1. Scope of this Policy

This policy applies to information collected through the IXPath website, electronic platform, registration forms, service requests, email, approved communication channels, and participation in research or training programs and projects.

2. Information We May Collect

Depending on the service, we may collect:

For research projects, project-related documents or data may be processed where necessary to provide the service. IXPath seeks to minimize the use of directly identifiable data and to remove direct identifiers whenever reasonably possible.

3. Purposes of Using Data

Information may be used to:

4. No Sale of Personal Data

IXPath does not sell users’ personal data. Research-project information is not used for purposes inconsistent with the purpose for which it was collected unless there is an appropriate lawful basis and any required consent.

5. Sharing of Data

Information may be shared, only as reasonably necessary, with employees, researchers, experts, trainers, or service providers whose duties require access, subject to appropriate confidentiality and data-protection obligations. Information may also be disclosed where required by applicable law or by a competent authority.

6. Data Retention

Information is retained for as long as necessary to provide the service and meet applicable legal or contractual obligations.

Project files are not kept indefinitely. They may be deleted after the applicable retention period. The underlying contract permits project files to be deleted 12 months after project closure unless legal or contractual obligations require otherwise.

7. Information Security

IXPath applies reasonable administrative, technical, and organizational measures intended to protect information against:

8. Confidentiality

IXPath treats non-public user and project information as confidential. It is disclosed only to persons who need it for their work, with the information owner’s approval, or where disclosure is legally required.

9. Privacy Contact

Questions relating to privacy or data processing may be sent through the official contact channels published on the IXPath website.