Privacy policy
Who we are
This page and its forms belong to the Global Parents Business Community, an initiative that originated at CJD International School, Porto, Portugal, by CJD parents David Demenashe and Gabrielle Ugan together with the Principal, Marco Carvalho.
The community is run by URBANIS – Demenashe e Rabinovich, Lda., NIPC 518 355 462, registered office at Rua do Campo Lindo 340, Piso 2, 4200-144 Porto, Portugal. This company is the controller of the personal data collected through this page, under the General Data Protection Regulation ("GDPR"). In this policy, "GPBC" means the Global Parents Business Community and the company that runs it. The community committee manages the data on its behalf.
How to contact us
For any question about your data, or to use your rights, write to the committee through the contact page. You can also contact the school office of CJD International School.
Scope of this policy
This policy covers this page in all its languages, the request-to-join form, the contact form, the emails the community sends about your request, and the community registry where requests are kept.
What data we process
Request to join: full name, email, phone (optional), relationship to CJD, how you take part, professional area, company or practice (optional), country and city (optional), preferred language (optional), LinkedIn or website (optional), what you can offer and what you are looking for (optional), your answer to each of the four consents with the date and time, the version of this policy and the page language.
Contact form: name, email, topic, message and your consent with the date and time.
Technical data sent with a form: the address of the page, campaign tags in that address (such as utm_source) and the site you came from. The server uses your connection's IP address for a few minutes, in memory only, to block repeated attempts; it is not stored.
Privacy choice: a random ID, the time, your choices and the version of the notice. No name and no IP address.
We do not collect any information about children, students or classes. Please do not write it in the free-text fields.
What we use your data for and on what basis
- Reviewing your request and managing your participation in the community: your consent (GDPR art. 6(1)(a)).
- Sending community updates and event invitations: your consent (art. 6(1)(a)).
- Sharing your professional details with approved members in the future, only if you tick the optional box: your consent (art. 6(1)(a)).
- Answering messages sent through the contact form: your consent (art. 6(1)(a)).
- Protecting the forms from spam and abuse: GPBC's legitimate interest in keeping the registry reliable (art. 6(1)(f)).
- Visit statistics: your consent (art. 6(1)(a)).
- Keeping a record of the consents given: GPBC's legal obligation to prove consent (art. 6(1)(c) and art. 7(1)).
You can withdraw any consent at any time. This does not affect what was done before you withdrew it.
Do you have to provide your data?
Name, email, relationship to CJD, how you take part, professional area and the first three consents are needed to review a request. Without them the committee cannot review it. Every other field is optional.
Cookies and browser storage
The page writes nothing to your browser before you make a privacy choice. After you choose, it keeps:
cjd-consent(browser storage): your choice and its date. Kept 12 months, then you are asked again.cjd-consent-id(browser storage): a random ID that links a later change of mind to your first choice. Kept 12 months.- Google Analytics (only with "Statistics" allowed): cookies
_gaand_ga_*(up to 13 months). No Google signals, no advertising features; data kept 14 months. - Microsoft Clarity (only with "Statistics" allowed): cookies
_clck(12 months) and_clsk(1 day). Form fields are hidden from its recordings.
If you reject or later withdraw a category, its tools stop loading and their cookies are deleted. Change your choice with "Cookie settings" at the bottom of every page.
Who can access your data
Only the GPBC committee. The registry is never published and never sold. Member details are shared with other approved members only if the member ticked the optional consent.
Service providers that process data for us:
- Vercel Inc. (United States): hosts the page and runs the server that checks the forms.
- Google (Google Ireland Limited and Google LLC): Google Sheets, Apps Script and Gmail, where the registry is kept and the community emails are sent.
- Google: Google Analytics, visit statistics, only with your consent.
- Microsoft Ireland Operations Limited: Microsoft Clarity, visit statistics, only with your consent.
International transfers
Some of these providers are based in the United States or may process data there. These transfers rely on the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses. The page's server runs in the European Union (Frankfurt).
How long we keep your data
- Requests still open (new, reviewed or pending): erased 2 years after they were sent, at the latest.
- Requests not approved, members who leave and anyone who asks for deletion: the committee marks the request "removed" and it is erased automatically within 24 hours.
- Approved members: for as long as you are a member.
- Contact messages: 12 months.
- Records of privacy choices: 2 years.
The committee also receives each new request by email, with its details and where it came from. These emails, and the copy of the "request received" email in the sending mailbox, are deleted by the committee together with the request.
Security
The page is served only over HTTPS. Forms are checked on the server, protected against automated sending and limited in size and frequency. Access to the registry is limited to the committee.
Your rights
You have the right to access your data, to correct it, to have it erased, to restrict or object to its use, to receive it in a portable format, and to withdraw any consent. Write through the contact page. The committee answers within one month.
Complaints
You can complain to the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt.