Datenschutzhinweis der Plattform
How the Global Centre for Risk and Innovation (GCRI Canada) handles personal information on the Berichte sites: what is collected and why, the legal bases, who receives it, how long it is kept, the rights you have under Canadian, Quebec, EU, UK and US law where they apply, and how to exercise them.
- Version1.0
- Datum des Inkrafttretens20. Oktober 2026
- Zuletzt aktualisiert20. Oktober 2026
- HerausgeberGlobal Centre for Risk and Innovation (GCRI Canada)
- Kontaktdas Kontaktformular
Reports · GCRI Canada, publisher of record
Das Dokument in Kürze.
- Adds the platform processing to the Privacy Policy of GCRI Canada.
- Only what is needed is collected; nothing is sold or used for advertising or profiling.
- Rights under Canadian, Quebec, Swiss, EU, UK and US state law are honoured where they apply.
- Requests go to das Kontaktformular.
Version 1.0, gültig ab 20. Oktober 2026.
| Eintrag | Wert |
|---|---|
| Dokument | Datenschutzhinweis der Plattform |
| Version | 1.0 |
| Datum des Inkrafttretens | 20. Oktober 2026 |
| Zuletzt aktualisiert | 20. Oktober 2026 |
| Herausgeber | Global Centre for Risk and Innovation (GCRI Canada) |
| Kontakt | das Kontaktformular |
Wer verantwortlich ist.
| Position | Detail |
|---|---|
| Controller | The Global Centre for Risk and Innovation (GCRI Canada), a Canadian not-for-profit organisation with its registered office in Ontario |
| Registered address | 411 Duplex Ave, Toronto, ON M4R 1V2, Canada |
| Datenschutzbeauftragter | Saeed Valadbaygi, Interim Privacy Officer, GCRI Canada, das Kontaktformular |
| Representatives in the European Union and the United Kingdom | None appointed yet under Article 27 of the GDPR or the UK GDPR; one is being appointed. Until then, write to the Privacy Officer at das Kontaktformular |
| Representative in Switzerland | A representative in Switzerland, reachable through the privacy request address above |
- 1.1 This notice supplements the main Privacy Policy of GCRI Canada, which governs the handling of personal information across all websites of GCRI Canada. It describes what the Reports sites process in addition, and the rights below apply to both. For a matter both documents address, the main Privacy Policy governs, unless this notice gives you more protection.
- 1.2 The Privacy Officer is an accountability designation under Canadian law; no data protection officer under Article 37 GDPR is designated.
- 1.3 GCRI Canada is the controller of the personal information described in this Policy: it decides why and how the information is handled. Hosting, email and similar providers are processors acting on its instructions. No joint controllership is established with any other institution for the Site.
- 1.4 GCRI Canada (The Global Centre for Risk and Innovation) is the lead contracting organisation for the Nexus Consortium and its Foundry. It is the contracting party for the Nexus Consortium’s Foundry accounts, services and consortium participation in every country and region, and runs the service under a strict not-for-profit mandate. Another organisation, such as a national consortium host or a commercial licensor, is a party only where a separately executed agreement names it.
- 1.5 GCRI Canada leads the public-good Nexus Consortium as Lead Institution, Consortium Secretariat and lead contracting organisation. The Global Risks Forum (GRF) and the Global Risks Alliance (GRA) retain independent institutional mandates as consortium stewards. Technology, infrastructure and service providers act at arm’s length and have no control over institutional governance, research, publications, national priorities or customer, sovereign and community data.
- 1.6 The Reports sites appear under the addresses of several institutions. GCRI Canada is the publisher of record and controller for every Reports site; the rest of each institution’s site has its own publisher and its own notice.
What is collected and why.
| Information | Zweck | Legal basis where the GDPR or UK GDPR applies |
|---|---|---|
| What you write to an address of the Site: name, email address, organisation, role, country and your message | Answering you and keeping a record of the exchange | Steps you ask for before an agreement, or the legitimate interest in answering correspondence and keeping an accurate record |
| Contributions you send: the material, the name you give for credit and, if you choose, your ORCID iD | Reviewing the contribution and, if it is accepted, publishing it with credit | Your consent to publication with credit, which you give when you contribute |
| Comments, consultation responses and nominations: the text, the name or organisation you choose and, for a nomination, the nominee’s details given with the nominee’s knowledge | Considering the response or nomination, publishing it where you agree, and recording the decision | Your consent to publication; for the assessment of a nomination, the legitimate interest in running a fair and recorded process |
| Registration for working groups, meetings and events: name, organisation, role, country, contact address and any access need you choose to share; images and voice in sessions announced as recorded | Organising the activity, meeting access needs, recording declared conflicts of interest and publishing recordings announced in advance | Steps you ask for, the legitimate interest in running the activity, and your consent for access needs and for appearing in recordings |
| Correction, complaint, conduct or security reports | Handling the report and recording the outcome | Legitimate interest, or a legal obligation where one applies |
| Technical data the web server processes, such as IP address, browser type, page requested and time | Delivering pages and protecting the Site against abuse | Legitimate interest in a secure, working site |
| Choices stored in your browser, such as the colour theme | Remembering a setting you asked for | Strictly necessary for a service you request; see the Cookie Policy |
Please do not send health, security-sensitive or other special-category information, or personal information about other people, in a first message. The pages of the Site have no user accounts and ask for no password; a feature that needs an account has its own notice. The Site does not use personal information for advertising, profiling or automated decisions.
Sources of information.
- 3.1 Personal information comes from you, when you write to the Site or contribute, and from your browser, when it requests a page. The Site does not buy personal information or combine it with data from other sources.
Consent and choices.
- 4.1 Where Canadian law applies, personal information is collected with your knowledge and consent for the purposes stated when it is collected, and is used only for those purposes unless you agree otherwise or the law permits or requires it.
- 4.2 You choose what to send. A contribution can be credited by name, with an ORCID iD if you wish, and no account is needed. You may withdraw consent at any time; the consequences, such as an enquiry that can no longer be answered, are explained when you do.
Who receives it.
- 5.1 GCRI Canada does not sell personal information or share it for advertising.
- 5.2 Providers that host the Site and its mailboxes process personal information on GCRI Canada’s instructions under contract, for no purpose of their own. The providers and their locations are given on request to das Kontaktformular.
- 5.3 Services that maps and tools call from your browser, such as satellite imagery and open data services, receive your IP address and browser details directly from your browser and handle them under their own terms. They are listed in the Cookie-Richtlinie.
- 5.4 Personal information is otherwise disclosed only where the law requires it, or to protect the rights, safety or security of people or the Site.
- 5.5 A contribution accepted for publication becomes public with the credit you chose. Material you send is never published with your contact details.
Where it is processed and international transfers.
- 6.1 Personal information may be processed outside the country where you live, including in Canada, the United States and the other countries in which the publisher’s providers operate.
- 6.2 Where the GDPR, the UK GDPR or the Swiss Act applies, a transfer to a country without an adequacy decision uses a safeguard the law recognises, such as standard contractual clauses. Information processed in another country is subject to its laws, including lawful access by its authorities.
How long it is kept.
- 7.1 Personal information is kept only as long as needed for the purpose for which it was collected and as the law requires, then deleted or anonymised.
- 7.2 Server and security logs are kept for a short operational period and longer only while a security incident is investigated. Correspondence is kept for as long as needed to answer it and to keep an accurate record of the exchange, and then deleted or anonymised. Records of rights requests, complaints and legal notices are kept for the period in which a claim could arise.
- 7.3 Event registrations are kept until the activity and its follow-up are complete; recordings are kept for the period stated in the notice of each recorded event.
- 7.4 Published contributions and the credit attached to them stay on the public record, because open publication is permanent; a correction or a withdrawal notice is added where needed.
Security.
- 8.1 GCRI Canada applies administrative, technical and physical safeguards appropriate to the sensitivity of the information: encrypted connections, restricted access to the Systeme that publish the Site, and processors bound by contract. No system is free of risk.
- 8.2 Where a breach creates a real risk of significant harm, or a risk to rights and freedoms, affected people and the competent authorities are notified as the applicable law requires, and the breach is recorded.
Your rights.
| Where you are | What you can ask |
|---|---|
| Canada (PIPEDA and provincial law) | You may ask for access to the personal information GCRI Canada holds about you, ask for it to be corrected, challenge its accuracy, and withdraw consent, subject to legal and contractual limits. You may complain to the Office of the Privacy Commissioner of Canada where PIPEDA applies, and the provincial privacy authority where substantially similar provincial law applies (the Commission d’accès à l’information du Québec, and the Information and Privacy Commissioners of Alberta and British Columbia). |
| Quebec (Law 25) | Residents of Quebec may also ask for their personal information in a structured, commonly used technological format, ask that dissemination of their information cease or that a hyperlink be de-indexed where the law allows, and complain to the Commission d’accès à l’information du Québec. The Privacy Officer named above handles these requests. |
| European Union and United Kingdom (GDPR, UK GDPR) | Where the GDPR or the UK GDPR applies to the processing, you may ask for access, rectification, erasure, restriction, objection and portability, withdraw consent at any time without affecting earlier processing, and complain to the data protection authority where you live or work. No representative under Article 27 of the GDPR or the UK GDPR has been appointed yet; one is being appointed. Until then, write to GCRI Canada directly at das Kontaktformular, and you may complain to your supervisory authority at any time. |
| California and other US states | GCRI Canada does not sell or share personal information as those terms are used in the California Consumer Privacy Act, and does not use it for targeted advertising or profiling. Where the CCPA or another US state privacy law applies, GCRI Canada honours the rights it provides, such as to know, correct, delete and appeal a refusal, and treats a Global Privacy Control signal as a request to opt out of any sale or sharing. |
Send a request to das Kontaktformular and say which request you are making. Your identity may be verified before a request is acted on, and you are told of any legal reason a request cannot be met. The acknowledgement gives a reference and names the next step.
Complaints.
- 10.1 Please raise a concern with the publisher first, at das Kontaktformular; it will answer in writing and say what it has done.
- 10.2 You may always complain to a data protection authority. You may complain to the Office of the Privacy Commissioner of Canada where PIPEDA applies, and the provincial privacy authority where substantially similar provincial law applies (the Commission d’accès à l’information du Québec, and the Information and Privacy Commissioners of Alberta and British Columbia). Residents of the European Union and the United Kingdom may complain to the authority where they live or work, and residents of other places to the authority that applies the law there.
Children.
- 11.1 The Site is not directed to children under 16 and does not knowingly collect their personal information. Information found to have been sent by a child is deleted. A parent or guardian who believes a child has written to the Site may ask for its deletion at das Kontaktformular.
Signals, cookies and changes.
- 12.1 The Site does not track you across other sites, so a Do Not Track signal changes nothing about how it operates. A Global Privacy Control signal is treated as described above.
- 12.2 Cookies and browser storage are explained in the Cookie-Richtlinie.
- 12.3 Changes to this Policy are published on this page with a new version and effective date.
Status dieses Dokuments.
Vor der Annahme zur Prüfung durch die Rechtsberatung vorbereitet.
Fragen und Antworten.
Will my enquiry be added to a mailing list?
Can I contribute without giving my name?
Evidenz von dieser Seite aus beitragen.
Reports is the Consortium’s quarterly publication, written by six desks. This page sits with the GCRI System Evidence des Global Centre for Risk and Innovation (GCRI). Was Sie zu diesem Thema wissen, kann in der nächsten Ausgabe zu Evidenz, einem Fallbeispiel oder einer Korrektur werden, mit Nennung Ihres Namens und, sofern es Ihre eigene Arbeit ist, veröffentlicht unter CC BY 4.0. An die falsche Redaktion gesendet, wird es weitergeleitet, nicht abgelehnt.
- E-MailZugang GW-GCRIVon dieser Seite aus sendenEvidenz, eine Korrektur, ein Fall, eine Methode, eine Prüfung, eine Übersetzung oder ein Beitrag zu einem Profil. Sie kommt mit dieser Seite gekennzeichnet an, sodass die zuständige Redaktion sie erhält.
- ZenodoOffene HinterlegungHinterlegen und bei der Community einreichenVeröffentlichen Sie Ihren eigenen Eintrag auf Zenodo mit Ihrer ORCID iD und reichen Sie ihn dort bei der Reports-Community ein. Kuratorinnen und Kuratoren prüfen ihn; der DOI bleibt bei Ihnen.
- BerichteGCRISehen Sie, welche Stelle Ihr Anliegen übernimmtDie Weiterleitungstabelle öffnet die Beitragsseite: was Sie haben, welche Redaktion es übernimmt, wie jeder Beitrag geprüft und gewürdigt wird und unter welcher Lizenz.
Senden Sie nie personenbezogene Daten, sensible Infrastrukturdetails oder etwas, das Sie nicht weitergeben dürfen. Ein Beitrag wird vor der Nutzung geprüft; das Einsenden begründet weder Urheberschaft noch redaktionelle Rechte, und Sponsoring erkauft nie ein Ergebnis.
Legal documents of Reports.
Rechtliche Dokumente.
Karten, Daten und Zahlen auf dieser Website werden zu Kontext- und allgemeinen Informationszwecken gezeigt. Sie sind weder Beratung noch Prognosen oder Warnungen; die Grenzen der Information sind in den Haftungsausschlüssen und Datenhinweisen dargelegt.
CC BY 4.0 Free to read. Text and figures: CC BY 4.0. Data: CC0 1.0. Authors keep copyright. Published by GCRI Canada.
