PRIVACY POLICY
International Kepes Society – kepessociety.org
Effective date: 01.01.2026
Last updated: 01.02.2026
The International Kepes Society (“IKS”, “we”, “our”, “us”) is committed to protecting the privacy and personal data of visitors, members, partners, and contributors to the website https://kepessociety.org (the “Website”).
This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable national laws.
By using this Website, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
The data controller responsible for processing personal data is:
International Kepes Society
Email: [official contact email]
Registered address: [official address]
2. Scope of Personal Data Collected
2.1 Data Provided Voluntarily
We may collect personal data that you voluntarily provide when you:
- Contact us via the Website
- Apply for membership
- Register for events, symposia, or exhibitions
- Subscribe to newsletters or mailing lists
This may include:
- Full name
- Email address
- Country of residence
- Institutional or professional affiliation
- Motivation statements or professional background (membership applications)
- Any other information you choose to submit
2.2 Automatically Collected Data
When you visit the Website, certain data may be collected automatically, including:
- IP address
- Browser type and version
- Operating system
- Device type
- Date and time of access
- Pages visited and referring URLs
This data is used exclusively for statistical, analytical, and security purposes.
3. Legal Basis for Processing (GDPR Art. 6)
We process personal data on the following legal bases:
- Consent (Art. 6(1)(a)) – newsletters, contact forms
- Contractual necessity (Art. 6(1)(b)) – membership or event participation
- Legitimate interest (Art. 6(1)(f)) – website operation, security, analytics
- Legal obligation (Art. 6(1)(c)) – where required by law
4. Purpose of Data Processing
Personal data is processed for the following purposes:
- Communication with users and members
- Membership evaluation and administration
- Organization of cultural, artistic, and academic events
- Distribution of newsletters and announcements
- Improvement and secure operation of the Website
- Statistical analysis of website usage
We do not sell or commercialize personal data.
5. Cookies and Analytics
5.1 Cookies
The Website uses cookies to ensure proper functionality and to improve user experience.
Cookies may include:
- Essential cookies (site operation)
- Analytics cookies (visitor statistics)
You may disable cookies in your browser settings; however, this may affect site functionality.
5.2 Analytics Tools
The Website may use privacy-compliant analytics services (e.g. Google Analytics with IP anonymization enabled) to understand general usage patterns.
No profiling or automated decision-making is conducted.
6. Third-Party Service Providers
We may engage trusted third-party service providers solely for operational purposes, such as:
- Website hosting
- Email communication or newsletters
- Event registration systems
All service providers process data in accordance with GDPR and under data processing agreements (DPAs).
7. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes described above, or as required by law.
- Contact inquiries: max. 2 years
- Membership records: duration of membership + legal obligations
- Newsletter data: until consent is withdrawn
8. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, loss, or disclosure.
Despite our efforts, no online data transmission can be guaranteed to be fully secure.
9. Data Subject Rights (GDPR)
You have the right to:
- Access your personal data
- Request rectification or deletion
- Restrict or object to processing
- Withdraw consent at any time
- Data portability (where applicable)
- Lodge a complaint with a supervisory authority
Requests can be sent to: [contact email]
10. International Data Transfers
We do not intentionally transfer personal data outside the European Economic Area (EEA). If such transfer becomes necessary, appropriate safeguards will be applied.
11. Children’s Data
The Website is not intended for children under the age of 13. We do not knowingly collect personal data from minors.
12. Changes to This Policy
We reserve the right to update this Privacy Policy. Changes will be published on this page with an updated revision date.
13. Contact
For any privacy-related questions or requests, please contact us: