Privacy Policy

Last updated: 24 May 2026

1. Who we are

St Paul Global Week is an international Catholic faith-tourism gathering held in Tarsus and Mersin, Türkiye, on 28-30 June 2026. The project is operated by a Turkish-registered team and is run in coordination with the local authorities. For privacy questions or data-subject requests, write to info@stpaulglobalweek.com.

2. What data we collect

We collect three kinds of data:

• Inquiry form data. When you submit the contact, delegate, or sponsor form on this site, we receive the fields you provide (name, email, organisation, message). This is stored on our server and emailed to the relevant project mailbox.
• First-party site analytics. Anonymous page views and link clicks (no cookies, no fingerprint) are recorded server-side so we can see which pages people read and which links they follow. No personal identifier is stored.
• Google Analytics 4 (legitimate interest, opt-out via banner). We use Google Analytics to understand how visitors use the public pages — which pages are read, how long, from which countries. Google Analytics sets cookies in your browser by default. You can opt out at any time by clicking “Decline” on the consent banner — your choice is remembered for future visits. We do not run Google Ads tracking, profiling, or remarketing on this site.

3. Why we collect it (legal basis)

• Inquiry forms — to respond to your request (contract / pre-contract under GDPR Art. 6(1)(b); explicit request under KVKK Art. 5).
• First-party analytics — legitimate interest in measuring how the public site is used (GDPR Art. 6(1)(f); KVKK legitimate interest). No personal data.
• Google Analytics — legitimate interest in understanding aggregate site usage, with a clear opt-out via the banner (GDPR Art. 6(1)(f); KVKK Art. 5/2(f) legitimate interest). No advertising, no profiling, no cross-site tracking — only first-party aggregate measurement.

4. Cookies

Google Analytics sets the following cookies in your browser, unless you opt out via the consent banner:

• _ga — distinguishes unique visitors (2 years).
• _ga_<ID> — Google Analytics 4 session state (2 years).

You can change your mind at any time by clearing cookies for stpaulglobalweek.com in your browser — the banner will reappear on your next visit.

5. Who we share it with

• Google Ireland Ltd. — Google Analytics 4, only if you accept analytics cookies. Google acts as a data processor.
• No one else. We do not sell, rent, or share data with advertisers, brokers, or unrelated third parties. Inquiry-form data is read only by the project team.

6. How long we keep it

• Inquiry-form submissions — for the duration of the project plus 12 months, then deleted.
• First-party analytics logs — 90 days, then aggregated and the raw logs deleted.
• Google Analytics — Google retains user-level data for 14 months, then automatically deletes it.

7. Your rights

Under the GDPR (EU/EEA) and KVKK (Türkiye), you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted (right to erasure);
• object to processing or restrict it;
• withdraw consent at any time (this does not affect lawful processing carried out before withdrawal);
• lodge a complaint with your data protection authority — in Türkiye that is KVKK; in the EU your national supervisory authority.

To exercise any of these rights, email info@stpaulglobalweek.com. We respond within 30 days.

8. International transfers

Inquiry-form data is stored on a server located in the Netherlands (European Union). Google Analytics may transfer data to the United States; Google relies on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework for this transfer.

9. Changes to this policy

If we change how we handle data, we will update this page and update the “Last updated” date at the top. Material changes will be announced on the home page banner.