Data Protection Notice – Women4Cyber Foundation

Last updated: 02/03/2026

Thank you for showing interest in the Women4Cyber Foundation (“W4C”). Data protection is of particular importance to the management of Women4Cyber, and we are committed to ensuring that personal data is processed in a lawful, fair and transparent manner.

The Women4Cyber Foundation (“W4C”, “we”, “us”) is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR).

This Privacy Notice explains how we process personal data when you visit www.women4cyber.eu or interact with us.

1. Name and Address of the Controller

Data Controller for the purposes of the GDPR and other data protection laws applicable in the Member States of the European Union is:

Women4Cyber Foundation
Avenue des Arts 46
1000 Brussels
Belgium
Email: hello@women4cyber.eu
Website: www.women4cyber.eu

2. Purpose of Processing and Categories of Data

a) Website Hosting and Technical Functioning

The Website is hosted by Nazwa.pl, based in Poland.

When you visit the Website, certain technical information is automatically processed through server log files. This may include:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

• Pages accessed

The purpose of this processing is to:

• Ensure the technical functioning of the Website

• Maintain system security and stability

• Prevent misuse

The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest in ensuring the security and proper functioning of the Website).

b) Website Analytics

W4C uses Plausible Analytics to measure and analyse website traffic.

Plausible Analytics:

• Does not use cookies

• Does not collect personally identifiable information

• Does not track users across websites

• Processes data in aggregated and anonymised form

The information processed may include page views, referrer sources, device type and country-level location derived from anonymised IP processing.

The purpose of this processing is to understand how visitors use the Website and to improve its content and performance.

The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest).

c) Newsletter Subscription

If you subscribe to the W4C newsletter, the following personal data is processed:

• Email address

The purpose of this processing is to send you newsletters and updates related to W4C activities.

The legal basis is Article 6(1)(a) GDPR (consent).

Newsletter distribution is carried out using Mailchimp.

You may withdraw your consent at any time by using the unsubscribe link included in each newsletter or by contacting us directly.

d) Event Registration

W4C uses Let’s Get Digital to manage registrations for events, webinars, and workshops.

The following personal data may be processed:

• Name

• Email address

• Company / organisation information

• Job title and other registration details

Purpose: Organise and manage event participation, send confirmations and updates.
Legal basis: Article 6(1)(a) GDPR – consent; and/or Article 6(1)(f) GDPR – legitimate interest.

For certain events, participants may also have access to a networking platform. Creating a profile is optional and enables participants to be visible to other attendees and sponsors, and to interact with them (for example through messaging or meeting requests).

Participants remain in control of their interactions. Contact details are only shared with sponsors where a participant chooses to engage with them (for example by requesting information, booking a meeting, or sharing their details).

W4C may also share aggregated and anonymised insights about participants (such as industry, role, or geography) with sponsors. This information does not identify individuals.

e) Mentoring Programme Management

W4C uses Chronus to manage its mentoring programmes.

Personal data processed may include:

• Name and email address

• Organisation and professional details

• Mentoring goals, interests, and session notes

Purpose: Facilitate mentoring relationships, match mentors and mentees, and provide programme support.
Legal basis: Article 6(1)(a) GDPR – consent; and/or Article 6(1)(f) GDPR – legitimate interest.

Data is shared with Chronus only for administering the mentoring programme. Data is retained only as long as necessary and may be anonymised for reporting or evaluation purposes.

3. Social Media Presence

W4C maintains profiles on:

• LinkedIn

• Instagram

• YouTube

When you access these platforms via links on our Website, the respective provider processes your personal data in accordance with its own privacy policy. W4C does not control the data processing carried out by these third parties.

The Website itself does not set social media cookies merely by displaying links to these platforms.

Embedded Content and Third-Party Services

Our Website may include embedded content, such as videos from YouTube. These embedded videos may set cookies and collect information about your device, IP address, and interactions with the content.

The processing of data by YouTube is subject to its own privacy policy: https://www.youtube.com/about/privacy

W4C does not control the data collected by these third parties. By interacting with embedded content, you acknowledge and accept the applicable third-party policies.

 

4. Retention of Personal Data

Personal data is retained only for as long as necessary for the purposes described above:

• Newsletter data: until consent is withdrawn or you unsubscribe.

• Server log data: retained for a limited period in accordance with security requirements.

• Analytics data: stored in aggregated, non-identifiable form.

5. Data Subject Rights

You have the right to:

• Access your personal data

• Request rectification of inaccurate data

• Request erasure of your data

• Restrict processing

• Object to processing based on legitimate interest

• Withdraw consent at any time

• Data portability, where applicable

To exercise your rights, please contact hello@women4cyber.eu.

W4C will consider your request and respond in accordance with the GDPR.

6. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR.

As Women4Cyber Foundation is established in Belgium, the competent authority is:

Belgian Data Protection Authority
https://www.dataprotectionauthority.be

---

8. Automated Decision-Making

The Women4Cyber Foundation does not use automated decision-making or profiling within the meaning of Article 22 GDPR.