Privacy Policy
This policy explains how personal data submitted through the Global Boards Alumni website is collected, used and protected.
1. Data controller
The controller is COSAIL SLU, company registration number L-712446-Y, c/ Pau Casals 10, 3rd floor, AD500 Andorra la Vella, Principality of Andorra. Privacy contact: hello@alumnigb.com.
2. Data we collect
Through the enquiry form we collect the contact details, profile, organisation, country, message and communication preference you provide. Through the advisor application we collect identification and contact details, location and time zone, professional profile and experience, board and governance background, motivation, availability, referral information, declarations and, optionally, your CV.
For abuse prevention, we temporarily process a pseudonymised identifier generated from your IP address. The raw IP address is not stored in the form record, and the identifier is retained for no more than one hour.
3. Why we use your data
- To receive and respond to enquiries.
- To assess advisor applications, contact applicants and administer the admissions process.
- To protect the forms against abuse and repeated submissions.
- To send news and updates only when separately requested.
- With your consent, to understand website use and traffic sources through Google Analytics.
4. Legal basis
Enquiry and application data is processed to take steps at your request and, where applicable, for pre-contractual measures. We also rely on legitimate interests in managing admissions, responding to enquiries and protecting the website, balanced against your rights. News updates and Google Analytics are based on consent, which may be withdrawn at any time.
5. Retention
Enquiry data is normally kept for up to 24 months after the last substantive interaction. The complete admissions record, including the CV when supplied, is kept while an active relationship exists and remains relevant. When that relationship ends, it is kept for a further five years. If no subsequent relationship is established, the five-year period starts from the last substantive interaction in the admissions process. Data may be blocked for longer where required by law or for a specific legal claim. Truly anonymous statistics may be retained.
6. Recipients and international transfers
Data may be accessed by authorised COSAIL SLU personnel and service providers supporting hosting, email, security and analytics. They act under appropriate obligations. Google Analytics is activated only with consent and may involve international transfers under the safeguards described by Google. We do not send form answers, names, email addresses, CVs or filenames to Analytics.
7. Your rights
Subject to applicable law, you may request access, correction or deletion, restriction, portability, or object to processing. You may withdraw consent without affecting prior processing. Contact hello@alumnigb.com. You may also complain to the Andorran Data Protection Agency (APDA).
8. Security and cookies
We use technical and organisational measures designed to protect personal data. CVs are accepted only as PDF files up to 10 MB and are made available to authorised administrators through a protected download. See our Cookie Policy and use Cookie settings below to change your Analytics choice.
9. Updates
Effective date and last updated: 25 September 2026. We may update this policy when our services, providers or legal obligations change.