed to organise events, manage community applications, coordinate volunteers and experts, and communicate with partners and contributors.
The legal basis may be your consent, our legitimate interest in organising these activities, or the steps needed to establish or manage an arrangement with you.
Supporting membership
At present, supporting membership enquiries do not require payment processing through the website. If payment processing or formal membership registration is introduced in the future, this Privacy Policy will be updated accordingly before such information is collected.
Proving Personal Data
Providing personal data is generally voluntary. However, if you choose not to provide certain information, we may be unable to respond to your enquiry, process your registration or provide the requested service.
Website operation and security
We process technical information to maintain, secure and improve the website, prevent misuse and diagnose technical problems.
The legal basis is our legitimate interest in operating a secure and functional website. Where analytics or other non-essential technologies require consent, they will only be used according to your cookie choices.
Legal obligations
We may process personal data where this is necessary to comply with legal obligations, maintain required records or respond to lawful requests from authorities.
We do not use personal data for automated decision-making that produces legal or similarly significant effects.
4. Service providers and sharing of data
We do not sell or rent personal data.
We may share personal data with service providers that process information on our behalf, including:
Squarespace, which hosts and supports our website;
MailerLite, which manages our newsletter;
our email and communication service providers;
event, registration or payment providers where required for a specific activity;
technical, legal or accounting service providers where necessary.
We may also disclose personal data where required by law, by a competent authority or to protect our legal rights, security or property.
Service providers are permitted to process personal data only for the relevant purposes and under applicable data protection obligations.
5. International data transfers
Some service providers may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, we rely on an applicable legal safeguard, such as an adequacy decision, the European Commission’s Standard Contractual Clauses or another mechanism recognised under data protection law.
6. How long we keep personal data
We retain personal data only for as long as necessary for the purpose for which it was collected.
In general:
contact and collaboration enquiries are normally retained for as long as needed to handle the matter and, where appropriate, for up to 12 months afterwards;
newsletter data is retained until you unsubscribe or withdraw your consent;
information relating to events, community participation, volunteers and contributors is retained for as long as necessary to manage the activity and its follow-up;
membership, accounting and other legally required records are retained for the periods required by law;
technical and cookie-related information is retained according to the relevant provider’s settings and documentation.
We may retain limited information about a withdrawn consent or unsubscribe request when necessary to ensure that we do not contact you again.
7. Your rights
Depending on the circumstances, you have the right to:
request access to your personal data;
request correction of inaccurate or incomplete information;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
object to direct marketing;
request data portability where applicable;
withdraw consent at any time where processing is based on consent.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact us at info@aifcf.org. We may need to verify your identity before responding to a request.
You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland if you believe that your personal data has been processed unlawfully.
8. Cookies and similar technologies
Our website uses cookies and similar technologies. Some are necessary for the website to function, while others may be used for analytics, preferences or embedded content.
Where required by law, we ask for your consent before using non-essential cookies. You can manage or withdraw your choices through our cookie settings.
More information is available in our Cookie Policy.
9. Links to other websites
Our website may contain links to external websites and services. We are not responsible for the privacy practices or content of third-party websites.
We recommend reviewing the privacy information of any external service before submitting personal data through it.
10. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.
However, no online service can be guaranteed to be completely secure.
11. Changes to this Privacy Policy
We may update this Privacy Policy when our activities, services, technology or legal obligations change.
The latest version will always be published on this page with the date of the most recent update.
12. Contact
For questions about this Privacy Policy or your personal data, please contact: