Privacy & Cookie Policy

AIESEC in Azerbaijan (“AIESEC AZE”, “we”, “us”, or “our”) is the local member committee of AIESEC International — the world's largest youth-led organisation operating in 120+ countries. We are headquartered at Nizami 203B, Baku, Azerbaijan.

This Privacy & Cookie Policy describes how we collect, use, share, and protect personal information when you visit aiesec.org.az, apply for our programs, register for events, or otherwise interact with us online or offline.

This policy should be read alongside the AIESEC International Privacy Policy, which covers data processed through global AIESEC platforms (such as aiesec.org and the AIESEC opportunity portal).

For questions, requests, or concerns about this policy or how your data is handled, contact us at:

• AIESEC in Azerbaijan
  Nizami 203B, Baku, Azerbaijan
  azerbaijan@aiesec.net

For matters relating to data processed on global AIESEC platforms, you may also contact the AIESEC International Data Protection Officer at dpo@ai.aiesec.org.

3.1 Information you provide directly

• Contact & registration forms: name, email address, phone number, university, year of study, and program interest when you apply to join AIESEC or register for an event.
• Correspondence: messages you send us via email or social media.

3.2 Information collected automatically

• Usage data: pages visited, time spent on site, referring URL, browser type, and device type — collected via cookies and similar technologies (see Section 8).
• Log data: IP address and server logs generated when you access our website.
• Analytics data: aggregated behavioural data collected via Google Analytics (see Section 8 for details and opt-out options).

3.3 Information from third parties

• If you interact with our social media pages (Facebook, Instagram, LinkedIn, TikTok, Telegram) those platforms may share limited profile data with us in accordance with their own privacy policies.
• If you register via a Google Form or similar third-party tool, that provider's privacy policy also applies to your submission.

We use collected information to:

• Process program applications and event registrations.
• Communicate with you about your application status, upcoming events, and AIESEC opportunities.
• Improve our website, programs, and services.
• Conduct internal reporting on participation and social impact.
• Comply with legal obligations.
• Send you relevant program opportunities (you can opt out at any time — see Section 9).

Where applicable under data protection law (including GDPR for individuals in the European Economic Area), we rely on the following legal bases:

• Consent — when you voluntarily submit a form or accept non-essential cookies.
• Contractual necessity — to fulfil the program or event you applied for.
• Legitimate interests — to improve our services and communicate relevant opportunities, balanced against your privacy rights.
• Legal obligation — to comply with applicable laws.

Our website and operations rely on the following third-party services that may process your personal data:

• Google Analytics — we use Google Analytics to understand how visitors use our site. Google may collect your IP address and usage data. You can opt out via the Google Analytics Opt-out Browser Add-on.
• Google services — including Google Forms for event registrations. Google's privacy practices are governed by the Google Privacy Policy.
• Amazon Web Services (AWS) — our infrastructure is hosted on AWS, which provides enterprise-grade security for data storage and processing.
• Social media platforms — Facebook, Instagram, LinkedIn, TikTok, and Telegram. Interactions on those platforms are governed by their respective privacy policies.
• AIESEC International platforms — if you proceed to apply for a program on aiesec.org, your data is processed by AIESEC International under their privacy policy.

We do not sell your personal data to third parties.

As a member of the global AIESEC network operating in 120+ countries, your data may be transferred to and processed in countries outside Azerbaijan, including countries within the EU/EEA and others. When such transfers occur we ensure appropriate safeguards are in place — such as standard contractual clauses or the recipient's compliance with applicable data protection frameworks.

Data hosted on AWS infrastructure benefits from AWS's international compliance certifications including ISO 27001 and SOC 2.

Our website uses cookies and similar technologies to enhance your experience and collect usage statistics. The types of cookies we use:

• Essential cookies — necessary for the website to function (e.g. storing your cookie consent preference). These cannot be disabled.
• Analytics cookies — set by Google Analytics to help us understand visitor behaviour (pages viewed, session duration, traffic sources). Data is aggregated and anonymised.
• Social media cookies — set when you interact with embedded social content or share buttons (Facebook, Instagram, LinkedIn, TikTok).

When you first visit our site you will be prompted to accept or decline non-essential cookies. You can manage or withdraw consent at any time by:

• Clearing your browser cookies and revisiting the site to reset your preference.
• Adjusting your browser's built-in cookie settings (see your browser's help documentation).
• Installing the Google Analytics Opt-out Add-on to prevent Google Analytics tracking across all sites.

Note that disabling certain cookies may affect website functionality.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate information.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior processing.

To manage communication preferences for global AIESEC platforms, visit aiesec.org/profile/preferences.

To exercise rights related to data held by AIESEC in Azerbaijan, contact us at azerbaijan@aiesec.net. We will respond within 30 days.

We retain your personal data only as long as necessary for the purposes described in this policy or as required by law:

• Application and registration data is kept for the duration of the relevant program cycle and up to 2 years thereafter for reporting purposes.
• Email correspondence is retained for up to 3 years unless you request earlier deletion.
• Website analytics data is retained in aggregated, anonymised form.

Our programs are intended for individuals aged 18 and above (or the legal adult age in your country). We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it promptly.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, including:

• HTTPS encryption for all data transmitted to and from our website.
• AWS infrastructure security, including physical data centre security, network firewalls, and access controls.
• Restricted internal access to personal data on a need-to-know basis.
• Regular security reviews.

However, no internet transmission is completely secure. We encourage you to contact us immediately at azerbaijan@aiesec.net if you suspect unauthorised access to your data.

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically. Continued use of our website or services after changes constitutes acceptance of the updated policy.