Last updated September 2026.
Who we are
Finance and Consulting Club Aarhus (FACCA), Student Union at Aarhus University, Fuglesangs Alle 4, 8210 Aarhus V, Denmark. We are the data controller for the personal data described here. Contact us at info@facca.dk.
What we collect, and why
- Membership details - name, email, phone, address, gender, study programme and graduation date. Used to administer your membership and confirm eligibility. Basis: performance of our agreement with you.
- Event sign-ups - which events you apply to or attend, plus any documents you upload (CV, grade transcripts, cover letters) when an event requires them. Basis: performance of our agreement with you.
- Emails we send you - a record of which system mails were sent to you, so we do not send duplicates. Basis: legitimate interest in running the club.
- Usage statistics - only if you accept statistics cookies. Basis: your consent.
- Error reports - when something breaks, our monitoring tool records the technical details of the failure so we can fix it. It is configured not to attach your identity or IP address. Basis: legitimate interest in keeping the site working.
Who we share it with
Documents you upload for an event may be shared with the partner company hosting that event, which is stated on the event before you apply. We also use service providers for hosting, email delivery, error monitoring (Sentry), spam protection on our contact form (Google reCAPTCHA) and - with your consent - analytics (Google Analytics). We do not sell personal data.
Where your data is processed
Our own systems run inside the EU. Google and Sentry are US companies and may process data outside the EU/EEA; those transfers rely on the EU Commission's adequacy decision for the EU-US Data Privacy Framework and on standard contractual clauses. The data reaching them is limited: analytics only with your consent and with IP anonymisation on, reCAPTCHA only on the contact page, and error reports without your identity attached.
How long we keep it
Membership data is kept while your membership is active. When a membership expires you may be moved to the alumni network if you have asked for that; otherwise the account is deactivated and removed. Event documents are kept only as long as needed to run the event.
Your rights
Under the GDPR you may request access to your data, correct it, have it deleted, restrict or object to processing, and receive a copy in a portable format. You can withdraw consent for statistics cookies at any time on our cookie policy page. You may also complain to the Danish Data Protection Agency (Datatilsynet).
You can exercise most of these yourself, without asking us. Your details can be viewed and corrected under My profile, and you can delete your account at any time under Delete profile. That erases your name, email, address, phone number, gender, profile picture, CV and everything you have told us about your studies and work, and closes the account. You do not have to give a reason. Records that an event took place are kept without anything identifying you.
For anything the account pages do not cover - a copy of your data in a portable format, restricting or objecting to processing, or a deletion you cannot complete yourself - write to info@facca.dk. We answer within one month, as the GDPR requires.