Privacy Policy

The World Leadership and Policy Institute ("WLPI," "we," "us," or "our") is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us.

This Privacy Policy explains how WLPI collects, uses, stores, shares, transfers, and protects personal data when individuals:

• visit www.wlpi.org;
• submit an application;
• register for an event, conference, forum, summit, exchange, training, or other program;
• purchase an Official Invitation Letter or another service;
• make a payment;
• participate in a WLPI event;
• subscribe to communications;
• participate in the WLPI Referral/Affiliate Program;
• communicate with WLPI;
• engage with a WLPI partner or affiliated organization in connection with a WLPI activity; or
• otherwise interact with WLPI online or offline.

This Policy applies globally, subject to the mandatory privacy and data-protection laws applicable to the individual, the relevant WLPI legal entity, and the particular processing activity.

Nothing in this Privacy Policy is intended to restrict any privacy right that cannot legally be excluded.

1. WLPI Legal Entities & Data Controllers

World Leadership and Policy Institute (WLPI) is an internationally operated brand and a registered trade name in the State of Wyoming, United States.

WLPI operates through:

United States

Nexus Prime Group LLC

United States

EIN: 33-4659415

European Union

Ufuq Group Kft Hungary Company Registration Number: 13-09-248345

World Leadership and Policy Institute is a trade name and brand and does not constitute a separate legal entity from Nexus Prime Group LLC or Ufuq Group Kft.

Depending on the particular service, event, website activity, contractual relationship, payment arrangement, or jurisdiction, Nexus Prime Group LLC and/or Ufuq Group Kft may act as the controller of personal data.

Where both entities jointly determine the purposes and essential means of a particular processing activity, they may act as joint controllers to the extent provided by applicable data-protection law.

Where European data-protection legislation applies, processing is subject to the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Hungarian data-protection legislation, including Act CXII of 2011 on Informational Self-Determination and Freedom of Information, where applicable.

For privacy-related questions or requests, you may contact:

Email: support@wlpi.org

Phone: +36 (70) 5985858

Correspondence Address

Nyári Pál utca 15 2724 Újlengyel Hungary

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with WLPI activities, including data relating to:

• website visitors;
• applicants;
• delegates and participants;
• Fully Funded applicants;
• Partially Funded applicants;
• Self-Funded participants;
• Premium Access Pass participants;
• Official Invitation Letter applicants;
• online participants;
• speakers;
• trainers;
• panelists;
• moderators;
• guests;
• volunteers;
• contractors;
• partners;
• university and institutional representatives;
• sponsors;
• prospective partners;
• affiliates and referrers;
• newsletter subscribers;
• individuals communicating with WLPI; and
• other persons engaging with WLPI services.

This Policy applies to information collected through WLPI websites, forms, applications, payment processes, event registration systems, emails, messaging platforms, social media, physical events, surveys, partner interactions, and other WLPI-operated channels.

3. Personal Data We May Collect

The information we collect depends on how you interact with WLPI.

a. Identity Information

We may collect:

• full legal name;
• preferred name;
• title;
• gender, where relevant and lawful;
• date of birth;
• age;
• nationality;
• citizenship;
• country of residence;
• photograph;
• signature; and
• identification information.

b. Contact Information

We may collect:

• email address;
• telephone number;
• WhatsApp or messaging contact;
• mailing address;
• residential country;
• emergency contact information; and
• social media or professional profile information where provided.

c. Passport, Visa & Identification Information

Where necessary for event participation, travel administration, invitation-letter services, or visa-support services, we may collect:

• passport number;
• passport copy;
• passport issue date;
• passport expiry date;
• passport-issuing country;
• date and place of birth;
• nationality;
• national identification information where necessary;
• visa status;
• visa application information;
• embassy or consulate information;
• visa appointment information;
• visa decision information; and
• other information necessary to prepare or verify invitation or travel-support documents.

We only seek such information where reasonably necessary for the relevant service.

4. Application, Educational & Professional Information

When you apply to a WLPI program or event, we may collect information including:

• educational background;
• university or educational institution;
• academic qualifications;
• field of study;
• employment history;
• employer;
• organization;
• job title;
• professional sector;
• professional experience;
• CV or résumé;
• biography;
• areas of expertise;
• leadership experience;
• awards and achievements;
• memberships;
• volunteering experience;
• motivation statements;
• essays;
• application answers;
• video submissions;
• interview responses;
• references;
• recommendation information;
• portfolio information; and
• other materials submitted as part of an application.

We may evaluate this information when selecting participants for competitive categories such as Fully Funded or Partially Funded opportunities.

5. Event & Participation Information

When you attend or prepare to attend a WLPI event, we may process information relating to:

• event registration;
• participation category;
• accommodation requirements;
• room allocation;
• transportation arrangements;
• airport transfer information;
• flight details;
• arrival and departure times;
• meal preferences;
• dietary requirements;
• accessibility requirements;
• emergency contact information;
• attendance;
• session participation;
• certificates;
• delegate identification;
• event credentials;
• networking preferences;
• reimbursements;
• travel-support eligibility; and
• event-related communications.

Some information relating to health, accessibility, dietary requirements, religion, or similar matters may constitute special-category personal data under GDPR or sensitive personal information under other privacy laws.

Where special-category data is processed, WLPI will rely on an appropriate legal basis and additional condition required by applicable law, such as explicit consent, vital interests, or another legally permitted ground.

GDPR places additional restrictions on processing categories including:

• health information;
• racial or ethnic origin;
• religious beliefs; and
• political opinions.

Participants should avoid submitting sensitive information that WLPI has not requested or does not reasonably need.

6. Payment & Transaction Information

When you purchase a WLPI service or make a payment, we may collect or receive:

• payer name;
• billing information;
• billing country;
• email address;
• transaction amount;
• transaction currency;
• payment date;
• order number;
• transaction ID;
• invoice details;
• payment status;
• payment provider;
• refund status;
• chargeback status;
• limited card-related information made available by the payment provider, such as card type or last digits;
• fraud-prevention information; and
• other transaction metadata.

Full payment-card credentials are generally processed directly by authorized third-party payment providers rather than stored by WLPI.

Payment providers, banks, card networks, and financial institutions may separately process personal data according to their own legal obligations and privacy policies.

7. Affiliate & Referral Program Information

Where you participate in or interact with the WLPI Referral/Affiliate Program, we may collect and process information including:

• Affiliate name;
• Affiliate account or identification number;
• unique referral link or referral code;
• referred visitor or customer information;
• referral source;
• referral URL;
• click or visit information;
• date and time of referral;
• conversion information;
• transaction ID;
• eligible transaction amount;
• commission amount;
• commission status;
• payout information;
• bank or payment details;
• tax or invoicing information where required;
• refund and chargeback information;
• device or technical information used for fraud prevention; and
• information required to investigate suspected referral abuse or duplicate compensation.

WLPI may use:

• cookies;
• local storage;
• session storage;
• server-side attribution;
• payment metadata;
• referral parameters; or
• similar technologies

to determine whether a transaction qualifies for affiliate commission.

Where applicable law requires consent before placing or accessing a particular tracking technology, WLPI will seek the required consent.

Affiliate information may be retained for:

• accounting;
• fraud prevention;
• contractual administration;
• dispute resolution; and
• legal compliance.

8. Website & Technical Information

When you use a WLPI website or digital service, certain information may be collected automatically.

This may include:

• IP address;
• browser type;
• operating system;
• device type;
• approximate geographic location;
• language;
• referring webpage;
• pages visited;
• links clicked;
• date and time of access;
• session duration;
• website interaction information;
• cookie identifiers;
• advertising identifiers where permitted;
• referral identifiers;
• server logs;
• error information; and
• other technical or usage information.

We use this information for:

• website functionality;
• security;
• analytics;
• fraud prevention;
• troubleshooting;
• optimization; and
• where permitted, advertising and marketing.

9. Photographs, Video, Audio & Event Media

WLPI events may be photographed, filmed, livestreamed, or otherwise recorded.

Accordingly, WLPI may collect:

• photographs;
• video recordings;
• audio recordings;
• interviews;
• testimonials;
• livestream footage;
• speaker presentations;
• participant statements;
• event photographs;
• group photographs;
• event recordings; and
• social-media content relating to WLPI activities.

Subject to applicable law and the relevant lawful basis, this material may be used for:

• documenting WLPI events;
• reports;
• newsletters;
• websites;
• social media;
• press and public relations;
• brochures;
• presentations;
• institutional portfolios;
• educational material;
• event promotion;
• advertising;
• fundraising or partnership presentations; and
• promotion of future WLPI programs.

Depending on the circumstances, WLPI may rely on:

• consent;
• contractual arrangements; or
• legitimate interests

for event media processing.

Where consent is legally required, WLPI will seek appropriate consent.

Participants who do not wish to be intentionally featured in promotional photography or video should notify WLPI before the event or inform the event team where reasonably possible.

WLPI will make reasonable efforts to respect such requests, particularly for individual or close-up promotional material.

Incidental appearance in wide-angle crowd photography or event documentation may not always be practically avoidable, subject to applicable law.

For minors, additional consent from a parent or legal guardian may be obtained where required.

WLPI does not use event photographs for facial recognition or biometric identification unless such processing is separately disclosed and lawfully implemented.

10. Information Obtained From Third Parties

WLPI may receive personal data from third parties where lawful and relevant to our activities.

Sources may include:

• WLPI affiliates;
• referral partners;
• partner organizations;
• universities;
• sponsors;
• co-organizers;
• event partners;
• payment providers;
• banks;
• accommodation providers;
• event platforms;
• publicly available professional sources;
• individuals making group registrations;
• institutions nominating participants;
• organizations providing scholarships;
• speakers or partners making introductions; and
• service providers assisting with fraud or security checks.

Where required by applicable law, we will provide information about the source and use of such data.

11. How We Collect Personal Data

We may collect personal data:

Directly From You

For example, when you:

• complete an application;
• submit a form;
• make a payment;
• contact WLPI;
• attend an event;
• submit documents;
• join a mailing list;
• participate in an interview;
• submit a video;
• complete a survey;
• join the Affiliate Program; or
• communicate with our team.

Automatically

Through:

• cookies;
• logs;
• analytics;
• referral technology;
• browser storage;
• security technologies;
• website forms;
• pixels where permitted; and
• similar digital technologies.

From Third Parties

Including:

• partners;
• payment providers;
• affiliates;
• institutional nominators;
• group organizers;
• event providers; and
• other legitimate sources described in this Policy.

12. Purposes for Which We Process Personal Data

WLPI may process personal data for the following purposes.

Applications & Selection

To:

• receive applications;
• review eligibility;
• evaluate applications;
• shortlist applicants;
• conduct interviews;
• assess Fully Funded and Partially Funded candidates;
• communicate results;
• manage waiting lists; and
• prevent duplicate or fraudulent applications.

Event Administration

To:

• register participants;
• confirm participation;
• issue event credentials;
• arrange accommodation;
• organize airport transfers;
• provide meals;
• manage event access;
• prepare certificates;
• coordinate sessions;
• maintain attendance records;
• provide participant support; and
• administer post-event activities.

Visa & Invitation-Letter Services

To:

• prepare invitation letters;
• verify identity information;
• provide visa-support documentation;
• respond to legitimate embassy or consular verification requests;
• prepare supporting documentation;
• communicate with applicants regarding visa support; and
• administer related services.

Payments

To:

• process transactions;
• issue invoices and receipts;
• verify payment;
• manage refunds;
• handle payment disputes;
• prevent fraud;
• reconcile accounts; and
• comply with accounting, tax, financial, and legal obligations.

Affiliate & Referral Administration

To:

• attribute referrals;
• calculate commissions;
• validate transactions;
• process affiliate payouts;
• identify refunds and chargebacks;
• prevent self-referral or duplicate-compensation abuse;
• investigate fraud; and
• manage Affiliate Program relationships.

Communications

To:

• respond to inquiries;
• provide application updates;
• send event information;
• provide important service notices;
• send transaction messages;
• provide certificates and documentation;
• manage customer support; and
• maintain relationships with participants and partners.

Marketing

Where permitted, to:

• send newsletters;
• announce future events;
• provide offers;
• advertise WLPI programs;
• build audience segments;
• conduct marketing campaigns;
• measure campaign effectiveness; and
• communicate relevant WLPI opportunities.

Security & Fraud Prevention

To:

• protect WLPI systems;
• investigate suspected fraud;
• prevent unauthorized access;
• investigate payment abuse;
• investigate fraudulent applications;
• prevent document misuse;
• monitor suspicious referral activity; and
• enforce WLPI Terms and policies.

Legal & Regulatory Compliance

To:

• maintain required records;
• respond to lawful requests;
• protect legal rights;
• establish or defend legal claims;
• meet financial and tax requirements; and
• comply with applicable laws.

13. Legal Bases for Processing

Where GDPR or similar laws require a legal basis, WLPI may rely on one or more of the following:

Contractual Necessity

Processing necessary to enter into or perform a contract with you, including:

• processing event registrations;
• providing purchased services;
• issuing documents;
• administering participation;
• processing applicable Affiliate Program activities; and
• responding to requests made before entering into a contract.

Legal Obligation

Processing required to comply with applicable:

• tax laws;
• accounting obligations;
• regulatory requirements;
• court orders;
• law-enforcement requests; or
• other legal obligations.

Legitimate Interests

Where permitted, WLPI may process information where reasonably necessary for legitimate interests including:

• operating our organization;
• administering events;
• maintaining security;
• preventing fraud;
• protecting WLPI's legal rights;
• improving services;
• maintaining appropriate business records;
• managing organizational relationships; and
• certain direct-marketing activities.

We will consider whether such interests are overridden by the rights and freedoms of affected individuals.

Legitimate interest is a recognized GDPR legal basis where the relevant conditions are met.

Consent

We may rely on consent where appropriate, including for:

• certain marketing communications;
• certain cookies or advertising technologies;
• selected photography or promotional activities;
• optional sensitive information; and
• other activities where consent is required.

Consent may be withdrawn at any time for future processing where consent is the legal basis.

Withdrawal does not make processing that occurred before withdrawal unlawful.

Vital Interests

In limited circumstances, we may process information where necessary to protect a person's:

• life;
• health; or
• physical safety,

such as an emergency occurring during an event.

Special-Category Processing

Where GDPR Article 9 applies, WLPI will rely on an appropriate additional condition before processing special-category personal data.

14. Application Selection & Automated Tools

WLPI may use technological tools to assist with:

• organizing applications;
• identifying duplicates;
• detecting fraud;
• categorizing submissions;
• managing communications;
• analyzing program data; or
• supporting administrative review.

Where GDPR applies, WLPI will not subject individuals to a decision based solely on automated processing that produces legal effects or similarly significant effects unless such processing is permitted by law and appropriate safeguards are provided.

Human review may form part of selection and evaluation procedures where appropriate.

15. Sharing Data With WLPI Affiliates & Sister Organizations

WLPI may work with affiliated, sister, associated, or commonly managed organizations in connection with:

• international programs;
• events;
• scholarships;
• educational activities;
• humanitarian initiatives;
• partnerships;
• administration; or
• operational support.

Personal data may be shared within such organizational relationships where reasonably necessary for purposes such as:

• joint event administration;
• scholarship administration;
• participant management;
• institutional partnerships;
• operational support;
• accounting;
• fraud prevention;
• technical support;
• shared services;
• marketing where lawfully permitted; and
• delivery of benefits connected with a program.

Such sharing does not give affiliated organizations unrestricted rights to use participant data.

Where required, WLPI will implement appropriate:

• contractual;
• confidentiality;
• data-sharing;
• processing; or
• international-transfer arrangements.

An affiliated organization acting as an independent controller may also provide its own privacy notice.

16. Sharing Data With Event Partners

For some events, WLPI may cooperate with:

• universities;
• academic partners;
• conference venues;
• hotels;
• sponsors;
• institutional partners;
• local hosts;
• catering providers;
• transportation providers;
• travel providers;
• event production companies;
• security providers; and
• other operational partners.

We may share information reasonably necessary to provide the relevant service.

For example:

• hotels may receive participant names and accommodation information;
• transportation providers may receive passenger names and arrival details;
• caterers may receive necessary dietary information;
• universities or venues may receive participant or access lists; and
• co-organizers may receive registration information necessary to administer a jointly operated event.

WLPI seeks to limit such disclosure to information reasonably necessary for the relevant purpose.

17. Visa, Embassy & Consular Data Sharing

Where an applicant purchases or receives visa-support services, WLPI may communicate with:

• embassies;
• consulates;
• visa application centers;
• governmental authorities;
• immigration authorities; or
• authorized institutional partners,

where necessary to provide or verify legitimate visa-support documentation.

This may include confirming:

• participant name;
• invitation status;
• event registration;
• event dates;
• participation category;
• invitation-letter authenticity;
• reference number;
• payment or registration status where relevant; and
• other information reasonably necessary to verify the participant's relationship with WLPI.

Passport copies or other identification documents will not be shared unnecessarily.

Where disclosure is made at the participant's request or is necessary to perform a requested visa-support service, the relevant lawful basis will depend on the circumstances.

WLPI does not control how an embassy, consulate, visa application center, or governmental authority independently processes information after receiving it.

18. Payment Gateways & Financial Providers

WLPI uses third-party payment services to process transactions.

Personal data may therefore be transmitted to:

• payment gateways;
• acquiring banks;
• issuing banks;
• card networks;
• payment platforms;
• invoicing providers;
• fraud-prevention services; and
• accounting providers.

These organizations may process information as WLPI's processors or as independent controllers depending on their role and legal obligations.

WLPI does not control independent processing carried out by:

• banks;
• card networks; or
• other financial institutions.

Users should review the applicable provider's privacy information where appropriate.

19. Other Service Providers

WLPI may engage service providers that help us operate our organization and deliver our services, including providers of:

• website hosting;
• cloud storage;
• database services;
• website development;
• customer support systems;
• CRM systems;
• email services;
• messaging services;
• application-management systems;
• event-management platforms;
• analytics;
• cybersecurity;
• fraud detection;
• advertising;
• document generation;
• electronic signatures;
• accounting;
• legal services;
• translation;
• survey tools; and
• communications infrastructure.

Service providers are given access only as reasonably necessary for their functions and, where required, are subject to contractual privacy and security obligations.

20. Sale of Personal Data

WLPI does not sell or rent personal data to data brokers in exchange for monetary payment.

However, certain online advertising, analytics, or tracking activities can legally be classified as a:

• "sale";
• "sharing"; or
• use for "targeted advertising"

under some U.S. state privacy laws even where no money is paid specifically for the personal information.

Where WLPI engages in an activity legally classified as a sale, sharing, or targeted advertising and the relevant law applies to WLPI, affected individuals will be provided with the legally required opt-out rights.

California law, for example, provides covered consumers with rights to opt out of covered sale or sharing activities where the CCPA applies to the business.

Where required, WLPI will also honor legally recognized opt-out preference signals.

21. Marketing Communications

WLPI may send communications concerning:

• applications;
• events;
• programs;
• new opportunities;
• scholarships;
• WLPI news;
• educational opportunities;
• invitations;
• promotional offers; and
• related organizational activities.

Service-related communications necessary to administer an:

• application;
• transaction;
• event; or
• contractual relationship

are separate from optional marketing communications.

Where consent is legally required for electronic marketing, WLPI will seek appropriate consent.

You may unsubscribe from marketing communications at any time by:

• using an unsubscribe link where available; or
• contacting support@wlpi.org.

We may retain limited information on a suppression list to ensure that an opt-out request continues to be respected.

22. Cookies, Pixels & Similar Technologies

WLPI may use cookies and similar technologies for different purposes.

Strictly Necessary Technologies

These may be used for:

• website functionality;
• security;
• authentication;
• payment functionality;
• remembering privacy choices; and
• maintaining required website sessions.

Functional Technologies

These may help remember preferences and improve website functionality.

Analytics Technologies

These may help WLPI understand:

• visitor numbers;
• pages used;
• user journeys;
• website performance; and
• engagement.

Advertising & Marketing Technologies

Where used and legally permitted, these may help:

• measure advertisements;
• understand campaign performance;
• create audiences;
• limit repeated advertising; and
• provide more relevant promotional content.

Referral & Affiliate Technologies

Referral identifiers may be stored or processed to:

• identify the referring Affiliate;
• track eligible conversions;
• validate commission;
• prevent fraud; and
• resolve attribution disputes.

Where cookies, local storage, pixels, or similar technologies require consent under applicable law, they will be used subject to the required consent mechanism.

Certain technical cookies essential to operation may not require the same consent treatment as optional technologies.

European Commission guidance distinguishes necessary operational cookies from optional uses.

Users may manage available choices using:

• the WLPI cookie banner; or
• browser settings.

A separate Cookie Policy may provide additional information.

23. Social Media & Advertising Platforms

WLPI may maintain accounts or advertise through social-media and digital platforms.

Interactions with these platforms may result in both WLPI and the relevant platform processing personal information.

Depending on your privacy settings and applicable law, WLPI may receive information including:

• profile information;
• engagement;
• messages;
• comments;
• advertising interactions;
• campaign attribution information; and
• aggregated audience information.

The relevant social-media or advertising platform independently determines many aspects of its own data-processing practices.

Users should review the privacy policies and controls offered by those platforms.

24. International Data Transfers

Because WLPI operates internationally through entities in Hungary and the United States and works with international service providers and event partners, personal data may be transferred to or accessed from countries outside the country in which it was originally collected.

This may include transfers between:

Ufuq Group Kft – Hungary

and

Nexus Prime Group LLC – United States

Where GDPR applies to a transfer of personal data outside the European Economic Area, WLPI will use an appropriate transfer mechanism where required.

Depending on the recipient and circumstances, this may include:

• an adequacy decision adopted by the European Commission;
• European Commission-approved Standard Contractual Clauses ("SCCs");
• another legally recognized transfer mechanism; or
• a statutory derogation where permitted.

The European Commission's 2021 Standard Contractual Clauses are an approved mechanism for certain transfers of personal data to third countries.

Where a U.S. recipient validly participates in the EU-U.S. Data Privacy Framework, the European Commission's adequacy decision may provide an applicable transfer mechanism.

WLPI does not represent that a particular provider or WLPI entity participates in that framework unless it actually holds the necessary certification.

Where appropriate, additional safeguards may be implemented following an assessment of the relevant transfer.

25. Data Retention

WLPI retains personal data only for as long as reasonably necessary for the purposes for which it was collected and for legitimate:

• legal;
• contractual;
• administrative;
• accounting;
• security; and
• dispute-resolution requirements.

Retention periods may differ depending on the type of information.

Factors considered include:

• duration of the relationship with WLPI;
• nature of the program or service;
• whether an application was successful;
• financial and accounting requirements;
• tax requirements;
• potential disputes or chargebacks;
• applicable limitation periods;
• fraud-prevention requirements;
• contractual obligations;
• consent status;
• legal requirements; and
• whether information is required for historical or organizational records.

For example:

• payment and invoice records may be retained for periods required by accounting and tax laws;
• application records may be retained for a reasonable period for administration, dispute resolution, program analysis, and fraud prevention;
• Affiliate Program records may be retained for financial, tax, contractual, and anti-fraud purposes;
• marketing information may be retained until consent is withdrawn or an objection is made, subject to maintaining a minimal suppression record;
• visa-support documentation may be deleted or restricted when no longer reasonably required, subject to legitimate record-keeping needs;
• security logs may be retained for an appropriate security period; and
• event media may be retained as part of WLPI's legitimate institutional, historical, and promotional archive where lawfully permitted.

When personal data is no longer required, WLPI may:

• delete it;
• anonymize it; or
• securely archive it,

as appropriate.

26. Data Security

WLPI takes reasonable technical and organizational measures appropriate to the nature and risk of the personal data processed.

Measures may include, where appropriate:

• secure website connections;
• access controls;
• restricted staff access;
• account authentication;
• secure hosting;
• security monitoring;
• backups;
• confidentiality requirements;
• internal access management;
• security measures used by payment providers;
• staff awareness;
• fraud-prevention controls; and
• procedures for responding to suspected security incidents.

Access to personal data is intended to be limited to persons who reasonably require it for legitimate organizational purposes.

Despite these measures, no internet transmission or electronic storage method can be guaranteed to be completely secure.

Accordingly, WLPI cannot promise absolute security.

27. Personal Data Breaches

If WLPI becomes aware of a personal-data breach, WLPI will assess the nature and potential impact of the incident.

Where applicable law requires notification, WLPI will notify:

• the relevant supervisory authority; and/or
• affected individuals

within the legally applicable timeframe.

Under GDPR, qualifying personal-data breaches must generally be notified to the competent supervisory authority:

• without undue delay; and
• where feasible, within 72 hours

after the controller becomes aware of the breach, unless the breach is unlikely to result in a risk to individuals' rights and freedoms.

28. Your Privacy Rights

Your rights depend on the law applicable to you.

Where GDPR applies, individuals may have rights including:

Right of Access

You may request confirmation of whether WLPI processes your personal data and request access to that information.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of personal data in circumstances provided by law.

The right to deletion is not absolute, and WLPI may retain information where required or permitted for:

• legal;
• contractual;
• financial;
• fraud-prevention; or
• legal-claim purposes.

Right to Restriction

You may request restriction of processing in circumstances provided by law.

Right to Data Portability

Where applicable, you may request certain personal data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests in circumstances provided by law.

You may object to direct marketing at any time.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Rights Relating to Automated Decisions

Where applicable, you may have rights concerning certain decisions based solely on automated processing.

Right to Lodge a Complaint

Individuals protected by GDPR may lodge a complaint with an appropriate data-protection supervisory authority.

In Hungary, the competent supervisory authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

NAIH handles complaints and data-protection proceedings under its statutory authority.

Further GDPR-specific information may be provided on WLPI's separate GDPR Policy / GDPR Information Page.

29. Privacy Rights in the United States

Residents of certain U.S. states may have additional privacy rights where the relevant state privacy law applies to WLPI.

Depending on the applicable law, these may include rights to:

• know or access personal information;
• correct inaccurate information;
• delete certain personal information;
• obtain a portable copy of information;
• opt out of certain sales of personal information;
• opt out of certain sharing or targeted advertising;
• limit certain uses of sensitive personal information;
• withdraw consent for specified processing;
• appeal certain privacy-request decisions; and
• exercise rights without unlawful discrimination.

These rights apply only where WLPI and the relevant processing activity fall within the scope and thresholds of the applicable law.

To submit a request, contact:

support@wlpi.org

WLPI may request reasonable information to verify identity before fulfilling a privacy request.

30. Children's & Minors' Privacy

WLPI's general website is not designed primarily for children under the age of 13.

WLPI does not knowingly seek to collect online personal information from children under 13 without appropriate authorization where U.S. children's privacy law applies.

The U.S. Children's Online Privacy Protection Rule ("COPPA") imposes specific requirements on covered online services collecting personal information from children under 13.

Some WLPI events or programs may permit participation by individuals under 18 where expressly allowed by the applicable event rules.

Where a participant is a minor, WLPI may require:

• parental or legal guardian consent;
• guardian contact information;
• authorization to participate;
• travel authorization;
• emergency information;
• photography/media consent; or
• other documentation appropriate to the program.

Children's data receives additional protection under EU data-protection rules, including specific requirements where consent is relied upon for online services.

WLPI will seek parental or guardian authorization where required by applicable law.

If a parent or guardian believes WLPI has improperly collected a child's information, they may contact:

support@wlpi.org

31. Special-Category & Sensitive Personal Data

WLPI generally seeks to minimize the collection of highly sensitive information.

However, participation in international events may occasionally require information relating to:

• health;
• accessibility;
• disabilities;
• dietary requirements;
• religious dietary requirements;
• racial or ethnic background where voluntarily collected for legitimate diversity purposes;
• political views where voluntarily disclosed in policy-related application content; or
• other information treated as sensitive or special-category data under applicable law.

WLPI will only process such information where there is:

• a valid legal basis; and
• where applicable, a valid condition for sensitive or special-category processing.

Applicants should not provide unnecessary:

• medical;
• political;
• religious;
• biometric; or
• similarly sensitive information

unless it is requested or genuinely relevant.

32. Public Information & Networking

Certain WLPI events are designed to facilitate networking and professional engagement.

Where appropriate, WLPI may share limited professional information with other participants, speakers, partners, or attendees, such as:

• name;
• organization;
• job title;
• country;
• biography;
• professional profile;
• area of expertise; or
• speaker information.

Information intended for publication will normally be identified accordingly or collected in circumstances where publication is reasonably expected.

Private contact details such as:

• personal telephone numbers;
• passport information;
• home addresses; or
• sensitive application data

will not be included in public participant materials without an appropriate reason and lawful basis.

Participants remain responsible for information they independently choose to share with other attendees.

33. Certificates, Invitations & Verification Systems

WLPI may operate verification systems for:

• certificates;
• Official Invitation Letters;
• participation documents;
• reference numbers;
• QR codes; and
• other official documentation.

A verification page may display limited information necessary to establish the authenticity of a document, such as:

• participant name;
• document type;
• event name;
• reference number;
• issue status; or
• validity status.

WLPI seeks to avoid displaying unnecessary passport or sensitive personal information through public verification systems.

Verification systems may also log technical information to prevent fraud and document misuse.

34. Surveys, Testimonials & Feedback

WLPI may invite participants to provide:

• feedback;
• surveys;
• ratings;
• written testimonials;
• photographs;
• video testimonials;
• interviews; or
• success stories.

Where a testimonial is intended for public promotional use, WLPI will:

• use an appropriate lawful basis; and
• seek consent where required.

A participant may contact WLPI to withdraw consent for future use where consent is the applicable legal basis.

Withdrawal may not require WLPI to recall:

• printed materials already lawfully produced; or
• copies independently shared by third parties before withdrawal.

35. Legal Requests & Protection of Rights

WLPI may preserve or disclose personal information where reasonably necessary to:

• comply with applicable law;
• respond to a court order;
• respond to a lawful government request;
• investigate fraud;
• protect WLPI participants;
• enforce WLPI agreements;
• protect WLPI's intellectual property;
• establish, exercise, or defend legal claims;
• investigate security incidents; or
• protect the rights, property, or safety of WLPI, its participants, its partners, or others.

WLPI will seek to disclose only information reasonably necessary for the applicable purpose.

36. Third-Party Websites & External Services

WLPI websites may contain links to:

• partner websites;
• hotels;
• universities;
• sponsors;
• social-media platforms;
• payment providers;
• travel services;
• application platforms; or
• other external websites.

Once you leave a WLPI-controlled website, the relevant third party may independently collect and process personal information.

WLPI is not responsible for the independent privacy practices of third-party websites and encourages users to review their privacy notices.

37. Data Accuracy

Users are responsible for providing accurate and current information.

This is particularly important for:

• passport information;
• invitation letters;
• visa-support documents;
• certificates;
• payment information;
• email addresses; and
• event registration.

You may contact WLPI to request correction of inaccurate personal data.

WLPI may request verification before making changes to identity-sensitive information.

38. Privacy Requests & Identity Verification

Requests concerning personal data may be submitted to:

support@wlpi.org

Please clearly identify the nature of your request.

WLPI may request additional information reasonably necessary to:

• verify your identity;
• locate your records;
• prevent unauthorized disclosure; and
• determine the law applicable to your request.

Where permitted, an authorized representative may submit a request on another individual's behalf, subject to appropriate verification.

WLPI will respond within the timeframe required by applicable law.

39. Exercising Rights Does Not Affect Participation

WLPI will not unlawfully discriminate against an individual solely because they exercise a legally protected privacy right.

However, deletion, restriction, or refusal to provide information that is genuinely necessary to provide a requested service may make it impossible for WLPI to continue providing that particular service.

For example, WLPI may be unable to issue a personalized invitation letter if an applicant refuses to provide the identity information necessary to prepare the letter.

40. Policy Changes

WLPI may update this Privacy Policy periodically to reflect:

• changes in WLPI services;
• new events or programs;
• changes in technology;
• new payment or Affiliate Program arrangements;
• changes in data-processing practices;
• organizational changes;
• changes in service providers; or
• changes in applicable law.

Where material changes are made, WLPI may provide additional notice where appropriate or required.

The current version will be published on www.wlpi.org together with the applicable "Last Updated" date.

Changes apply prospectively from their effective date unless otherwise permitted or required by law.

41. Applicable Privacy Laws

WLPI seeks to process personal data in accordance with privacy and data-protection legislation applicable to the relevant processing activity.

This may include, where applicable:

• the General Data Protection Regulation (EU) 2016/679 (GDPR);
• Hungary's Act CXII of 2011 on Informational Self-Determination and Freedom of Information;
• applicable European electronic-communications and cookie/privacy requirements;
• applicable United States federal privacy and consumer-protection requirements;
• applicable U.S. state privacy legislation where WLPI falls within its scope;
• applicable children's privacy requirements; and
• other mandatory privacy legislation applicable to the relevant individual or processing activity.

The GDPR directly regulates processing of personal data in its scope, while Hungary's Act CXII of 2011 supplements the GDPR within Hungarian jurisdiction.

Because privacy laws differ between jurisdictions and may apply based on factors such as:

• establishment;
• user location;
• processing activity; and
• statutory thresholds,

not every law listed above will apply to every WLPI transaction.

Where multiple laws apply, WLPI will seek to comply with the mandatory requirements applicable to the relevant processing activity.

42. Relationship With Other WLPI Policies

This Privacy Policy should be read together with WLPI's:

• Terms and Conditions;
• Refund Policy;
• Cookie Policy, where applicable;
• GDPR Policy / GDPR Information Page;
• SimplePay Data Transfer Declaration (Section 44);
• Referral/Affiliate Program Terms; and
• any event-specific privacy information provided to participants.

Where an event or particular processing activity requires additional privacy information, WLPI may provide a supplementary privacy notice.

43. Contact Information

For privacy questions, data-access requests, deletion requests, corrections, objections, marketing opt-outs, complaints, or other privacy concerns, please contact:

By interacting with WLPI, you acknowledge receipt of this Privacy Policy.

Where consent is legally required for a particular processing activity, WLPI will request that consent separately rather than treating general use of the website as consent to all processing.