Last updated: May 2026

Who We Are

The Institute for Strategic Risk and Security (ISRS) is an independent, non-profit NGO registered in Geneva, Switzerland. Our website is located at www.isrs.ngo.

For questions about this policy or your personal data, contact us at info@isrs.ngo.

What Data We Collect and Why

ISRS collects personal data through two channels.

Mailing list signups. When you subscribe to ISRS communications, we collect your email address and, if provided, your name. The legal basis for this processing is your consent. You may withdraw consent at any time by clicking the unsubscribe link in any email we send, or by contacting us at info@isrs.ngo. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Contact form submissions. When you use our contact form, we collect the information you choose to provide, which may include your name, email address, organizational affiliation, and the content of your message. The legal basis for this processing is our legitimate interest in responding to inquiries directed to us. We retain this information only as long as necessary to respond to and follow up on your inquiry.

Analytics and Cookies

Our website uses Google Analytics to understand how visitors interact with our content. Google Analytics collects data including your IP address, browser type, pages visited, time spent on pages, and referring URLs. This data is processed by Google LLC, which is based in the United States.

Google Analytics sets cookies on your device to distinguish users and sessions. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

We do not use tracking cookies for advertising purposes. We do not sell your data or share it with third parties for marketing purposes.

International Data Transfers

ISRS is based in Switzerland, which the European Commission has recognized as providing adequate protection for personal data. However, some services we use — including Google Analytics and our mailing list platform — process data on servers located in the United States.

These transfers take place under appropriate safeguards, including Standard Contractual Clauses approved by the European Commission. You may request information about the specific safeguards in place by contacting us at info@isrs.ngo.

How Long We Keep Your Data

We retain mailing list data for as long as you remain subscribed. If you unsubscribe, your data is deleted within 30 days unless retention is required by law.

Contact form data is retained for as long as necessary to address your inquiry and for a reasonable period thereafter in case of follow-up, typically no longer than 12 months.

Analytics data is retained in accordance with Google's standard retention settings, which you can review in Google's Privacy Policy.

Your Rights Under EU and Swiss Law

If you are located in the European Economic Area or Switzerland, you have the following rights regarding your personal data:

Access. You may request a copy of the personal data we hold about you.

Rectification. You may ask us to correct inaccurate or incomplete data.

Erasure. You may ask us to delete your personal data where there is no legitimate reason for us to continue holding it.

Restriction. You may ask us to restrict processing of your data in certain circumstances.

Portability. Where processing is based on your consent, you may ask us to provide your data in a structured, commonly used, machine-readable format.

Objection. Where processing is based on legitimate interests, you may object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Withdraw consent. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@isrs.ngo. We will respond within 30 days. We may need to verify your identity before processing your request.

If you believe your data has been handled in violation of applicable law, you have the right to lodge a complaint with a supervisory authority. In Switzerland, the relevant authority is the Federal Data Protection and Information Commissioner (FDPIC). In EU member states, complaints may be directed to the data protection authority in your country of residence.

Third-Party Links

Our website contains links to external websites, including partner organizations and publications. This policy applies only to data collected by ISRS. We are not responsible for the privacy practices of third-party sites and recommend reviewing their policies directly.

Changes to This Policy

We may update this policy from time to time. Material changes will be noted by updating the date at the top of this page. We encourage you to review this policy periodically.

Contact

Institute for Strategic Risk and Security
12 Rue Le-Corbusier
1208 Geneva
Switzerland
info@isrs.ngo