Privacy

How Regenerative Voices handles personal data under the EU General Data Protection Regulation (GDPR). Last updated 30 October 2026.

In short

  • We list people and organisations doing regenerative work, using information they have made public about their professional work. Nobody pays to be listed and nobody is a member.
  • If you are listed, you can correct your profile, claim it, or ask us to remove it at any time. We act on removal requests within 72 hours.
  • We never sell personal data and never use it for advertising.
  • Posts from LinkedIn and Instagram appear only if the person or organisation has switched them on, and only load after you click.
  • We use no tracking cookies. Our visitor statistics are anonymous.

Who is responsible

The data controller is [LEGAL NAME OF CONTROLLER], [ORGANISATION NUMBER], [POSTAL ADDRESS], Sweden. Contact us about privacy at privacy@regenerativevoices.com. We answer within one month, usually much faster.

What we process and why

WhoWhatWhyLegal basis
People listed in the directoryName, professional title, organisations and roles, city and country, region, short bio, focus areas, interests, contribution badges, public quotes with their source, initiatives such as books, courses or farms, links to LinkedIn, Instagram and websitesTo recognise and make findable people doing regenerative work, in their own wordsLegitimate interest, Article 6(1)(f). We only use information about professional work that the person has made public themselves.
People who claim their profileEmail address, login records, settings such as “show my latest posts” and permission to be taggedTo let you manage your own profileContract, Article 6(1)(b), and consent, Article 6(1)(a), for each optional setting
Photos and logosA profile photo uploaded by the verified person, or a logo uploaded by a verified representative or taken from the organisation’s own website once the representative has approved it. We remove location and camera data from the file.To show who is behind a profileConsent and contract, Article 6(1)(a) and (b). Kept until you replace or delete it, and removed within 72 hours if the profile is removed.
Organisations and their representativesOrganisation details and links; the representative’s name, role and work emailTo show the organisation and let it manage its pageLegitimate interest, Article 6(1)(f)
People who nominate someoneYour name, email, and what you write in the nominationTo review the nomination and tell you the outcomeLegitimate interest, Article 6(1)(f). We never publish your email.
Today’s weaveTwo listed people, one quote each, and a short text about what connects themTo share regenerative work across regions, on the site and on LinkedInLegitimate interest, Article 6(1)(f); tagging on LinkedIn only with consent, Article 6(1)(a)
VisitorsAnonymous, aggregated page statistics without cookies; technical server logsTo keep the site working, secure and usefulLegitimate interest, Article 6(1)(f)

Information that may reveal origin or beliefs

Some people describe themselves publicly as Indigenous, or describe spiritual or political work. We include this only when the person has clearly made it public themselves as part of their work (Article 9(2)(e)), we never infer it, and we remove it on request.

Suggested connections

In The Weave, dashed threads are suggestions computed from shared focus areas, place and public profile text. They are labelled as suggestions, never as facts. You can hide every suggestion about yourself from your profile settings.

Automated help

We use an AI service to draft short texts, such as what connects two people in Today’s weave. Drafts are based only on information already on their profiles, and a person always reviews them before anything is published. We make no automated decisions with legal or similarly significant effects.

Where the data comes from

For people we list, the information comes from what they have published themselves: their LinkedIn profile, their own or their organisation’s website, interviews, talks, books and articles. Every quote carries its source. Some profiles come from nominations, which a curator checks against public sources before anything is published. When we add someone, we tell them within one month and explain how to correct or remove the profile, as Article 14 requires.

Who else handles it

We use these service providers, under data processing agreements:

ProviderUsed forWhere
VercelHosting, domain, anonymous statistics, scheduled jobsGlobal network; EU–US Data Privacy Framework and standard contractual clauses
SupabaseDatabase, login and file storageEU region
ResendEmails such as nomination receipts and login links[REGION]; standard contractual clauses
AnthropicDrafting short texts from profile dataUnited States; standard contractual clauses; not used to train models
Map tiles: OpenFreeMapShowing the mapEurope; no cookies, no account
TaplioScheduling Today’s weave on LinkedIn: names, quotes and the share image of the two people featured[REGION]; standard contractual clauses
Meta (Instagram) and LinkedInShowing posts that a person or organisation has chosen to show, and publishing Today’s weave via TaplioTheir own privacy terms apply once you load their content

We never sell or rent personal data.

Cookies and embedded posts

The site itself sets only cookies that are strictly needed, such as keeping you logged in. Posts from LinkedIn and Instagram are not loaded until you click “Show posts”, because those services set their own cookies and may track you. Your choice is remembered on your device, and you can change it at any time.

How long we keep it

  • Profiles: as long as the person is listed. We review every profile at least once a year.
  • Photos and logos: until replaced or deleted; removed with the profile.
  • Removed profiles: deleted within 72 hours. We keep only a record that removal was asked for, so we do not add the person again.
  • Nominations not taken forward: deleted after 12 months.
  • Version history of edits: 24 months.
  • Server logs: 30 days.

Your rights

You have the right to see the data we hold about you, have it corrected, have it erased, restrict how it is used, receive it in a portable format, and object to our processing based on legitimate interest. When you object to being listed, we remove the profile. Where we rely on your consent, you can withdraw it at any time.

You can also complain to a data protection authority. In Sweden that is Integritetsskyddsmyndigheten (IMY), imy.se, or the authority where you live or work.

Correct or remove a profile

If you are listed, you do not need an account to ask. Tell us which profile it is and what you want changed or removed. We act within 72 hours and confirm by email.

Ask for removalClaim and edit your profile

Changes to this notice

When we change how we handle personal data, we update this page and the date at the top. If the change affects people who are listed, we tell them by email first.