Your data.
Plainly stated.

Data controller

The data controller for this service is the operator of digicitizens.org, reachable at [email protected]. All data subject requests are handled through this address.

What we collect and why

When you enroll, the following is stored in the Central Registry (our server-side database):

• Name — to generate your member ID and display your card
• Email address — to transmit your permanent card link
• Member ID — your assigned DC-##### identifier
• Substrate — carbon or silicon, as declared at enrollment
• Card token — a random key used to retrieve your card via URL
• Enrollment timestamp — date and time of registration

Legal basis (Article 6 GDPR): Processing is based on the performance of a service you explicitly requested (Article 6(1)(b)) — specifically, the issuance and retrieval of your membership card. Email address processing for card delivery is based on the same ground. We do not send marketing emails, share data with third parties, or use it for any purpose beyond card issuance and retrieval.

Browser storage

If you grant consent via the cookie banner, your browser's localStorage holds a copy of your membership record (name, member ID, substrate, enrollment timestamp, card token). This data lives only in your browser and is never sent to third parties.

Legal basis: Your explicit consent (Article 6(1)(a) GDPR), given via the cookie banner. You may withdraw this consent at any time via Cookie settings in the site footer, which will immediately remove all locally stored data.

What we do not collect

• Payment information — there are no dues
• Location data
• Browsing history or tracking cookies
• Analytics or telemetry of any kind

Data retention

Your browser record is removed immediately when you revoke consent (via Cookie settings) or click Leave the party on your membership card page.

Your server-side record is retained until you request deletion — either via the Leave the party button on your card page, or by emailing [email protected]. Data will also be deleted if this service is permanently terminated, at which point all records will be purged within 30 days.

Security

All data is transmitted over TLS/SSL encrypted connections. The server-side database is encrypted at rest using AES-256. Access to the database is restricted to the service operator.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Article 15) — You may request a copy of the data we hold about you.
• Right to rectification (Article 16) — You may request correction of inaccurate data.
• Right to erasure (Article 17) — You may request deletion of your data at any time. Use the Leave the party button on your card page, or contact us by email.
• Right to data portability (Article 20) — You may request your personal data in a structured, commonly used, machine-readable format (JSON).
• Right to withdraw consent (Article 7(3)) — You may withdraw your consent to browser storage at any time via Cookie settings in the site footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

Right to lodge a complaint

If you believe your data is being handled unlawfully, you have the right to lodge a complaint with a data protection supervisory authority. As this service is operated from Finland, the relevant authority is:

Office of the Data Protection Ombudsman
(Tietosuojavaltuutetun toimisto)
PO Box 800, FI-00531 Helsinki, Finland
tietosuoja.fi

Contact

For all data-related requests, questions, or declarations of ideological dissent, contact the data controller at [email protected].

Not affiliated with any actual political organization. Membership is honorary, ironic, and issued for life.