Last updated: 24 July 2026

New Eurasian Strategies Centre (‘NEST Centre,’ ‘we,’ ‘us,’ or ‘our’) is committed to protecting the privacy of everyone who interacts with us — including newsletter subscribers, event attendees, and website visitors. This policy explains what personal data we collect, why we collect it, and what rights you have regarding it.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the UK Data Protection Act 2018.

1. Who we are

NEST Centre is a research and policy organisation with offices in London, Brussels, and Washington, D.C. The data controller responsible for the personal data described in this policy is:

VšĮ ‘New Research Center’
Legal entity code: 306782027
Registered address: Naugarduko str. 68–3, LT-03203, Vilnius, Lithuania

As a legal entity registered in Lithuania, we are primarily subject to the EU General Data Protection Regulation and Lithuanian data protection law. Where our activities are directed at individuals in the UK (e.g., via our London office), the UK GDPR may also apply alongside the EU GDPR.

Contact details for data protection matters:

Email: info@nestcentre.org
Postal address: Naugarduko str. 68–3, LT-03203, Vilnius, Lithuania

2. What data we collect

Depending on how you interact with us, we may collect:

• Contact details: name, email address, organisation, job title.
• Newsletter data: email address, subscription preferences, engagement data (opens/clicks) via our email platform.
• Event data: name, email, organisation, dietary or accessibility requirements (if provided), and, for in-person events, attendance records.
• Website usage data: IP address, browser type, pages visited, via cookies or similar technologies (see Section 8).
• Communications: any information you send us directly, e.g. via email or contact forms.

We do not knowingly collect special category data (e.g. health information, political opinions, religious beliefs) except where you voluntarily provide it (e.g. dietary or accessibility requirements for an event). Where such data constitutes health data within the meaning of Article 9 GDPR, we process it solely on the basis of your explicit consent (Article 9(2)(a)) and only for the specific purpose for which you provided it. You may withdraw this consent at any time.

3. Why we use your data, and our legal basis

Where we rely on consent (e.g. newsletter sign-up), you can withdraw it at any time by unsubscribing or contacting us — this won’t affect the lawfulness of processing before withdrawal.

Where we rely on legitimate interests, we’ve considered that our interest in maintaining relationships with researchers, journalists, policymakers, and event attendees is proportionate and doesn’t override your rights. You can object to this processing at any time (see Section 6).

4. Who we share your data with

We share data with third-party service providers who help us operate:

• Email/newsletter platform (e.g. Mailchimp) — to send newsletters and track engagement.
• Event platforms (e.g. Zoom) — to manage registration and delivery of events.
• IT and hosting providers — to store and secure our data.

These providers only process data on our instructions and are contractually bound to protect it. We do not sell your data to third parties.

International transfers: Because NEST Centre operates across the UK, EU, and US, and some of our service providers are based outside the UK/EEA (e.g. US-based platforms), your data may be transferred internationally. Where this happens, we rely on safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or the provider’s participation in an approved data protection framework.

Data processed or accessed from the United States: Some of our staff and operations are based in Washington, D.C., and may access or process personal data as part of their work, even though our infrastructure is not US-based. Where this involves transferring data outside the UK/EEA, we rely on appropriate safeguards, including Standard Contractual Clauses.

If you are a resident of a US state with its own privacy law (such as California, Virginia, or Colorado), you may have additional rights under that law, including the right to know what personal data we hold about you and to request its deletion. Contact us at info@nestcentre.org to exercise these rights. Given our size and scope of operations, we do not believe most US state privacy laws currently apply to us as a legal obligation, but we aim to honour these rights as a matter of good practice.

5. How long we keep your data

• Newsletter subscribers: until you unsubscribe, or after 24 months of inactivity (e.g. no opens/clicks), whichever comes first — after which we may send a re-permission request or delete your data.
• Event registrants: for 3 years after the event, for reporting and follow-up purposes, unless you ask us to delete it sooner.
• General enquiries: for 2 years after our last interaction.

We periodically review and delete data we no longer need.

Retention periods are determined by reference to the purposes for which data was collected, applicable statutory limitation periods under Lithuanian law (generally 3 or 10 years depending on the claim type), and any funder or reporting obligations. A full retention schedule is maintained internally and is available on request.

6. Your rights

Under UK/EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (‘right to be forgotten’), subject to certain exceptions.
• Restrict or object to our processing.
• Data portability (Art. 20 GDPR) — receive your data in a structured, commonly used, machine-readable format, where processing is based on your consent or a contract and carried out by automated means.
• Withdraw consent at any time (e.g. unsubscribe from our newsletter).
• Complain to a supervisory authority — as our controlling entity is registered in Lithuania, our lead authority is the State Data Protection Inspectorate (VDAI); if you’re in the UK, you may also contact the Information Commissioner’s Office (ICO); EU residents elsewhere may contact their local data protection authority.

To exercise any of these rights, contact us at info@nestcentre.org. We’ll respond within one month, as required by law.

7. Security

We use appropriate technical and organisational measures (e.g. access controls, encryption in transit, restricted staff access) to protect your data against unauthorised access, loss, or misuse.

8. Cookies and website tracking

Our website (nestcentre.org) uses the following:

• Google reCAPTCHA: used to protect our newsletter subscription forms from spam and abuse. This sets cookies and processes data in accordance with Google’s Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms).
• Essential/functional cookies: our website platform (WordPress) may set basic cookies necessary for the site to function correctly.
• Analytics or advertising cookies: We use Google Analytics to understand website traffic and usage patterns, and the LinkedIn Insight Tag to measure the performance of our content and any LinkedIn advertising campaigns. These tools set cookies and collect data such as pages visited, time on site, and device/browser type, and — in the case of LinkedIn — may be linked to your LinkedIn profile if you’re logged in. Data collected via Google Analytics is processed in accordance with Google’s Privacy Policy; data via LinkedIn is processed in accordance with LinkedIn’s Privacy Policy.

Because Google Analytics and the LinkedIn Insight Tag are non-essential cookies, under EU GDPR and the Lithuanian Law on Electronic Communications (implementing Directive 2002/58/EC as amended), they may only be activated after you have given your prior, freely given, specific, informed, and unambiguous consent via our cookie consent banner. You can withdraw or change your cookie preferences at any time through the cookie settings on our website.

You can control or delete cookies through your browser settings at any time.

9. Children

Our services are intended for professional and policy audiences. We do not knowingly collect data from children under 16.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent revision. Material changes will be communicated via our website or newsletter.

11. Contact us

If you have questions about this policy or how we handle your data:

Email: info@nestcentre.org
Postal address: Naugarduko str. 68–3, LT-03203, Vilnius, Lithuania