Your participation, your data

This policy explains what Konvent collects, why it is needed, how it is protected and the choices available to every member.

1. Who controls the data

Konvent is the controller for information processed through this platform. Administrators can be contacted through the official channels on the Communications page for access, correction, portability or deletion requests.

2. Information we process

We process account credentials, contact and eligibility details, profile information, chosen interests and participation preferences. Profile images, banners, biographies and public contributions are optional. Event attendance, group membership, motions and administrative audit events are stored to provide the requested features.

3. Voting privacy

Ballots are connected to a member account internally to enforce one ballot per eligible member and allow a member to change their vote while a ballot remains open. Public results are aggregated. Country, age and interest analytics are displayed only as grouped statistics and are not intended to identify individual voters.

4. Legal basis and purpose

Account and participation data is processed to provide the membership service, maintain platform security and operate civic activities requested by members. Optional public profile data is processed with the member’s choice to publish it. Administrative audit data is processed for security, accountability and abuse prevention.

5. Retention and deletion

Account information is retained while membership is active and for the minimum period needed to resolve security or legal issues afterwards. Published civic records may be retained as part of the assembly record, but identifying information will be reduced where appropriate. Members may request account deletion or correction through an official communication channel.

6. Security and access

Passwords are one-way hashed. Sessions use secure, HTTP-only cookies. Administrative actions require role-based permissions and are audited. Uploads are restricted by file type and size. Production database, sessions, uploads and application secrets are isolated from other hosted applications.

7. Your rights

Depending on applicable law, members may request access, correction, deletion, restriction, objection or a portable copy of their data. Members may also contact the relevant supervisory authority. Requests will be verified to protect the account holder.

8. Changes

Material policy changes will be announced through the platform. The update date at the top of this page identifies the current version.