Privacy Policy

Effective Date: April 1, 2019
Last Updated: June 11, 2025

We appreciate your interest in the International Geothermal Association (IGA). Data protection is a high priority for us. Generally, you can use our website without providing personal data. However, if you wish to use specific services, the processing of personal data may become necessary. In such cases, and where no legal basis exists, we will obtain your consent.

Our data processing is in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws. This Privacy Policy explains the nature, scope, and purpose of personal data we collect and process. It also informs you of your rights as a data subject.

Despite our technical and organizational safeguards, internet-based data transmissions may have security gaps. If you prefer, you may also transfer personal data to us via alternative means (e.g., by telephone).

01. Definitions

This policy follows the terminology used in the GDPR. Definitions include:

Personal data: Any information relating to an identified or identifiable natural person.
Data subject: The person whose data is processed.
Processing: Any operation involving personal data (e.g., collection, use, storage).
Controller: The party responsible for determining the purposes and means of processing.
Processor: A party processing data on behalf of the controller.
Consent: Freely given, informed, and unambiguous indication of the data subject’s wishes.

02. Controller Contact

International Geothermal Association
Lise-Meitner-Allee 24
D-44801 Bochum, Germany

Email: iga@lovegeothermal.org
Website: www.worldgeothermal.org

03. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small files stored on your device that help recognize your browser and improve usability. You can prevent cookies through your browser settings. However, disabling cookies may limit the functionality of the website.

04. General Data Collection

When you visit our site, we collect the following anonymized information:

Browser type and version
Operating system
Referrer URL
Pages accessed
Date and time of access
IP address (anonymized)
ISP name
Other diagnostic data

These data help ensure system security, optimize the website, and support law enforcement in case of cyberattacks. They are stored separately from personal data and not used to identify individuals.

05. Registration

If you register on our website, we collect personal data via forms. These are used for internal purposes only. IP address and timestamp of registration are stored to prevent abuse. Registered users may modify or delete their data at any time. Requests for access, rectification, or deletion can be submitted to the IGA.

06. Newsletter Subscription

Users can subscribe to our newsletter by providing a valid email address. We use a double opt-in process and log IP address and registration time. You may unsubscribe at any time using the link in the newsletter or by contacting us. We use ActiveCampaign for this service. See their privacy policy here: https://www.activecampaign.com/legal/privacy-policy.

07. Data Storage and Deletion

We retain personal data only as long as needed for the stated purpose or as required by law. Once the retention period expires, data is deleted or blocked per legal requirements.

08. Your Rights as a Data Subject

You have the right to:

Confirm whether we process your data
Access your personal data
Rectify inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing under certain conditions
Data portability
Object to processing, including profiling and direct marketing
Not be subject to automated decision-making
Withdraw consent at any time

To exercise any of these rights, contact us at iga@lovegeothermal.org.

09. Applications

We collect applicant data to manage the recruitment process. If hired, your data will be used for employment purposes. If not hired, your data will be deleted after 2 months unless legal obligations require otherwise (e.g., under AGG).

10. Use of YouTube

We embed YouTube videos on our site. When accessing such pages, YouTube (a Google company) may collect data, especially if you are logged into your YouTube account. You can prevent this by logging out before accessing our website. More information: https://www.google.com/intl/en/policies/privacy/

11. Use of ActiveCampaign

We use ActiveCampaign to manage our email marketing and automation workflows. ActiveCampaign may collect information if you interact with embedded forms or emails. More info: https://www.activecampaign.com/legal/privacy-policy

12. Use of Stripe

Stripe is used to process online payments (e.g., for membership fees). When making payments, personal and payment data may be transferred to Stripe. Privacy policy: https://stripe.com/privacy

13. Use of Matomo

We use Matomo, a GDPR-compliant web analytics platform, to analyze site usage. Matomo anonymizes IP addresses and does not transfer data to third parties. You can opt out of tracking through browser settings or the privacy options on our website.

14. Legal Bases for Processing

Consent: Art. 6(1)(a) GDPR
Contract fulfillment: Art. 6(1)(b)
Legal obligation: Art. 6(1)(c)
Vital interests: Art. 6(1)(d)
Legitimate interests: Art. 6(1)(f), such as improving services or securing our website

15. Legitimate Interests

Where processing is based on Art. 6(1)(f), our interest is to operate our association efficiently and serve our members.

16. Storage Period

Personal data is retained based on statutory retention periods. After expiration, it is deleted unless still needed for contractual or legal reasons.

17. Necessity of Providing Data

Providing personal data may be required by law or contract. If not provided, we may not be able to deliver requested services or enter into agreements.

18. Automated Decision-Making

We do not use automated decision-making or profiling.