Cookie Notice - Global Mayors Academy
We use cookies and similar tracking technologies to ensure the secure and effective operation of our website and learning platform, to improve your user experience, to analyse our website traffic, and to understand where our visitors are coming from. Essential cookies are always active. With your consent, we also use analytics and optional cookies to enhance content and communications.

You can consent to all cookies, decline all optional cookies, or manage your preferences at any time through our consent management tool. Without a selection, our default cookie settings will apply.

For detailed information about the cookies we use, their purposes, retention periods, and third-party providers, please review our Cookie Policy.
Cookie Notice - Global Mayors Academy
Cookie Settings
This site uses cookies. We use cookies mainly to improve and analyze your experience on our websites and for marketing purposes. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change your default settings. Blocking some types of cookies may negatively impact your experience on the site and limit the services we are able to provide.
Essential Cookies
Always On. These cookies are required for the website to function properly, including security, authentication, and accessibility features. They cannot be turned off. They're set in response to requests made by you, such as setting your privacy preferences, logging in or filling in forms.
Performance and Analytics Cookies
Disabled
These cookies collect information to help us understand how our platforms are being used or how effective our marketing campaigns are, or to help us improve content, functionality, and user experience.
Data Protection Impact Assessment
Effective Date: 1st February 2026
Version 1.0
DATA PROTECTION IMPACT ASSESSMENT (DPIA)

1. Project DescriptionProcessing of personal data of course participants, subscribers, and event attendees through digital platforms.
Data Collected:
  • Name
  • Email
  • Phone number
  • Address
  • Organisation
  • Payment details (if applicable)
Purpose:
  • Course registration
  • Communication
  • Service delivery
  • Payment processing
  • 2. Lawful BasisArticle 6(1)(b) – Contractual necessity
  • Article 6(1)(a) – Consent (marketing)
  • Article 6(1)(f) – Legitimate interests
3. Necessity & Proportionality AssessmentData collected is limited to what is necessary for:
  • Identity verification
  • Communication
  • Service provision
Data minimisation principles are applied.
  • 4. Risk Assessment Identified Risks:Unauthorised access
  • Data breach
  • Phishing targeting participants
  • International transfer risk
Risk Level:Medium (standard CRM + email database risk profile)
  • 5. Mitigation MeasuresSSL encryption
  • Secure hosting
  • Access controls
  • Two-factor authentication
  • Data Processing Agreements
  • SCCs for international transfers
  • Regular software updates
6. Residual RiskLow to Medium after safeguards implemented.
  • 7. ConsultationIf residual high risk remains, consultation with the ICO (UK) may be required before processing.
Made on
Tilda