Internet Exchange Point

LONAP Privacy Statement

LONAP respects your privacy and is committed to protecting your personal data. This privacy statement explains what information we collect, why we collect it, how we use it, and the rights you have under the General Data Protection Regulation (GDPR).

It covers:

  • What personal data we collect
  • How we use and store your data
  • Your rights under GDPR
  • How we protect your data
  • How we share information
  • How we use cookies
  • How to contact us with questions or complaints

We only collect personal data with your consent. Any information you provide will be kept secure and treated with confidentiality in line with GDPR.

By using the LONAP website, you agree to the terms of this privacy statement.


What data we collect

When you use our website, we may collect:

  • Standard usage data via Google Analytics (e.g. pages visited, browser type, time spent)
  • Information you provide directly, such as when you:
  • Email us
  • Fill out a form
  • Register for an event

This may include your name, email address, and any message you include. We do not collect personal data unless you provide it. We don't share your information with third parties unless required by law.

If we store your personal data, it will be for as long as necessary to carry out the purpose for which it was collected. We take steps to ensure it is processed and stored securely and in line with GDPR at all times.

Members and Customers

When a representative from your Organisation completes the LONAP joining form to become a member of the company or a customer we will collect further information about you. We will collect:

  • Your name
  • The names of colleagues we need to contact to provide our Service
  • Company name and company details
  • Telephone number(s)
  • Address
  • Email address

We use this information to provide our Service to your company, among other things we will use it to;

  • send you invoices, reminders and statements
  • contact you about technical issues
  • verify your details where we suspect fraudulent use of our services
  • verify your details when you contact us for technical support
  • notify you about General Meetings and Director Elections
  • notify you about changes to terms and conditions

We will also use this information to notify you of feature changes to the platform that you have service on. If a communication from us is not strictly necessary to us providing you with service, then we will always provide an option to not receive further similar messages.

When you are a customer of ours you will be connected to the exchange with at least one peering port, we do not retain any of the data you transmit or receive for any longer period of time than it takes to transmit the data to your Peers.

If you are a member of LONAP, we will use information that we hold about you to engage with you about our governance, this may include using a third party data processor.

The only exception to this policy is when LONAP is presented with a legitimate legal warrant.

Prospective Employees' Data

During the process of recruitment LONAP or its Agents may collect personally identifiable information including Name, date of birth, postal address, telephone number and email address, we may use this information to contact you for the purposes of offering interviews and employment.

Unsuccessful applications will be kept for no longer than 6 months after the applicants have been notified of our decision to not move forward with the hiring process.

In the event that we wish to keep an application for future reference (e.g., in case we wish to consider the applicant for another post in the future), we will notify the applicant that their application data will be kept on file for up to one year. We will comply with any request by applicants to have their data deleted.


Your rights under GDPR

You have the following rights:

  • To be informed - you have the right to know how we collect and use your data.
  • Access - you can request a copy of the data we hold about you. Contact: support@lonap.net.
  • Correction - you can ask us to correct any incorrect or incomplete data. Withdraw consent - you can withdraw consent where we rely on it to process your data.
  • Erasure - you can ask us to delete your data if there is no reason to keep it. Data portability - you can request a copy of your data in a format that allows you to transfer it elsewhere.
  • Restrict processing - you can ask us to stop processing your data in certain situations.
  • Object - you can object to us processing your data based on our legitimate interests.

Some rights only apply in certain cases. We'll explain any exemptions if they apply.


Childrens' data

LONAP does not knowingly collect personal data from children under 16. We do not market to children or offer services intended for them. If you are under 16, do not submit personal data to us.

Parents and guardians should monitor children's internet use and prevent them from sharing personal information without consent.

How we protect your data

We take data protection seriously. Our website and systems follow best practices and are supported by an established IT framework. We aim to mitigate known risks and meet ISO 27001 security standards.

We use Secure Socket Layer (SSL) encryption to transmit data. While we take all reasonable steps to secure your data, internet communication is not fully secure. You accept these risks when using the site.

We are not liable for losses that arise from internet-based communication.


Cookies

  • We use essential cookies to make the site work.
  • We use Google Analytics for anonymised, aggregate statistics only.
  • No advertising, remarketing, audience building, or personalisation.
  • No cross-site tracking or combining analytics with ad tech.
  • Google Signals is off. Data-sharing with Google products is off. Ads features are off.

Legal basis

  • Where the "statistical purposes" exception in PECR applies, we set analytics cookies to measure and improve the site.

What Analytics collects

  • Page views, events, referrers, device types, and approximate geography.
  • Reports are aggregate. We do not use Analytics to identify you.

Server logs

  • Our server logs date and time, page requested, IP address, and status code.
  • We keep logs for diagnostics only. We do not analyse them for marketing.

Managing cookies

  • Use the cookie banner or settings to turn analytics on or off.
  • You can also block or delete cookies in your browser.

Third-party cookies

  • Analytics cookies are set by Google Ireland Limited for our sole use.
  • We do not allow Google to use this data for its own products.
CookieDomainDescriptionDurationType
_ga.lonap.netInstalled by Google Analytics. Calculates visitor, session, and campaign data and tracks site usage for aggregate analytics. Stores information anonymously and assigns a randomly generated number to recognise unique visitors. 1 year 1 month 4 daysAnalytics
_gid.lonap.netInstalled by Google Analytics. Stores information on how visitors use the site, supporting aggregate performance reports such as number of visitors, sources, and pages visited. 1 dayAnalytics
gat_gtag_UA*.lonap.netGoogle Analytics legacy cookie for Universal Analytics to help throttle requests. We run GA4 only; this legacy cookie should not be set. 1 minuteAnalytics
ga*.lonap.netSet by Google Analytics to store and count page views for aggregate measurement. 1 year 1 month 4 daysAnalytics
_gcl_au.lonap.netGoogle Tag Manager advertising cookie used to experiment with ad efficiency. We do not run advertising and block this cookie. 3 monthsAdvertisement
_gcl_lslonap.netGoogle advertising local-storage key. We do not run advertising and block this item. neverOther

Notes

  • Any advertising-related items listed above are blocked on our site and should not be set.
  • For who we are, how to contact us, and how we handle personal data, see our Privacy Statement.

Member Portal visitors

When you visit our member portal through IXP Manager, cookies will be stored on your browser to allow you to login. The member portal will not function without these cookies. If you do not consent to these cookies, you may choose not to login to the member portal. In that case, you will not be able to access it. You can find out more about the IXP Manager cookies here: https://www.ixpmanager.org/about/privacy

Third-party services

We sometimes use third-party providers to support our services. These providers may process your personal data under our instruction. We take steps to make sure your data is handled safely and only used for the intended purpose. If data is transferred outside the European Economic Area (EEA), we ensure it receives the same level of protection using approved safeguards. Our current providers include:

  • Pretix
  • Indico

Marketing subscriber

If you wish to receive marketing communication from us, we will collect your name and email address, and at the time of collection you will explicitly consent to receive communications from us. We will:

  • use this information to send you emails with details of
    • Any products and services that we think you may be interested in
    • Workshops that we organise
    • Social events
    • Our Annual General Meeting
  • stop sending you emails after twelve months unless you explicitly choose to receive them again.
  • never sell your details to anyone else.
  • stop sending you emails as soon as you notify us you do not wish to receive them.

Complaints

If you're unhappy with how we use your data, email us at support@lonap.net. We'll try to resolve the issue quickly.

If you're not satisfied with our response, you can raise a complaint with the Information Commissioner's Office in the United Kingdom.


Updates to this privacy statement

We may update this statement from time to time. Changes will appear on this page with the date of the update.


Contact us

If you have questions about this privacy statement or how we handle personal data, contact us at support@lonap.net