Loading...
GDPR Compliance (EU 2016/679)

Privacy Policy & Data Protection

The International Institute for Geopolitical Studies (IIEG) is firmly committed to protecting the confidentiality, security, and integrity of your personal data in strict compliance with European regulations.

Last updated: September 18, 2026 • Contact & DPO : admin.sg@institugeo.org

Article 1 — Legal Framework & Commitment

This Privacy Policy transparently sets forth how the International Institute for Geopolitical Studies (IIEG) collects, processes, protects, and retains personal data belonging to visitors, registered users, and subscribers on https://institugeo.org.

IIEG rigorously observes the provisions of:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR);
  • The French Data Protection Act (Loi n° 78-17 "Informatique et Libertés");
  • European Directive 2002/58/EC ("ePrivacy" Directive).
Data Minimization: In accordance with Article 5(1)(c) of the GDPR, IIEG processes only personal data that is adequate, relevant, and strictly limited to what is necessary for our scholarly, analytical, and subscription services.

Article 2 — Data Controller & Data Protection Officer (DPO)

The Data Controller within the meaning of Article 4(7) of the GDPR is:

Data Controller:International Institute for Geopolitical Studies (IIEG)
Headquarters:2 Rue Foch, 34000 Montpellier, France
Official Contact & DPO:admin.sg@institugeo.org
Official Telephone:+33 6 12 62 13 54

You may contact our Data Protection Officer directly regarding any inquiries or to exercise statutory privacy rights.

Article 3 — Categories of Personal Data Collected

We collect personal data based upon your degree of interaction with our platform:

1 Account Credentials (Required)

First name, last name, valid email address, cryptographic salted password hash (we never have access to your plain-text password), preferred language setting (FR, EN, AR).

2 Professional Profile (Optional)

Professional role/status (Academic, Researcher, Diplomat, Policy Maker, Corporate Executive, Journalist, Student, etc.), affiliated institution or organization, and professional title.

3 Geographic & Contact Details

Country of residence (selected from the full international alphabetical directory), city, and telephone number (optional).

4 Subscription & Transaction Data

Subscription tier (Free vs Premium), starting date, expiry timestamp, transaction identifiers. Note: Financial transactions are processed exclusively via PCI-DSS certified payment processors. IIEG does not store full payment card numbers on its servers.

5 Technical Logs & Consent Records

Audit timestamps of GDPR consent and terms acceptance, newsletter opt-in preference, anonymized IP logs for cybersecurity auditing, and secure session tokens.

Article 5 — Data Retention Periods

Personal data is retained only for the time strictly necessary to fulfill the purposes for which it was gathered:

  • Active Accounts: Retained throughout the duration of user membership. Accounts inactive for three (3) consecutive years without sign-in are safely purged or anonymized.
  • Paid Subscriptions: Transaction and invoice records are preserved for ten (10) years pursuant to statutory requirements under the French Commercial Code.
  • Newsletter Subscriptions: Maintained until the subscriber unsubscribes via the 1-click link included in every newsletter or via profile settings.
  • Security Logs: Kept for a maximum of twelve (12) months before automated deletion.

Article 6 — Recipients & Absolute No-Sale Guarantee

★ Ethical Commitment
Strict and Absolute Guarantee: We Never Sell Your Data

The International Institute for Geopolitical Studies formally pledges that it never sells, rents, leases, or trades personal data to any commercial advertiser or third party for marketing purposes.

Personal data is accessible solely by:

  • Authorized personnel of IIEG under strict confidentiality obligations;
  • Trusted technical sub-processors under GDPR Article 28 data processing agreements (secure email delivery, payment gateway processing).

Article 7 — Storage Location & Cross-Border Transfers

Data processed by IIEG is stored and maintained primarily within the European Union (European Economic Area — EEA).

Where any technical processing requires international transfers outside the EEA, IIEG ensures that adequate protection is guaranteed via an adequacy decision of the European Commission or through standard contractual clauses (SCCs) approved by the EU.

Article 8 — Technical & Organizational Security Measures

IIEG deploys state-of-the-art security safeguards:

256-bit TLS Encryption

All data in transit is encrypted using advanced HTTPS / TLS cryptographic protocols.

Irreversible Password Hashing

Credentials are secured with salt and robust irreversible algorithms conforming to modern standards.

Application Firewalls

Active defense against SQL injections, brute-force attacks, XSS, and unauthorized intrusions.

Role-Based Access Control

Strict least-privilege administrative access with comprehensive audit trails.

Article 9 — Your Statutory Rights under GDPR

Pursuant to Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15): Obtain confirmation as to whether your data is being processed and receive a full copy.
  • Right to Rectification (Art. 16): Require inaccurate or incomplete data to be corrected without delay.
  • Right to Erasure / Right to be Forgotten (Art. 17): Request deletion of your data when it is no longer required.
  • Right to Restriction of Processing (Art. 18): Request temporary freezing of processing in contested circumstances.
  • Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
  • Right to Object (Art. 21): Object at any time to processing based on legitimate interest or research communications.
  • Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

You may exercise any of your statutory rights by contacting our Data Protection Officer:

Email: admin.sg@institugeo.org Post: IIEG — DPO, 2 Rue Foch, 34000 Montpellier, France

We will respond without undue delay and at the latest within one (1) month of receiving your request.

Supervisory Authority: You also have the statutory right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.

Article 11 — Policy Revisions

IIEG reserves the right to revise this Privacy Policy to ensure continued compliance with legislative and regulatory developments.

In the event of material revisions, registered account holders will receive prior notice via email or through prominent notifications posted on the platform.