Introduction

Guiding Access to Intelligence Now (“G.A.I.N.”, “we”, “us” or “our”) is committed to protecting the privacy of individuals (“you” or “users”) who use our website and services. This Privacy Policy explains how G.A.I.N., as the Data Controller, collects, uses, and discloses your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable European and national data protection laws. It applies to all personal data processing conducted through G.A.I.N.’s website and related services within the EU/EEA. By using our website, you acknowledge that you have read and understood this Privacy Policy. G.A.I.N. processes personal data lawfully, fairly, and transparently, in accordance with GDPR principlesdataprotection.iegdpr.eu.

Data Controller: G.A.I.N. – Guiding Access to Intelligence Now (a non-profit organization registered in Denmark).
Contact Information:

Email: privacy@gain-ai.tech.

Phone: TBA.

For any questions about this Policy or the handling of your personal data, or to exercise your rights under GDPR (detailed below), please contact us at the above address or email. You also have the right to lodge a complaint with the supervisory data protection authority, which in Denmark is the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark(gdprhub.eu).

Definitions

For purposes of this Privacy Policy, the following terms have the meanings given here (consistent with the GDPR definitions in Article 4):

• Personal Data: Any information relating to an identified or identifiable natural person, who is referred to as the “Data Subject”gdpr.eu. This includes information such as a name, identification number, location data, online identifier, or factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person. In short, if a piece of information can identify you (directly or indirectly), it is personal data.
• Data Subject: The identified or identifiable individual to whom Personal Data relates – in other words, the natural person whose personal data is processed. Under the GDPR, this is the person that enjoys the data protection rights (typically, users of our website or services).
• Processing: Any operation or set of operations performed on personal data, whether or not by automated means gdpr.eu. This broad term covers virtually everything one can do with data – for example, collection, recording, organizing, storing, altering, retrieving, using, disclosing, transmitting or deleting personal data all constitute “processing” under the law.
• Data Controller: The natural or legal person (such as a company or organization) which alone or jointly with others determines the purposes and means of the processing of personal data gdpr.eu. G.A.I.N. is the Data Controller for the personal data you provide via our website, as we decide how and why the data are processed.
• Data Processor: A natural or legal person or other body which processes personal data on behalf of the Controller gdpr.eu. For example, a third-party service provider that G.A.I.N. engages to handle data (such as a cloud hosting service) acts as a Processor under our instructions.
• Profiling: Any form of automated processing of personal data to evaluate certain personal aspects of an individual, particularly to analyze or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements gdpr.eu. In simpler terms, profiling means analyzing personal data to make inferences about someone (e.g. analyzing a user’s interactions with our generative AI content to predict what topics might interest them).
• GDPR: The General Data Protection Regulation (EU) 2016/679, the comprehensive European data protection law that regulates how we may process personal data of individuals in the EU/EEA and provides rights to data subjects. All article references (e.g., “Art. 6(1)(a) GDPR”) in this Policy refer to provisions of the GDPR gdpr.eu.

Personal Data We Collect

We only collect personal data that is relevant and necessary for the purposes described in this Policy (data minimization principle under GDPR). The categories of personal data we may collect and process include:

• Data You Provide Directly: When you interact with our website or programs, you may provide personal data to us. For example, when subscribing to our newsletter, signing up for workshops or events, creating an account, or contacting us via forms or email, you might provide identifiers such as your name, email address, age or affiliation, and any other information you choose to share. If you are a young user under the age of 16, we may also collect contact information of a parent/guardian (for consent verification, as required by Art. 8 GDPR on child’s consent)gdpr.eu. We do not intentionally collect personal data from children under 13 without parental consent, and will take steps to delete such data if we learn it was collected inadvertently.
• Automatically Collected Data: Our website may collect certain technical data automatically when you visit, such as your IP address, device and browser type, operating system, referring website, and browsing actions on our site (pages viewed, date/time of access, etc.). We use cookies or similar technologies to collect some of this usage data. This information may be considered personal data (e.g., IP addresses or unique identifiers) and, where required, we will obtain your consent for the use of cookies or tracking technologies in accordance with applicable law (e.g., the ePrivacy Directive and GDPR).
• Generated Data: If you participate in interactive features, such as engaging with generative AI tools or providing content on forums (if available), we may process the content you provide or that is generated about you. For instance, if our AI platform generates a profile or recommendations for you based on your inputs (which is a form of profiling), that generated profile data may be stored and associated with you. We treat such data with the same care as data you directly provide.
• Sensitive Data: G.A.I.N. does not aim to collect any special categories of personal data (such as data about health, race, religion, political opinions) through the website, and we ask that you do not provide these unless absolutely necessary for a specific purpose (and if so, we will process them only with your explicit consent or as strictly permitted by law per Art. 9 GDPR). We also do not collect information about criminal convictions or offenses (Art. 10 GDPR) through the website. Any sensitive personal data inadvertently received will be safeguarded and processed according to the strict requirements of GDPR or deleted if not needed.

Purposes and Legal Bases for Processing

G.A.I.N. will only process your personal data for explicit and legitimate purposes, and pursuant to a lawful basis as required by GDPR (Art. 5(1)(b); Art. 6) gdpr.eu. We ensure that at least one of the legal justifications under Article 6(1) GDPR applies for each processing activity gdpr.eu. The purposes for which we process data, and the corresponding legal bases, include:

• Providing and Managing Our Services: We use your personal data to operate the G.A.I.N. website and deliver services or information you request – for example, to set up and administer user accounts, to register you for events or training sessions, to respond to inquiries you send us, or to provide generative AI tools and educational content as part of our mission. This processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract (GDPR Art. 6(1)(b)) gdpr.eu – for instance, our Terms of Use (see below) or specific program enrollment terms constitute such a contract. Where our interaction with you is not strictly contractual, we may rely on G.A.I.N.’s legitimate interests (Art. 6(1)(f)) gdpr.eu in providing services to the public and ensuring our website functions effectively, provided those interests are not overridden by your data protection rights and freedoms (especially in the case of minors’ data, where we take extra care gdpr.eu).
• Communications and Newsletters: If you subscribe to updates or newsletters, or if you are a participant in our programs, we will use your contact details to send you informational content about G.A.I.N.’s initiatives, events, and resources. We will do so with your consent (Art. 6(1)(a)), which you may withdraw at any time (see Your Rights below). In some cases, if you are an existing participant or member, we may rely on our legitimate interest (Art. 6(1)(f)) in keeping you informed of similar activities or offerings, but will always provide a clear opt-out (unsubscribe) mechanism in each communication, as required by law.
• Personalization and Profiling: To fulfill our mission of empowering youth through generative AI, we may analyze user interactions and preferences to personalize the content or recommendations you see on our website. For example, we might use automated algorithms to suggest content or AI features that align with your demonstrated interests or to adapt learning materials to your skill level. Such profiling is done to improve your experience and the effectiveness of our educational tools. We typically rely on legitimate interests (Art. 6(1)(f)) for this analytic and personalization processing – our interest being the improvement of our platform and engagement of users – and we ensure that any impact on your privacy is minimized (for instance, by using pseudonymized data where possible, and never using profiling to make decisions that produce legal or similarly significant effects without additional safeguards as described in Profiling and Automated Decision-Making below). In contexts where stricter consent is required (e.g., if local law treats certain personalization as electronic marketing or if we were to profile in a way that users must actively agree to), we will obtain your consent (Art. 6(1)(a)) instead. You have the right to object to profiling for personalization at any time (Art. 21(1) GDPR) as detailed under Your Rights.
• Analytics and Research: We may use aggregated or pseudonymized personal data (e.g. website usage statistics, survey responses) to understand how our site and programs are used, to research how generative AI tools impact learning, and to improve our offerings. Our legal basis for this is G.A.I.N.’s legitimate interests (Art. 6(1)(f)) in analyzing and enhancing our non-profit services. We ensure that this kind of analysis does not result in decisions affecting individuals and, wherever feasible, we use data that is not directly identifiable.
• Safety and Misuse Prevention: We process personal data as necessary to maintain the security of our website, protect our rights and the rights of others, and prevent abuse. This includes monitoring use of the site to detect and mitigate fraud, network attacks, or other malicious activities, and may involve processing login information, IP addresses, and user activity logs. Such processing is based on legitimate interests (Art. 6(1)(f)), namely our interest in keeping our platform and community safe and secure. In some cases, we may also be under a legal obligation (Art. 6(1)(c)) to retain or disclose certain data for security or law enforcement purposes – for example, laws that require reporting of illegal content involving minors, or to comply with a court order.
• Legal Compliance: Where G.A.I.N. is subject to legal obligations that require processing of personal data, we will process data as needed to comply (Art. 6(1)(c)). Examples include maintaining records for tax and accounting purposes, complying with audit or transparency requirements for NGOs, or responding to government authorities’ lawful requests. We may also process personal data to establish, exercise, or defend legal claims, which is permitted under legitimate interests or, when relevant, in connection with legal obligations or proceedings.
• Other Purposes With Consent: If we intend to process your personal data for a purpose that is not outlined in this Policy, we will only do so with your explicit consent (Art. 6(1)(a)), unless another lawful basis applies. For instance, if we ever plan to publish personal testimonials or success stories including identifiable information, we would ask for your consent. You have the right to refuse or withdraw such consent without detriment (Art. 7(3) GDPR).

We will not use your personal data for any purpose that is incompatible with the original purposes for which it was collected, unless we obtain your consent or have a legal obligation or overriding legitimate interest to do so, in accordance with GDPR Article 6(4) and the principle of purpose limitation. We always consider whether new processing is within your expectations and rights.

Profiling and Automated Decision-Making

Profiling: As noted, G.A.I.N. may profile users in a limited manner – for example, analyzing your site activity to categorize your interests or skill level, in order to suggest appropriate AI learning content. This type of profiling is automated processing of personal data to evaluate personal aspects (interests, preferences, etc.) as defined in GDPR Art. 4(4)gdpr.eu. All profiling we conduct is intended to benefit users (such as making our services more relevant) and does not produce legal effects or similarly significant effects on you. In other words, we do not engage in solely automated decision-making that has a major impact on individuals, except where permitted by law and with appropriate safeguards (see below). For example, we do not use algorithms to approve or reject any application, to determine eligibility for a service, or to assess traits like creditworthiness or employment suitability – our profiling is generally low-risk and for personalization/analytics only.

Automated Decision-Making: Should G.A.I.N. in the future use fully automated decision-making processes that do significantly affect users (for instance, an AI system making determinations about a user’s access to a program without human involvement), we will ensure such processing complies with Article 22 of the GDPR. Under Article 22, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you gdpr-info.eu. Any exception to this (i.e. performing an automated decision with significant effect) would only be done if one of the conditions of GDPR Art. 22(2) applies, namely: (a) the decision is necessary for entering into or performing a contract with you, (b) the decision is authorized by law, or (c) you have given your explicit consent gdpr-info.eu. In practice, G.A.I.N. does not envisage making any impactful decisions about individuals without human review. If we ever rely on an allowed exception (e.g., an automated system necessary for a service you request), we will implement suitable measures to safeguard your rights and freedoms, including the right to obtain human intervention, to express your point of view, and to contest the decision (as required by Art. 22(3)) gdpr-info.eu. We will also inform you in advance and in a transparent manner about the automated decision, its logic, and the significance and envisaged consequences of the processing for you (per Art. 13(2)(f) GDPR).

Your Choices in Profiling: You have the right to object to profiling at any time when it is based on our legitimate interests (Art. 21 GDPR), and to opt-out of any personalized content to the extent feasible. If you do not wish for us to tailor content or analyze your use of the site, you may contact us to adjust your preferences or simply refrain from optional features (such as personalized recommendations). We will accommodate such requests unless the profiling is necessary for the service (in which case we would inform you, or provide an alternative if possible). Note that general analytics of our website (especially on an aggregate basis) is essential to our legitimate interest in running a responsible service, but this does not typically use identifiable data. For any questions or concerns about profiling or automated decisions, you can always reach out to us (see Contact Information above) and we will explain the details of our processing and honor your rights under GDPR.

Data Sharing and Disclosure to Third Parties

We value your privacy and will never sell your personal data. We only share your data with third parties under the following circumstances and with appropriate safeguards:

• Service Providers (Processors): G.A.I.N. uses trusted third-party service providers to perform certain data processing on our behalf, such as web hosting companies, cloud storage providers, analytics services, email distribution services, or IT support. These third parties act as Data Processors under the GDPR, processing personal data only under our instructions and for the purposes we specify. We ensure that all our processors are bound by contractual obligations to protect your data to the GDPR standard, including commitments to confidentiality, security, and not using the data for any purposes other than providing services to us gdpr-info.eu. (For example, if we use a cloud platform to store our user database, that provider must agree to process the data solely for our needs and to implement appropriate security measures, as required by Art. 28 GDPR gdpr-info.eu). We conduct due diligence on our vendors and only engage those who provide sufficient guarantees of their ability to safeguard personal data in compliance with GDPR.
• Partner Organizations and Advisors: In line with our mission, we may collaborate with other non-profits, educational institutions, or sponsors on specific initiatives (for instance, a joint AI workshop or a research study on generative AI in education). If it is necessary to share personal data (such as participant lists) with such partners, we will do so only for the agreed purpose and based on an appropriate legal basis. Typically, we would inform you and obtain consent if required, especially if the partner will use the data for their own independent purposes. If the partner acts on our behalf (under our direction), they may be considered a Processor (and bound by the same requirements mentioned above). If the partner is a co-controller (determining purposes jointly with us), we will enter into a GDPR-compliant arrangement (Art. 26) to allocate responsibilities for protecting your rights. In all cases, third-party recipients are required to handle your data lawfully and securely.
• Legal Requirements and Vital Interests: We may disclose personal data to third parties if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation or request (for example, to respond to a subpoena, court order, or a lawful request by public authorities, including to meet national security or law enforcement requirements, pursuant to Art. 6(1)(c)); (b) protect the vital interests of the data subject or another person (Art. 6(1)(d)), such as in a medical emergency; or (c) enforce our terms of use or protect our rights, privacy, safety, or property, or those of other persons (which may involve sharing information with law enforcement or cybersecurity experts in case of a threat or misuse incident).
• Academic or Statistical Research: If we share data for research or statistical analysis (for example, providing non-profit research partners with data on program outcomes), we will wherever possible use anonymized or aggregated data that does not identify individuals. If personal data is involved, we will ensure it is processed under a suitable legal basis (such as consent or explicit consent for any special category data) and under confidentiality agreements. Often, such data sharing will fall under the GDPR’s allowances for scientific or historical research in the public interest with appropriate safeguards (Art. 89). We will never publish or share identifiable personal data publicly without your consent.
• Third-Party Content You Direct: The website may allow you to interface with third-party services at your request – for example, if you choose to share something via a social media plugin or if you ask us to connect with a third-party platform. In such cases, any data transmitted to the third party is under your control (or the third party’s privacy policy) and not covered by this Policy once you leave our environment. We recommend you review the privacy policies of any third-party services you access. G.A.I.N. is not responsible for how those third parties handle your data after you provide it to them (see Terms of Use regarding third-party links).

Whenever we disclose personal data to a third party, we will record the disclosure in our records of processing and ensure that the transfer is lawful under Chapter V of GDPR if the third party is outside the EU (see International Data Transfers below). Apart from the above, G.A.I.N. will treat your personal data as private and will not disclose it to others without your knowledge.

International Data Transfers

G.A.I.N. primarily processes and stores personal data within the European Union/European Economic Area (EU/EEA). However, some of our third-party service providers or partners may be located outside the EEA or may store data on servers outside the EEA. If we need to transfer personal data to a country that is not recognized by the European Commission as providing an adequate level of data protection (under GDPR Article 45), we will ensure that appropriate safeguards are in place to protect your information as required by GDPR Chapter V (Articles 44–49) gdpr.eu.

The measures we may use for international data transfers include:

• Adequacy Decisions: If the data is sent to a country that the EU Commission has determined offers adequate data protection (GDPR Art. 45), we rely on that decision (for example, transfers to organizations in countries like Norway, Switzerland, or others with adequacy, as applicable).
• Standard Contractual Clauses: For transfers to non-EEA countries without an adequacy finding (such as the United States, in the absence of a finalized new framework), we will put in place EU Commission-approved Standard Contractual Clauses (SCCs) with the recipient, along with any supplementary technical and organizational measures needed. These clauses contractually oblige the recipient to protect your data according to EU privacy standards.
• Other Safeguards: In certain cases, we might rely on Binding Corporate Rules (if transferring to an affiliate under such rules), approved Codes of Conduct or Certification (per Art. 46 GDPR), or one of the specific exceptions in Article 49 (such as your explicit consent for a particular transfer, or transfer necessary for the performance of a contract at your request). We will only rely on these exceptions sparingly and when conditions apply.

You have the right to request more information about international data transfers pertaining to your personal data and the safeguards in place. To do so, please contact us via the details provided. We will not transfer your personal data to any international organization or country without ensuring it is protected in line with EU standards.

Data Retention

G.A.I.N. will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with applicable legal requirements or legitimate business needs, in accordance with the GDPR’s storage limitation principledataprotection.ie. We have defined retention periods or criteria for different categories of data:

• User Account Data: If you create an account on our platform, we will retain your account information while your account is active and not deleted. If you choose to deactivate your account or if it remains inactive for an extended period, we may remove or anonymize your personal data after a reasonable time (e.g., accounts inactive for 2 years might be purged as part of routine clean-up). However, we may retain minimal information even after account deletion to the extent needed to demonstrate compliance or to protect our legal rights (for example, retaining a record of your request to delete).
• Communications and Newsletter Data: If you have subscribed to newsletters or agreed to receive communications, we will keep your contact details on our mailing list until you unsubscribe or withdraw consent. Upon opt-out, we will promptly remove you from the mailing list (and in any event within the timeframe required by law) but may retain a suppression list (email address only) to ensure we honor your no-contact request going forward.
• Event or Program Participation Data: If you sign up for an event, workshop, or other program, we will retain the data related to that activity for the duration of the program and for a period thereafter as necessary for our reporting or analysis. For example, we might keep attendance records and outcomes for a year or two to evaluate program impact. If such programs are recurring or if you continue to engage with us, we may retain data longer to track engagement history (subject to periodic review).
• Analytics Data: Web server logs, analytics records, and similar usage data are typically retained for short periods (e.g., log data might be retained for 90 days for security analysis, and aggregated analytics data may be kept longer but without personal identifiers). We strive to anonymize or aggregate analytics data wherever possible once it’s no longer needed in identifiable form.
• Legal and Security Data: Any data required to be retained by law (e.g., records of donations for accounting, or records needed for child safety regulations) will be kept for the duration mandated (for instance, financial records might be kept for 5-7 years under accounting laws). Additionally, if we have had to restrict or ban an individual for misuse of our site (see Terms of Use), we may retain identifying information to enforce that ban and protect our service. If any personal data is relevant to a legal dispute or investigation, we will retain it for as long as needed to resolve the issue (including any statute of limitations period for potential claims).

After the applicable retention period has elapsed, we will either delete your personal data or irreversibly anonymize it so that you can no longer be identified. We periodically review the data we hold, and erase or anonymize data that is no longer required. In all cases, when determining retention duration, we consider the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes of processing, whether those purposes can be achieved through other means, and the applicable legal requirements.

Data Security

We take the security of your personal data very seriously. In accordance with GDPR Article 32, G.A.I.N. has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the riskgdpr.eu. These measures are designed to prevent unauthorized access, disclosure, alteration, or destruction of personal data, and include, for example:

• Technical Safeguards: We employ industry-standard security technologies such as encryption (e.g., using TLS/SSL to protect data in transit, and encrypting sensitive data at rest where applicable), firewalls, secure server infrastructures, and access control mechanisms. Personal data is stored on secure servers, and we use up-to-date software and protocols to protect data against common vulnerabilities. Regular backups are performed to prevent data loss, and backups are stored securely. When using generative AI or automated tools, we ensure that any personal data processed by those tools is protected and, where possible, we use local or EU-based processing to maintain security and compliance.
• Organizational Measures: We restrict access to personal data to authorized personnel who have a legitimate need to know in order to perform their job duties (the principle of least privilege). All G.A.I.N. staff members, volunteers, or contractors who handle personal data are subject to confidentiality obligations and receive training on data protection. We have internal policies and procedures for handling data (including data breach response plans and data protection impact assessments for new projects when needed).
• Monitoring and Testing: We monitor our systems for possible vulnerabilities and attacks, and we perform regular security assessments or audits (directly or via third-party experts). Security patches and updates are applied in a timely manner to our software and infrastructure. If we use third-party processors, we contractually require them to also implement robust security measures and we may audit or obtain assurance of their practices.
• Pseudonymization: Where feasible, we pseudonymize personal data, meaning we separate identifying information from the data we use for analysis or development (for example, using user IDs instead of names in analytics), so that individuals are not readily identifiable without additional information kept separately. In research contexts, data may be anonymized entirely.
• Incident Response: Despite all measures, no system can be guaranteed 100% secure. G.A.I.N. has a data breach response protocol in place. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and at latest within 72 hours of becoming aware (per GDPR Art. 33), and we will inform affected individuals promptly as required (Art. 34) with information on the nature of the breach and any recommended precautions for you to take.

Please understand that while we strive to protect your personal data, we cannot guarantee absolute security of information transmitted over the internet. You share and transmit data to us at your own risk. It is important that you also play a role in keeping your data secure – for example, by choosing a strong password for any account and keeping it confidential, and by exercising caution when sharing information in public areas of the website (if any). If you suspect any unauthorized access to or misuse of your personal data, or any security vulnerabilities in our website, please contact us immediately so we can investigate and address the issue.

Your Rights as a Data Subject

Under the GDPR, you have various rights regarding your personal data. G.A.I.N. respects and upholds these data subject rights, and we have processes to enable you to exercise them. Your principal rights (available in Articles 15–22 GDPR) are as follows:

• Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not we are processing personal data concerning you, and, if so, to access that data and be provided with a copygdpr.eu. This includes information on the purposes of processing, the categories of data, the recipients (or categories of recipients) to whom the data have been or will be disclosed, the envisaged retention period, and the existence of your other rights. In summary, you can ask us, “What information do you have about me, and how is it being used?” and we will supply you with an overview and a copy of your data (subject to the rights and freedoms of others).
• Right to Rectification (Art. 16 GDPR): You have the right to request that we correct or update any inaccurate personal data we hold about you, and to have incomplete data completedgdpr-text.com. If you become aware that we have wrong or out-of-date information (for example, a misspelled name or an old email address), please let us know and we will rectify it without undue delay.
• Right to Erasure (“Right to be Forgotten”) (Art. 17 GDPR): You may in certain circumstances have your personal data deletedgdpr.eu. This right is not absolute, but you can request erasure, for example, if the personal data is no longer necessary for the purposes for which it was collected, if you withdraw consent and no other legal basis for processing applies, if you object to processing and we have no overriding legitimate grounds, or if you believe we are processing your data unlawfully. If you qualify for erasure, we will erase your data and also notify any processors or third parties to whom the data was disclosed (unless this is impossible or involves disproportionate effort). Note that there are exceptions – we may refuse erasure to the extent processing remains necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims, among other narrow exceptions. We will inform you if any such exception applies in your case.
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request that we limit the processing of your personal data in certain situations. This means we would store your data but temporarily refrain from using it beyond mere storage, in cases such as: (a) when you contest the accuracy of the data (we will restrict use while verifying accuracy); (b) when the processing is unlawful but you prefer restriction over erasure; (c) when we no longer need the data but you need us to keep it for the establishment, exercise, or defense of legal claims; or (d) when you have objected to processing (pending verification of overriding grounds). If processing is restricted, we will only process your data with your consent or for specific legal reasons. We will also inform you before lifting any restriction.
• Right to Data Portability (Art. 20 GDPR): For data that you have provided to us and which we process by automated means on the legal basis of your consent or for performance of a contract, you have the right to receive that data from us in a structured, commonly used, machine-readable format, and the right to transmit that data to another controller (or have us transmit it, where technically feasible)i-scoop.eu. In plain terms, this right allows you to take your personal data that you gave us and reuse it elsewhere. For example, if you provided a profile of interests to our service and it’s processed based on consent or contract, you can ask for an export of that profile data in a standard format (such as CSV or JSON) to transfer to a different service. Note that this right applies to data you provided (including data resulting from your actions, like activity logs associated with you), but it does not cover data we generated through analysis (if it’s not provided by you) nor data processed on legal bases other than consent/contract.
• Right to Object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data that is based on Art. 6(1)(e) (task in public interest) or Art. 6(1)(f) (legitimate interests), including any profiling based on those provisions. If you object, we must stop such processing unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless we need to continue processing for the establishment, exercise, or defense of legal claims. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time (including profiling related to direct marketing), and if you exercise this, we will cease using your data for marketing. In practice, we will always honor an objection to marketing or newsletter emails (you can click “unsubscribe” in any email or contact us to opt out). If you object to other processing based on legitimate interests (for example, if you object to certain data analytics we perform), we will evaluate your request and, unless we have a compelling reason permitted by law to continue, we will accommodate your objection and stop the processing.
• Right not to be Subject to Automated Decisions (Art. 22 GDPR): As discussed, you have the right not to be subjected to a decision based solely on automated processing, including profiling, which significantly affects yougdpr-info.eu, unless an exception under Art. 22(2) applies (and if so, you have the right to safeguards such as human intervention)gdpr-info.eu. G.A.I.N. does not presently carry out such automated decision-making without human involvement in a manner that produces legal or similarly significant effects. Thus, this right is something we proactively respect. Should we ever introduce such automated decisions, we will inform you and ensure you can exercise this right fully (e.g., giving you an easy way to request human review of any automated decision).
• Right to Withdraw Consent (Art. 7(3) GDPR): If we are processing any of your personal data based on your consent, you have the right to withdraw that consent at any time, and we will stop the processing in question. Withdrawal of consent will not affect the lawfulness of processing we conducted prior to your withdrawal. For example, if you consented to receive a newsletter, you can revoke that consent and we will cease sending you the newsletter. To withdraw consent, you can use the specific opt-out method provided (such as an unsubscribe link for emails) or contact us directly. There is no penalty or detriment for withdrawing consent – we respect your choice.

To exercise any of your rights, please contact us at the addresses provided in the Introduction of this Policy. We may need to verify your identity before acting on a rights request (to ensure we don’t disclose or modify data to the wrong person). We will respond to your request without undue delay and in any event within one month of receipt (this can be extended by two further months for complex requests, but we will inform you if extension is needed). There is generally no fee for exercising your rights; however, if requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act (as allowed by Art. 12(5) GDPR). We will explain any such decision if it occurs.

Complaints and Supervisory Authority

If you believe that G.A.I.N. has not complied with your data protection rights or applicable privacy laws, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You may do so in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. For example, if you reside in Denmark or the issue relates to our operations in Denmark, you can contact the Danish Data Protection Agency (Datatilsynet). The contact details for Datatilsynet are: Address: Carl Jacobsens Vej 35, 2500 Valby, Denmark; Phone: +45 33 19 32 00; Email: dt@datatilsynet.dk; Website: www.datatilsynet.dk:contentReference[oaicite:30]{index=30}.

If you are in another EU/EEA country, you can find the relevant supervisory authority’s contact information on the European Data Protection Board’s website or via official EU resources. We would, however, appreciate the chance to address your concerns before you approach a regulator – so please consider reaching out to us first, and we will do our best to resolve any issue in a fair and transparent manner.

Updates to this Privacy Policy

G.A.I.N. may update or revise this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make significant changes, we will notify users by posting a prominent notice on our website or by other appropriate means. The “last updated” date at the bottom of this Policy indicates when the latest changes were made. We encourage you to review this Policy periodically for any updates. Continued use of the website after any modifications to the Policy will constitute your acknowledgment of the changes. If we change the purposes of processing or any aspect that requires your consent, we will obtain new consent when necessary.

Last updated: 05/05/2025

Terms of Website Use

Acceptance of Terms

These Terms of Website Use (“Terms”) govern your access to and use of the G.A.I.N. website and any related services or content provided by Guiding Access to Intelligence Now (“G.A.I.N.”, “we”, “us”, or “our”). By accessing, browsing, or using our website (including any interactive features and AI tools), you acknowledge that you have read, understood, and agree to be bound by these Terms, as well as our Privacy Policy (set forth above). If you do not agree with these Terms or the Privacy Policy, you should refrain from using the website.

These Terms constitute a legally binding agreement between you and G.A.I.N. If you are using the website on behalf of an organization or other entity, you represent that you are authorized to accept these Terms on that entity’s behalf. Users under the age of 18 should review these Terms with a parent or guardian; if you are under the age of consent in your country, your parent or guardian may need to consent on your behalf to your use of the site.

Permitted Use of the Website

Lawful and Appropriate Use: You agree to use the G.A.I.N. website only for lawful purposes and in a manner that does not infringe the rights of, or restrict or inhibit the use and enjoyment of the site by, any third party. You shall not use the site to engage in any illegal, harmful, or abusive activity. This includes (but is not limited to) refraining from: (a) posting or transmitting any content that is unlawful, defamatory, harassing, threatening, hateful, or otherwise objectionable; (b) attempting to hack, destabilize, or gain unauthorized access to any portions of the site or its related systems; (c) misusing the generative AI tools in ways that violate any applicable laws or regulations (for example, to generate disinformation, hate speech, or content that exploits minors); or (d) engaging in any form of fraud or impersonation (such as impersonating G.A.I.N. personnel or misrepresenting your affiliation with G.A.I.N.).

User Accounts: Certain features of the website (such as participating in forums or saving AI tool progress) may require creating a user account. If you create an account, you agree to provide truthful, current, and complete information about yourself as prompted, and to keep that information up-to-date. You are responsible for maintaining the confidentiality of your account credentials (username and password) and for all activities that occur under your account. You must notify us immediately at support@gain-ai.tech of any unauthorized use of your account or any other breach of security. G.A.I.N. shall not be liable for any loss or damage arising from your failure to secure your account credentials or to notify us of unauthorized use.

No Interference: You agree not to use any device, software, script, or routine (including any spider, scraper, or robot) to interfere or attempt to interfere with the proper working of the website, or to bypass any measures we may use to prevent or restrict access to certain areas of the site. You also agree not to send to or otherwise impact the site with harmful code, such as viruses, trojans, worms, logic bombs, or other material that is malicious or technologically harmful.

Termination of Use: G.A.I.N. reserves the right, at its sole discretion, to suspend or terminate your access to the website (or certain features of it) at any time and for any reason, including violation of these Terms or any behavior that is harmful to the interests of G.A.I.N. or other users. We may also remove or disable access to any user content that, in our judgment, violates these Terms or is otherwise objectionable. If you are notified that your access is terminated, you must cease all use of the site. Sections of these Terms that by their nature should survive termination (such as disclaimers of liability, limitations, and governing law) will remain in effect.

Intellectual Property Rights

Ownership of Website Content: Unless otherwise indicated, G.A.I.N. is the owner or licensee of all intellectual property rights in the website and its content. This includes, but is not limited to, the text, images, graphics, logos, trademarks, articles, educational materials, software, and the design, selection, and arrangement thereof. All such content is protected by copyright, trademark, and other intellectual property laws. G.A.I.N.™ and the G.A.I.N. logo are trademarks/service marks of our organization. All rights are reserved.

License for Personal Use: G.A.I.N. grants you a limited, revocable, non-transferable, non-exclusive license to access and use the website and its content for your personal, non-commercial use and for the intended purposes of the site (for example, to learn from our materials or use our AI tools for educational purposes). You may not exploit the content commercially or modify, reproduce, distribute, or create derivative works from the content without our prior written consent, except as permitted by law (such as fair use or other statutory exceptions). For instance, you may download or print pages for your personal reference or educational use, but you may not republish those materials on your own website or print them in a publication without permission.

User-Generated Content: If the website allows you to submit or upload content (such as comments, posts, or input data for AI processing), you retain any intellectual property rights you hold in that content. By submitting content, however, you grant G.A.I.N. a worldwide, royalty-free, sublicensable license to use, reproduce, adapt, publish, translate, and display that content (in whole or part) for the purposes of operating the site and our services. For example, if you post a question or success story on a forum, we may display it to other users; if you submit feedback, we may use it to improve our programs. We will respect the privacy and data protection of any personal data within user content as outlined in the Privacy Policy. You represent that you have all necessary rights to submit any content and that such content does not infringe the rights of any third party or violate any laws. We reserve the right to remove user content that violates these Terms or our policies.

Third-Party Intellectual Property: Some content on our website may belong to or be licensed from third parties (for example, third-party logos, publications, or open source software used in our AI tools). All such third-party content is the property of its respective owners and may be subject to additional terms from those owners. Nothing in these Terms transfers any ownership of third-party content to you. If you believe that any content on our site infringes your intellectual property rights, please notify us with detailed information so that we may investigate and respond appropriately (see our contact info at the end of these Terms).

AI-Generated Content Disclaimer

Nature of Generative AI Outputs: The G.A.I.N. website may include interactive features or content powered by generative artificial intelligence (AI) – for example, AI-generated text, images, suggestions, or analysis provided to users as part of our educational tools. While these AI outputs are provided in furtherance of our mission to guide and empower users, it is important to understand that AI-generated content is produced by automated algorithms and may not always be accurate, complete, or reliable. G.A.I.N. endeavors to configure and train its AI systems in an ethical and responsible manner; however, generative AI technology can sometimes produce incorrect information (“hallucinations”), biased or out-of-context results, or content that may not be suitable for every situation.

Informational Purposes Only: All content generated by AI on our site is provided for informational and educational purposes only. Such content is not guaranteed to be correct, and it should not be relied upon as professional advice (legal, medical, financial, or otherwise). For example, if our AI tool provides you with an answer to a question or a tutorial on a subject, you should independently verify critical information before taking action. You remain responsible for how you interpret and use AI-generated outputs. If you have a specific problem requiring expert advice, you should consult a qualified professional rather than relying solely on AI content.

No Warranty for AI Content: G.A.I.N. disclaims any warranties or representations regarding AI-generated content. We do not warrant that the AI content will be error-free, accurate, non-infringing, or fit for any particular purpose. By using the AI features, you acknowledge that automated outputs may occasionally be inappropriate or factually flawed, and you agree that G.A.I.N. is not liable for any errors or omissions in the AI content. We welcome feedback from users to improve our AI tools, but we make no commitment that any specific issue will be resolved to your satisfaction.

User Responsibility: You agree to use the AI features responsibly and in compliance with our Permitted Use policy. Do not use the AI to generate unlawful or harmful content. If you encounter content from the AI that is offensive, harmful, or seems obviously incorrect, please stop viewing or using that content and, if possible, inform us so we can make adjustments. Do not rely on AI outputs for decisions that could result in harm without human verification. For instance, if the AI provides guidance on a sensitive issue, treat it as a starting point and not as definitive counsel.

Human Oversight: G.A.I.N. may monitor AI interactions to some extent (in accordance with our Privacy Policy) in order to improve our services and ensure compliance with these Terms. However, we do not guarantee real-time human review of AI outputs. By using the AI tools, you understand that you are interacting with a machine-driven system. We encourage a critical mindset: cross-check AI information with credible sources and use your judgment.

Third-Party Content and Links

External Links: Our website may contain links to third-party websites, resources, or services that are not owned or controlled by G.A.I.N. (for example, links to partner organizations, references, or news articles). These links are provided for convenience and informational purposes only. G.A.I.N. does not have control over the content, privacy policies, or practices of any third-party sites. We do not endorse, sponsor, or accept any responsibility for third-party websites or the information contained on them. If you click on an external link, you understand that you are leaving our site and that we are not liable for any issues arising from your interaction with third-party sites.

Third-Party Content on Our Site: In some cases, our site may display content provided by third parties or embed third-party features (such as a streaming video player or social media widget). Any such content is the responsibility of the third-party creator. While we strive to curate high-quality content, G.A.I.N. is not liable for any third-party content displayed on our site, including its accuracy, reliability, or intellectual property compliance. If you believe that any third-party content on our site is unlawful or infringes your rights, please notify us and we will review it.

Downloads: If we provide downloadable software or documents from third parties (for example, an open-source software tool or a PDF from a partner), any use of those materials may be subject to the third-party’s license terms. Downloading is at your own risk; G.A.I.N. is not responsible for any damage to your computer system or data that results from downloading any material from the site, whether provided by G.A.I.N. or a third party, and whether due to viruses or otherwise.

Third-Party Misuse of Content: G.A.I.N. cannot control how third parties may use information or content once it is made public on our site. If you choose to share or publish content via our website (for instance, posting a comment on a blog or sharing a testimonial), be aware that third parties might copy or redistribute that content without our or your permission. We are not responsible for any third-party misuse or misappropriation of content that you obtained from our site or that you posted on our site. We encourage you to exercise caution when sharing any content (particularly personal information) in public areas of the site.

Disclaimer of Warranties

“As Is” Basis: The G.A.I.N. website and all content, features, and services provided through it are offered on an “as is” and “as available” basis. To the fullest extent permitted by applicable law, G.A.I.N. disclaims all warranties, conditions, and representations of any kind, whether express, implied, or statutory, in relation to the website. This includes, without limitation, any implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, or the reliability of outcomes. We do not guarantee that the site will meet your expectations or requirements, or that it will achieve any particular results.

Functionality and Availability: G.A.I.N. does not warrant that the website will be uninterrupted, timely, secure, or error-free. While we aim to maintain a high level of service, we make no guarantee that the site or any content is free from bugs, defects, harmful components, or technical inaccuracies. Maintenance, updates, or technical issues may periodically make the site unavailable. We reserve the right to modify, suspend, or discontinue any part of the site at any time without notice. You assume all risk for any use of the site and any reliance on the accuracy or functionality of the site.

Content Accuracy: Although we strive to provide current and accurate information, no warranty is given that the information on the site is complete, correct, or up-to-date. This applies to all content including articles, resources, and AI-generated outputs. G.A.I.N. is an NGO aiming to assist and inform, but we do not guarantee that our content (human-written or AI-generated) is free of errors or omissions. Use of any information obtained through the site is at your own discretion and risk. You are responsible for verifying any information before relying on it, especially if acting on such information could result in any loss or damage.

No Professional Advice: Unless expressly stated, nothing on this website constitutes professional advice (such as legal or medical advice). Any guidance or results provided through our generative AI or other content are general in nature. If you need specific advice, you should consult a qualified professional. G.A.I.N. disclaims any liability for actions taken by users based on information or suggestions provided on the site or through our AI features.

Security and Data: While we implement security measures as described in our Privacy Policy, we do not warrant that the site will be completely secure or that personal data will never be compromised. You acknowledge that any data transmitted via the internet may be subject to breaches beyond our reasonable control. G.A.I.N. will not be responsible for unauthorized access to or alteration of your transmissions or data, or any material or data sent or received or not sent or received.

Limitation of Liability

Indirect Damages: To the maximum extent allowed by law, G.A.I.N. (and its directors, officers, employees, volunteers, agents, and affiliates) shall not be liable for any indirect, incidental, consequential, special, punitive, or exemplary damages arising out of or in connection with your use of (or inability to use) the website or any content therein. This includes, but is not limited to, any loss of profits, loss of data, loss of goodwill, business interruption, or other intangible losses, even if we have been advised of the possibility of such damages. For example, we are not liable for damages that result from your reliance on an AI-generated recommendation that turned out to be inaccurate, or from any downtime of the site that prevented you from completing an activity.

Direct Damages: In jurisdictions that do not allow the exclusion of certain warranties or the limitation of liability for incidental or consequential damages, our liability shall be limited to the lesser of the amount of fees you have paid to G.A.I.N. in connection with the service (if any) in the last six months or €100 (one hundred euros). In plain terms, our financial liability to you is extremely limited. We are a non-profit initiative and the website is provided free of charge; accordingly, you agree that you assume full responsibility for any cost, damage, or loss incurred through use of our site.

Third-Party Acts: G.A.I.N. shall not be liable for any acts or omissions of third parties, including third-party service providers or other users of the site. This means we are not responsible if a third-party host suffers a data breach affecting your data, or if another user misuses the site or your content. Additionally, if you follow links to third-party websites or interact with third-party content, any resulting issues are between you and that third party, not G.A.I.N.

No Liability for Content: G.A.I.N. assumes no liability for any content (including user-generated content and AI content) that you or any other user or third party posts, sends, or receives through the site. Any material downloaded or otherwise obtained through your use of the site is accessed at your own discretion and risk. You will be solely responsible for any damage to your device or loss of data that results.

Application of Law: Nothing in these Terms is intended to limit liability beyond what is permitted by applicable law. If certain liabilities cannot be excluded or limited under law (for example, liability for death or personal injury caused by negligence, or liability for gross negligence or willful misconduct), then such liability is not excluded by these Terms. However, in any case, our liability is limited to the fullest extent permitted by law.

Indemnification

To the extent permitted by law, you agree to indemnify, defend and hold harmless G.A.I.N. and its officers, directors, employees, and agents, from and against any and all complaints, charges, claims, damages, losses, costs, liabilities, and expenses (including attorneys’ fees) due to, arising out of, or relating in any way to: (a) your misuse of the website or any content (including generative AI outputs); (b) your breach of these Terms or of any law or regulation; (c) any content you submit or actions you take that infringe or violate the rights of a third party. This means if your actions cause harm to someone else or to G.A.I.N. (for example, you post illegal material or misuse the AI to generate harmful content), and that results in a claim against us, you will cover the costs and damages that we suffer as a result.

G.A.I.N. reserves the right, at your expense, to assume the exclusive defense and control of any matter subject to indemnification by you, and you agree to cooperate with our defense of such claims. You agree not to settle any such matter without the prior written consent of G.A.I.N. We will use reasonable efforts to notify you of any claim, action or proceeding covered by this indemnity upon becoming aware of it.

Governing Law and Jurisdiction

These Terms and any disputes arising from or relating to the website or these Terms shall be governed by and construed in accordance with the laws of Denmark, without regard to its conflict of laws principles. However, we recognize that as an NGO serving a broad community, we will endeavor to comply with applicable laws in the jurisdictions where we operate or where users reside, especially with respect to user rights and consumer protection, to the extent those laws are mandatorily applicable.

If you are accessing the site as a consumer in the EU, you may have certain mandatory rights under your local laws that cannot be waived by contract; nothing in these Terms shall affect those rights. For example, you may have the right to bring an action in your local courts under local consumer protection laws.

Subject to any such mandatory rights, any dispute or claim arising out of or in connection with these Terms (including non-contractual disputes or claims) shall be subject to the exclusive jurisdiction of the courts of Denmark. By agreeing to these Terms, you consent to the personal jurisdiction of these courts. G.A.I.N., however, reserves the right to seek injunctive or equitable relief in any jurisdiction to enforce these Terms or stop any infringement of intellectual property or other rights.

Severability

If any provision of these Terms is found by a court of competent jurisdiction to be invalid, illegal, or unenforceable, that provision shall be enforced to the maximum extent permissible, and the remaining provisions of these Terms will continue in full force and effect. In such an event, the invalid or unenforceable provision will be deemed modified so as to be valid and enforceable to the fullest extent permitted by law, reflecting the intent of the original provision as closely as possible.

No Waiver

No failure or delay by G.A.I.N. in exercising any right, power, or privilege under these Terms shall operate as a waiver thereof. A waiver of any provision of these Terms must be made in writing and signed by an authorized representative of G.A.I.N. to be effective. If we do not enforce a provision in some instance, we do not waive the right to enforce it in the future.

Changes to Terms

G.A.I.N. may revise or update these Terms from time to time. If we make material changes, we will post the updated Terms on this page and update the “last updated” date below. For significant changes, we may also provide additional notice (such as a banner on the site or an email notification to registered users). By continuing to use the website after the Terms have been updated, you agree to the revised Terms. If you do not agree to the new terms, you must stop using the site. It is your responsibility to check this page periodically for changes.

Last updated: 05/05/2025

Contact Information

If you have any questions, concerns, or comments about these Terms of Use or the website, you can contact G.A.I.N. at: [Contact Address], Email: support@gain-ai.tech, or via the contact form on our website. We value your feedback and will do our best to address any issues promptly.

---

By using the G.A.I.N. website, you affirm that you have read and understood both the Privacy Policy and these Terms of Use, and that you agree to abide by all the provisions contained herein. Thank you for supporting G.A.I.N.’s mission to guide access to intelligence – we appreciate your cooperation in maintaining a safe, respectful, and compliant online environment for all users.