Privacy policy
This policy explains what data we collect when you use aosen.org or take part in our activities, why we collect it, who can see it, and how you can ask to see, correct or delete your data. It gives the details of the personal data protection policy in our organisational policies.
Who we are and what this policy covers
Who is responsible for your data
The Association of Syrian Entrepreneurs (AoSEn), operating as the Syrian Entrepreneurs Union (SEU), registered with the Ministry of Social Affairs and Labour by Decision No. 5476 / 2025. Address: Property 4078, Al-Bazm Street, Al-Malki, Damascus, Syria.
What it covers
The aosen.org website and all its pages, user accounts on it, our community, membership and contact forms, registration for sessions and events (including the EntreStations programme), and the in-person sessions we run.
The data we collect
When you create an account and sign in
You can sign in in two ways:
- Email: we send you a 6-digit code that works for ten minutes, and we keep your email address.
- Google account: Google gives us only your verified email, your name and the link to your profile photo. We never see your Google password, and we cannot reach your inbox, your files or anything else in your Google account.
What you write in our forms
- Join the SEU community: name, phone, email, city, a social media profile, your project (stage, sector, a short description), why you joined and what you are looking for.
- Contact and partnership forms: name, email, organisation, location, topic and your message.
- Optional profile: job title, company, sector, number of employees, a short bio and your LinkedIn link.
Membership applications
On top of the above, membership forms ask for identity details: your full name as on your ID, your mother's name, place and date of birth, nationality, national ID number, full address, and details about your business. The entity form asks for the trade name, legal form, and the details of the authorised signatory and representatives. We ask for these because membership of a registered association requires us to verify and record each member's identity. We do not ask for copies of documents in the form; we ask for them only after an application is accepted.
Sessions and events
- Your registration, and your attendance (the time you enter, from your ticket code).
- Your rating of the session and your comments.
- Optional survey questions after sessions, such as sex, age group and governorate.
- Live polls during sessions: we keep a random ID for your device, and your account ID if you are signed in.
- Speaker invitations, and the names of the guests speakers invite.
Your past participation
If your email or phone is already in the records of our past activities (sessions, registrations or forms), we link that history to your account when you sign in with the same email, so you can see it on your account page.
What we do not collect
We use no analytics or advertising tools that track you across websites, and we do not store your IP address in our database.
Why we use your data
What we use it for
- To create your account and show your history with the association.
- To review membership applications, decide on them and tell you the decision.
- To run sessions: your ticket, an email reminder the day before, and a request to rate the session afterwards.
- To answer your messages, and to contact you to add you to our community groups.
- To improve our programmes and measure their impact.
- To produce the statistics of the Entrepreneurship Observatory: we publish only overall percentages, and we hide any group of fewer than 6 people so that no one can be identified.
What we never do
- We never sell or rent your data to anyone.
- We never use it for advertising.
- No machine makes decisions about you: membership applications are reviewed by people on the membership committee and the board.
What is shown publicly
What others may see
- Session registration list: your name appears on the public session page; your email and phone never do. Session pages can appear in search engines.
- Comments: comments you post on a session page appear with your name and photo.
- Speakers: the speaker card (name, role and photo) appears on the session page.
- Photos and recordings: we tell attendees in advance when an event is photographed, and anyone can ask not to appear or to have their photo removed.
- Members directory: no one appears in it without saying yes in the membership form, and it is not open to the public.
Account pages and registration forms are not indexed by search engines. You can ask us to hide your name from any public list.
How long we keep data, and how we protect it
How long we keep it
- Participation record (the sessions and programmes you took part in, and your role): kept permanently, because it is part of the association's history and impact record.
- Contact and personal details of people who have not confirmed an account with us: deleted five years after their last activity with us.
- Membership applications: for as long as the membership lasts, and after that only as far as the association's official records require.
- Membership documents (ID, residence and trade register copies, and anything uploaded after acceptance): kept in private storage that only their owner and the SEU administration can reach, for as long as the membership lasts, and deleted five years after it ends.
- Sign-in code: ten minutes. Sign-in session: 30 days.
How we protect it
- All traffic to the site is encrypted (HTTPS).
- Sign-in codes and sessions are stored in a scrambled form that cannot be read.
- Team access to the admin panel depends on membership of the admin group, and is rechecked automatically every 15 minutes.
- We keep a log of admin actions on the data.
- If data is leaked or misused, we stop the problem at once and inform the people affected.
Your rights
What you can ask for
- To see your data and get a copy of it.
- To correct anything that is wrong.
- To have your data or your account deleted.
- To have your name hidden from public lists.
- To withdraw your consent at any time, for example to appearing in the members directory or in photos.
When we delete, we remove your personal data or make it anonymous, and only overall figures remain.
How to ask
Write to [email protected] from the email linked to your account or participation. We confirm we have your request within 3 working days and complete it within 30 days at most. If you are not satisfied with our answer, you can use our complaints mechanism.
Other terms
Google user data
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your email, name and photo only to sign you in and create your account.
Minors
Our programmes and accounts are for people aged 18 and over. If we learn that a minor gave us their data without a guardian's consent, we delete it.
Changes to this policy
If we change this policy, we update the date at the top of this page, and if the change is significant we email account holders.
Contact us
For any question about privacy or your data: [email protected]. For general enquiries: [email protected], or our contact page.
Issued by the Association of Syrian Entrepreneurs, registered by Decision No. 5476 / 2025 of the Ministry of Social Affairs and Labour. Last updated: 11 October 2026; reviewed every year with the association's policies.