Privacy notice

Version 2026-04-21

This notice explains what personal data we collect when you sign the open letter, why we collect it, and your rights under UK GDPR.

Who controls your data

The data controller is European Legal Support Center (ELSC). Contact info@elsc.support for any privacy questions or to exercise your rights.

What we collect and why

Signing the open letter

Data: full name, email, organisation, role/title, country

Lawful basis: Consent (Article 6(1)(a) UK GDPR)

Retention: Kept for the active life of the campaign, then retained as a public historical record of signatories unless you request erasure.

Receiving campaign updates (optional newsletter)

Data: email

Lawful basis: Consent (Article 6(1)(a) UK GDPR)

Retention: Until you unsubscribe or withdraw consent.

Abuse prevention and rate limiting

Data: salted hash of IP address, browser user agent

Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR) — to prevent spam and fraudulent signatures.

Retention: 90 days.

Your rights

Right of access — ask us what personal data we hold about you.
Right to rectification — ask us to correct inaccurate data.
Right to erasure — ask us to delete your signature and associated data.
Right to withdraw consent — withdraw newsletter consent or remove your public signature at any time.
Right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).

We use Mailchimp to send campaign updates. Mailchimp is based in the US and processes data under the UK-US Data Bridge. Every email has an unsubscribe link. Unsubscribing from the newsletter does not withdraw your signature on the letter.

Cookies

This site uses analytics without cookies and without cross-site tracking. No consent banner needed.

Last updated: 2026-04-21