Latest Update: December 2025

Privacy Policy

  1. This website collects personal data from its users.

    As a data controller, re:arc institute, Oehlenschlaegersgade 36, 1663 København V, Denmark, CVR 43216309 ("rearc institute") will collect and process personal data about you.

  2. Please find below a description of the purpose of the processing of your personal data, the categories of personal data, the legal basis for the processing and the retention period.

    Monitoring and analyzing web traffic

    The purpose is to optimize your visit to our website, including ensuring functionality, generating statistics on the use of the website, remembering your preferences, such as language selection, and optimizing advertising efforts on social media.

    Categories of personal data:
    IP-address and the trackers and usage data that are generated when you visit our website.

    Legal Basis for the Processing:
    The legal basis for processing your IP address, trackers and usage data is re:arc institute's legitimate interests in generating useful and accurate statistics on the use of our website, optimizing its operation, and marketing our services on social media, pursuant to Article 6(1)(f) of the GDPR.

    Retention Period:
    re:arc institute will only store your personal data as long as it is deemed necessary to fulfil the purposes for the processing of your personal data.

    The personal data will be deleted after 1 year.

    Registration for and participation in events

    We register and use the personal data for organizing events (e.g. for the confirmation of your registration for the event).

    Categories of personal data:
    Name and contact information (such as e-mail address, telephone number, application questions (what they are interested in), passport number, nationality, dietary preferences.

    Legal Basis for the Processing:
    The legal basis is re:arc institute's legitimate interests, as the processing of your personal data is necessary to organize the event, pursuant to Article 6(1)(f) of the GDPR.

    Retention Period:
    Name and contact information (such as email address) will be deleted one year after the date of last contact.

    Passport number and nationality will be deleted after the event is concluded.

    Participation in courses

    The purpose is to facilitate the booking of flight tickets etc.

    Categories of personal data:
    Name and contact information (such as e-mail address), passport number, nationality.

    Legal Basis for the Processing:
    The legal basis is rearc institute's legitimate interests, as the processing of your personal data is necessary to organize the event, pursuant to Article 6(1)(f) of the GDPR.

    Retention Period:
    Name and contact information (such as email address, telephone number, and application questions—e.g., what the applicant is interested in) will be deleted one year after the date of last contact.

    Passport number, dietary preferences, and nationality will be deleted two weeks after the event is concluded.

    Agreements and contracts with vendors and other business partners (Grantee partners)

    We register and use the personal data for complying with our obligations according to agreements and contracts with vendors and other business partners.

    If you do not provide the required personal data, we will not be able to enter into a collaboration with you.

    Categories of personal data:
    Name, email, phone number, address, DOB, bank details, position in the organization and notes about interests.

    Legal Basis for the Processing:
    The legal basis is that the provision of data is necessary for the performance of an agreement with a vendor and/or other business partners and/or for any pre-contractual obligations thereof, pursuant to Article 6(1)(b) of the GDPR.

    Retention Period:
    The personal data will be deleted 1 year after the end of our collaboration.

    Registration for newsletters and invitations for events

    We register and use the personal data for sending out newsletters and information on upcoming events (if you have requested this)

    Categories of personal data:
    E-mail address

    Legal Basis for the Processing:
    The legal basis is your consent, pursuant to Article 6(1)(a) of the GDPR.

    Withdrawal of consent for direct marketing: You can unsubscribe from receiving newsletters at any time by clicking on a link in the bottom of the newsletters that we send.

    Retention Period:
    The personal data will be deleted after 1 year of collecting.

    Social media

    The purpose is the branding and marketing of rearc institute.

    Categories of personal data:
    Your IP address and the information you have made accessible via the settings at Instagram and LinkedIn, your reactions to our posts, you sharing ours posts and any comments to our posts.

    Legal Basis for the Processing:
    The legal basis for processing your personal data is re:arc institute's legitimate interests in making content available on social media to users who have chosen to follow rearc institute, for the purposes of image branding and marketing, pursuant to Article 6(1)(f) of the GDPR.

    Retention Period:
    The personal data will be deleted continuously.

    Compliance with legal obligations, including responding to legal enforcement requests

    Categories of personal data:
    Name, Address, Phone number, Email address

    Legal Basis for the Processing:
    The legal basis is that processing is necessary for compliance with a legal obligation to which the Owner is subject, pursuant to Article 6(1)(c) of the GDPR.

    Retention Period:
    The personal data will be deleted when it is no longer relevant in relation to applicable legal requirements

    Center for planetary pedagogies

    Categories of personal data:
    Partners, collaborators and event participants:
    Name, address, telephone no, email address, passport scans

    Symposium attendees, newsletter members - Name, address, email address

    Course attendees: Name, location, contact, application questions (what they are interested in).

    Legal Basis for the Processing:
    The legal basis is re:arc institute's legitimate interests, as the processing of your personal data is necessary to organize the event, pursuant to Article 6(1)(f) of the GDPR.

    Retention Period:
    The personal data will be deleted three months after the project is completed.

  3. Airline Companies and travel agencies

    The disclosure of the information involves sharing the following information: Name, address, telephone number, email address, passport number, nationality.

    The purpose of collecting this personal data is to book flight tickets.

    The legal basis is that the provision of data is necessary for the performance of an agreement with a vendor and/or other business partners and/or for any pre-contractual obligations thereof, pursuant to Article 6(1)(b) of the GDPR.

    Advisors

    We may disclose your personal data to our advisors, for example when we need guidance on compliance matters or in the event of a specific dispute.

    The legal basis for disclosing your personal data to our external advisors, such as legal counsel or compliance consultants, is our legitimate interest in obtaining professional guidance on regulatory matters and in managing specific disputes. This processing is necessary to ensure that we act in accordance with applicable laws and to safeguard our legal position pursuant to Article 6(1)(f) and Article 9(2)(f) of the GDPR.

  4. Certain recipients process personal data on behalf of re:arc institute and may only process your personal data in accordance with documented instructions given by re:arc institute and further terms and conditions stated in a data processor agreement entered with re:arc institute. These data processors are not permitted to process your personal data for their own purposes.

    Transfer of personal data to a third countries (outside of EU/EEA):

    In certain cases, your personal data may be transferred to countries outside of the EU/EEA. re:arc institute ensures that such transfer will be carried out in accordance with the applicable data protection laws. This entails that any party outside of the EU/EEA that will receive your personal data will ensure an adequate level of protection, for example, by entering into the EU standard contractual clauses ("SCCs") with re:arc institute. re:arc institute will ensure implement supplementary safeguards if deemed necessary in the specific case.

    You may receive a copy of the legal basis for transfers upon request. Please contact rearc@rearc.institute

  5. re:arc institute has implemented several measures to protect your personal data and ensure your rights. As a data subject, you can exercise the rights listed below. As a data subject – whether you are a whistleblower, a person concerned, or a third party mentioned in a report – you have the following rights, although some of the rights only apply under certain circumstances.

    The Danish Data Protection Agency has prepared guidelines regarding the data subjects' rights. The guidelines can be accessed here. However, please note that the guidelines are only available in Danish.

    • You have the right to request access to and receive a copy of the personal data we process about you, and in this context, also to receive a range of additional information ("right of access").
    • You have the right to have incorrect personal data about yourself corrected and to have incomplete personal data supplemented ("right of rectification").
    • You have the right to request the deletion of personal data about you under certain circumstances, such as if the processing is based on your consent and you choose to withdraw this consent ("right of erasure/right to be forgotten").
    • You have the right to have the processing of personal data about you restricted, for example, if the accuracy of the personal data is disputed ("right to restriction of processing").
    • Where our processing is carried out automatically and is based on your consent or the fulfilment of an agreement with you, you have the right to request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to request the transfer, where technically feasible, of such data to another data controller ("right to data portability").
    • Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection. Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time, free of charge and without providing any justification. Where the User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To learn whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document ("right to object").
    • You can request not to be subject to a decision that is solely based on automated processing, including profiling, which has legal effects for you or similarly significantly affects you ("right not to be subject to a decision based solely on automated processing, including profiling").
    • You can withdraw your consent to the processing of personal data about you at any time. Withdrawal of your consent will not affect the processing of personal data about you that took place before the date of the withdrawal. ("right of withdrawal")

    If you have any questions in relation to this Privacy Policy or wish to exercise your data subject's rights pursuant to Chapter III of the General Data Protection Regulation ("GDPR") and according to section 6 of this Privacy Policy, please contact re:arc institute by email: rearc@rearc.institute

    If you disagree in the way re:arc institute processes personal data about you, you can also file a complaint to the Danish Data Protection Agency, which is an independent public authority that is, inter alia, responsible for monitoring and enforcing the application of the GDPR. The Danish Data Protection Agency's contact information is available on its website: www.datatilsynet.dk. However, we do hope that you will contact re:arc institute at rearc@rearc.institute prior to filing a complaint so we can attempt to reach an agreement.

  6. This Privacy Policy will be updated and modified periodically, as well as, when necessary, due to changes in applicable data protection legislation and practice and, thus, re:arc institute recommends that you keep yourself updated of such changes

    Latest update: December 2025