Foresight Institute of Research and Translation (FIRAT)

1. Definitions

The following terms, when capitalised in this Policy, carry the meanings set out below:

"Policy" means this Privacy Policy, as amended from time to time.
"We," "Us," "Our," and "FIRAT" refer to the Foresight Institute of Research and Translation, the Data Controller responsible for Your Personal Data.
"Website" means the digital platform accessible at firat.rw, including all subdomains and associated digital assets.
"You" and "Your" refer to any natural person whose Personal Data We process in connection with the Website.
"Personal Data" means any information relating to an identified or identifiable natural person, including names, email addresses, telephone numbers, and any other data that can, alone or in combination, identify You.
"Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
"Services" means all services offered by FIRAT through the Website, as further described in FIRAT's Terms of Service.

2. Data Controller

The Data Controller responsible for the Processing of Your Personal Data in connection with the Website is:

Foresight Institute of Research and Translation

93, KK 31 Avenue, Gikondo, Kigali, Rwanda

Email:

Telephone: +250 798 284 100

All enquiries regarding this Policy or the exercise of Your rights under Section 7 should be directed to the contact details above.

3. What Personal Data We Collect

We collect Personal Data in the following circumstances:

3.1 Event Registrations

When You register for an Event through the Website, We collect:

Full name
Email address
Telephone number (where provided)
Organisational affiliation and professional title (where provided)
Country of residence
Any additional information submitted through the registration form

3.2 Contact Forms

When You submit an enquiry or message through the Website's contact form, We collect:

Full name
Email address
The content of Your message
Any attachments or supporting materials You choose to provide

3.3 Newsletter and Communications Subscriptions

When You subscribe to FIRAT's newsletters, publications, or communications, We collect:

Email address
Name (where provided)
Areas of interest (where provided)

3.4 Automatically Collected Data

When You visit the Website, We may automatically collect certain technical information, including IP address, browser type and version, device type, operating system, referring URL, pages visited, and time and duration of visits. This data is collected for the purposes of Website administration and improvement and is not used to identify You individually without additional information.

4. How We Use Your Personal Data

We process Your Personal Data for the following purposes:

Purpose	Legal Basis
Processing Event registrations and delivering related communications	Performance of a contract or pre-contractual steps
Responding to enquiries submitted through the contact form	Legitimate interests
Sending newsletters and institutional updates (where subscribed)	Consent
Administering and improving the Website	Legitimate interests
Complying with applicable legal obligations	Legal obligation
Establishing, exercising, or defending legal claims	Legitimate interests

We will not use Your Personal Data for any purpose that is incompatible with the purposes for which it was collected, unless We have obtained Your consent or are required to do so by law.

5. Retention

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law.

As a general guide:

Event registration data is retained for a period of three (3) years following the relevant Event, to enable follow-up communications and for record-keeping purposes.
Contact form submissions are retained for a period of two (2) years from the date of submission.
Newsletter subscriber data is retained until You withdraw Your consent or unsubscribe, and for up to twelve (12) months thereafter for suppression purposes.
Technical and log data is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised.

6. Disclosure of Personal Data

We do not sell, rent, or trade Your Personal Data to third parties.

We may disclose Your Personal Data to:

Service providers and processors who assist Us in operating the Website and delivering the Services — for example, email delivery platforms, hosting providers, and event management tools. These parties are bound by contractual obligations to process Personal Data only on Our instructions and in accordance with this Policy.
Professional advisers, including lawyers, auditors, and insurers, where necessary in the course of their professional services.
Regulatory or governmental authorities, where required to do so by applicable law, court order, or binding governmental directive.

We require all third parties to respect the security of Your Personal Data and to treat it in accordance with applicable data protection law.

7. Your Rights

You have the following rights in relation to Your Personal Data:

Right of access — You may request a copy of the Personal Data We hold about You.
Right to rectification — You may request that We correct any inaccurate or incomplete Personal Data.
Right to erasure — You may request that We delete Your Personal Data where there is no longer a lawful basis for its retention, subject to applicable legal obligations.
Right to restriction — You may request that We restrict the Processing of Your Personal Data in certain circumstances.
Right to object — You may object to the Processing of Your Personal Data where We rely on legitimate interests as the legal basis.
Right to withdraw consent — Where Processing is based on consent, You may withdraw that consent at any time without affecting the lawfulness of Processing carried out prior to withdrawal. To unsubscribe from newsletters, use the unsubscribe link included in each communication.
Right to data portability — Where applicable, You may request that We provide Your Personal Data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact Us at . We will respond to Your request within thirty (30) days. We may need to verify Your identity before fulfilling Your request.

8. Security

FIRAT implements appropriate technical and organisational measures to protect Your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are regularly reviewed and updated in line with good industry practice.

Notwithstanding these measures, no transmission of data over the internet can be guaranteed to be completely secure. Any transmission is at Your own risk. Once We have received Your data, We will use strict procedures and security features to prevent unauthorised access.

9. Third-Party Links

The Website may contain links to third-party websites. This Policy applies only to the Website. FIRAT is not responsible for the privacy practices of linked third-party websites and encourages You to review the privacy policies of any third-party site You visit.

10. Changes to This Policy

FIRAT reserves the right to update this Policy at any time. Where changes are material, We will take reasonable steps to inform You — for example, by posting a prominent notice on the Website or, where appropriate, by sending You a direct communication.

The date of the most recent revision appears at the foot of this Policy. Your continued use of the Website following publication of a revised Policy constitutes Your acceptance of its terms.

11. Contact and Complaints

For any questions regarding this Policy, requests to exercise Your rights, or complaints about Our data handling practices, please contact:

Data Protection Contact — Foresight Institute of Research and Translation