Privacy Policy

How we process the personal data of people who visit the website and use our forms.

Last updated: September 14, 2026

1. Who we are

This Policy explains how FOUP – Forum of Universities for Peace (“FOUP”) processes the personal data of people who visit the foup.org website and use its forms. FOUP is the controller of this data under the Brazilian General Data Protection Law (Law No. 13,709/2018 – LGPD).

Privacy contact: contato@foup.org.

2. Data we collect

We only collect the data needed for each purpose:

  • Membership Agreement (institutions and volunteers): name, email, phone/WhatsApp, institution, position or role, city and country, as well as the details of the representative appointed by the institution.
  • Contact: name, email, phone, subject and message.
  • Newsletter: email.
  • Programs (Training and Capacity Building, CIEPI and others): name, email, phone/WhatsApp, institution, position, city, country, academic degree and field or line of work, according to each program’s form.
  • FOUP Journal: name, email, institution, country, academic degree, thematic axes, languages and links provided in applications and expressions of interest.
  • Technical data: a session cookie (PHPSESSID), required for the website to work, and server access logs (such as IP address, date, time and browser), kept for security purposes.

We do not use advertising cookies or third-party tracking or analytics tools.

3. How we use the data

  • to answer messages and requests;
  • to process memberships and keep records of signatory institutions, members and volunteers;
  • to organize programs, training courses, events and FOUP Journal activities;
  • to send confirmations and institutional communications, including the newsletter, which you can unsubscribe from at any time;
  • to publish on the website the names of signatory institutions and the names and roles of members of the governance bodies and programs, as part of the Forum’s public activities;
  • to keep the website secure and prevent abuse;
  • to comply with legal and regulatory obligations.

4. Legal bases

We process personal data based on the legal grounds set out in Article 7 of the LGPD, in particular: consent (for example, for the newsletter); carrying out procedures related to membership or participation in the Forum’s activities, at the data subject’s request; FOUP’s legitimate interest in institutional communication and website security; and compliance with legal obligations.

5. Data sharing

FOUP does not sell personal data. Data may be processed by service providers, solely for the purposes described:

  • Hostinger – website hosting and email service;
  • Mailchimp (Intuit) – sending communications and the newsletter;
  • Google Fonts, cdnjs (Cloudflare) and unpkg – loading fonts and libraries on some pages, which may involve sending your IP address to these services.

We may also share data with partner institutions when necessary to run a program you take part in, and with public authorities when required by law.

6. International transfers

Some providers, such as Mailchimp and Google, may process data outside Brazil. In these cases, transfers take place to perform the contracted services and with the safeguards provided for in the LGPD.

7. How long we keep data

We keep data for as long as necessary to fulfill the stated purposes, for the duration of your membership or participation, or for the period required by legal obligations. Newsletter data is kept until you unsubscribe. After that, the data is deleted or anonymized.

8. Your rights

Under Article 18 of the LGPD, you may request: confirmation that processing takes place; access to your data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data; data portability; information about data sharing; withdrawal of consent; and objection to processing carried out on other legal grounds.

To exercise your rights, write to contato@foup.org. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD). Data subjects located in the European Union also have the rights provided for in the General Data Protection Regulation (GDPR).

9. Security

We adopt technical and administrative measures to protect data, such as encrypted connections (HTTPS) and restricted access to the administrative area. No system is completely immune to incidents; should a relevant incident occur, we will take the measures required by law.

10. Children and adolescents

The website is intended for institutions and adults. Data of children and adolescents is only processed with the consent of parents or guardians, when required, and always in the best interest of the data subject.

12. Changes to this Policy

This Policy may be updated. The current version will always be available on this page, with the date of the last update.

13. Contact

Questions or requests about privacy: contato@foup.org.

See also: Terms of Use