Privacy Policy

ECSDA is the association of European central securities depositories, based in Brussels. For the purposes of applicable data-protection law, ECSDA is the controller of the personal data described in this policy.

We collect the information you give us directly, for example when you contact us, register for an event, or subscribe to updates. This can include your name, organisation, role and email address.

We also collect limited technical information automatically when you browse the site, such as your approximate location, device and browser type, and the pages you view.

We use personal data to respond to your enquiries, administer event registrations, send you information you have asked for, and understand how the site is used so we can improve it.

We rely on your consent, our legitimate interests as an association, or the performance of a contract with you, depending on the activity.

This site sets no cookies and uses no analytics. The only thing it stores in your browser is your choice of light or dark appearance, saved when you use the theme switch and readable by nobody but you. Nothing is loaded from a third party, so visiting a page discloses your address to no one else.

We do not sell personal data. We share it only with service providers who process it on our behalf under contract, or where we are required to do so by law.

We keep personal data only for as long as needed for the purpose it was collected for, or as required by law, after which it is deleted or anonymised.

Subject to applicable law, you may request access to your personal data, ask us to correct or erase it, object to or restrict its processing, and request portability. Where processing is based on consent, you may withdraw that consent at any time.

You also have the right to lodge a complaint with your local data-protection authority.

Where personal data is transferred outside the European Economic Area, we put appropriate safeguards in place, such as the European Commission's standard contractual clauses.

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

We may update this policy from time to time. The date at the top of the page shows when it was last revised.