Gestalt Research Association is an international association of Gestalt therapy researchers; we own the website gestaltresearchassociation.com together with the subdomain csp.gestaltresearchassociation.com, which hosts the Case Study Project.
Contact for all questions about data: gestaltresearchassociation@gmail.com.
We are the controller of personal data within the meaning of the Law of Ukraine "On Personal Data Protection" No. 2297-VI. For people in the European Union we also comply with Regulation (EU) 2016/679 (GDPR).
Association membership form. First and last name, email address, phone number, citizenship, city and country of residence, education, area of participation in the association, professional experience, expectations of membership, and whether Telegram is convenient for contact. The form lives in Google Forms, so Google receives these answers together with us.
Application to the researchers' network. Name, country, city, website, and a short description of the activity. For organizations, journals, and publications: name, description, and publication details.
Account and profile. If you sign in through Google, we receive your email address, name, and a link to your profile photo. If you register by email, we store the address and an encrypted hash of the password; we do not see the password itself. You fill in the rest of the profile fields yourself.
Photos. A photo you add to your profile is stored as a file in Vercel Blob storage.
Technical data. Which pages were opened, from which country, and from what type of device. Vercel Analytics collects this: it does not set third-party cookies, it marks the visitor with a hash from the request, and that hash lives for 24 hours. Vercel hosting logs contain the IP address.
Language choice. It sits in your browser's memory under the key gra-lang and does not reach our server.
To show you on the website if you asked for this yourself: a member card, a point on the researchers' map, a conference speaker card.
To write to you: confirm registration, send a link to change the password, reply to an application.
To see which pages are read and which countries people visit from: this data is de-identified and does not let anyone reconstruct what a specific person did.
The basis for processing is your consent, which you give when you submit a form or an application or create an account. Consent can be withdrawn at any time.
Vercel - website hosting and photo storage. A company in the United States.
Turso - the database. Our database is located in the Ireland region.
Resend - sending emails from noreply@gestaltresearchassociation.com.
Google - sign-in through a Google account and the membership form in Google Forms.
We do not share your data with anyone else. We do not sell it and we do not give it to advertisers.
The database is in Ireland, photos are on servers in the United States, and emails go through a US company. By sending us data, you agree to this transfer. All three companies operate under the European standard contractual clauses.
The profile and the member card - while you are in the association or until you ask us to remove them.
An application that was rejected - up to three months, then we delete it.
Technical statistics - for the periods set by Vercel.
Correspondence about data rights - three years, because we must be able to show that we carried out your request.
To know exactly what data we hold about you, where it came from, and who received it.
To receive a copy of this data.
To correct what is inaccurate or complete what is incomplete.
To delete data or restrict work with it.
To withdraw consent. After that we remove you from the website.
To object to processing.
To complain to the Ukrainian Parliament Commissioner for Human Rights. If you are in the European Union, to the supervisory authority of your country.
Write to gestaltresearchassociation@gmail.com. We reply within thirty calendar days. If the request is complex, we will let you know and extend the period.
There are no advertising or tracking cookies on the website.
After sign-in, one session cookie appears - without it the website cannot recognize you between pages. It disappears when you sign out.
The language choice sits in the browser's memory, and that is a different mechanism from a cookie.
The website is intended for professionals and researchers, so we do not knowingly collect data of persons under sixteen; if that happens, write to us and we will delete the record.
The website works only over a secure connection, passwords are stored as a hash that cannot be decrypted, and two association administrators have access to the database.
No website can promise absolute protection. If a breach occurs that threatens your rights, we will notify you and the Commissioner.
When we change this policy, the date at the top of the page will change. We will write about material changes to those who have an account.