1. Who is responsible
pace of democracy is a volunteer initiative in Copenhagen: a space to strengthen our democratic values. Until a registered association (forening) exists, the two organisers, Sebastian Glaab and Lovis Engel, are jointly responsible for your personal data as data controllers under the EU General Data Protection Regulation (GDPR).
Contact: privacy@paceofdemocracy.com
2. What we collect
- Run sign-up: first name, last name, email address, the run you signed up for, the time of sign-up, your consent and the wording you agreed to, and whether the reminder has been sent.
- Reminder for the next run: first name, last name, email address, the time of sign-up, your consent and the wording you agreed to, and an unsubscribe link that belongs only to you.
- Technical: what any web server records (IP address, browser, time) for the short time needed to serve the page and keep the site safe. See the Cookie Policy for cookies.
- Visit count: when a page of this site is opened, we count it: which page and when. Nothing about you or your device is stored, and no cookie is set.
We do not ask for your age, address, phone number or anything else, and we do not track you across other sites.
3. Why, and on what basis
- Run sign-ups (consent, Art. 6(1)(a)): to know how many people to expect, to send you one confirmation email when you sign up, one reminder the day before the run, and a note if the run changes or is cancelled.
- Reminder for the next run (consent, Art. 6(1)(a)): to send you a short email when there is a new run. Nothing else, one email per run.
- Keeping the site running (legitimate interest, Art. 6(1)(f)): server logs and spam protection on the forms.
You can withdraw consent at any time; see section 7. Withdrawing does not affect what was done before.
4. The emails we send
- Sign-up confirmation: right after you sign up for a run, with the date, place and pace.
- Reminder: one email the day before the run.
- Changes: only if the run moves, changes time or is cancelled.
- Reminder for the next run: only if you asked for it separately. Every one has a one-click unsubscribe link in the footer.
We never use run sign-ups for the next-run reminder, or the other way round. We do not send marketing for anyone else.
5. Who handles the data for us
We do not sell or rent your data. These companies process it on our behalf, under data processing agreements, to run the site:
- Neon (database): stores the sign-up lists, in the EU.
- Vercel (hosting): serves the website.
- Resend (email): delivers the emails listed in section 4.
- Google Workspace (our mailboxes): holds the emails you send to us.
We would share data with authorities only if the law requires it. Otherwise nobody else sees the lists, including the other people on the run.
6. How long we keep it
- Run sign-ups: deleted 30 days after the run. We keep an anonymous count of how many came.
- Reminder for the next run: until you unsubscribe or ask us to delete you. When you unsubscribe we stop sending at once and delete the entry within 30 days.
- Consent records: the fact that you consented, and to which wording, for up to 3 years, so we can show we had permission.
- Server logs: a few weeks, at the hosting provider.
7. Your Rights (GDPR Articles 15-22)
You have the right to:
- Access: ask what we hold about you and get a copy.
- Rectification: have a wrong name or email corrected.
- Erasure: be removed from a run or the next-run reminder, and have everything deleted.
- Data portability: get your entries in a machine-readable file.
- Restriction and objection: limit or object to how we use your data.
- Withdraw consent: reply to any email from us, or use the unsubscribe link in a next-run reminder.
Write to privacy@paceofdemocracy.com and we will do it within a few days, at most a month. You can also complain to Datatilsynet, the Danish data protection authority, at datatilsynet.dk.
8. Message Privacy
Messages sent through pace of democracy (both group chats and direct messages) are stored securely and protected by row-level security policies. Only the participants of a conversation can access its messages.
pace of democracy administrators may access message content solely for the purpose of investigating reported violations of our Community Rules (e.g., harassment, spam, safety threats). Admin access is logged and limited to what is necessary for the investigation. We do not perform bulk or routine surveillance of private messages.
9. International Transfers
Your data is stored on EU-hosted servers. If any data is transferred outside the EEA, we ensure adequate protection through Standard Contractual Clauses (SCCs) or adequacy decisions.
10. Data Protection Officer
For data protection inquiries, contact our DPO at: dpo@paceofdemocracy.com
11. Supervisory Authority
You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
dt@datatilsynet.dk
12. Children
pace of democracy is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16.
13. Changes to This Policy
We may update this policy from time to time. Significant changes will be notified via email or in-app notification.