Last updated: April 2025
Privacy Policy
This is the Privacy Policy for The Durability Collective, a coalition managed by Generation: You Employed, Inc. (“Generation,” “GYE,” “we,” “us,” or “our”). Generation maintains The Durability Collective website and the Learning Platform (“Learning Platform”) available to certain Durability Academy members (collectively, “the Platform.”)
GYE is committed to the security and confidentiality of your personal data. GYE is the data controller of personal data collected on the Platform under applicable law, such as the EU General Data Protection Regulation, the UK General Data Protection Regulation (collectively “GDPR”), and relevant country and state data protection laws.
This notice is intended to provide you with a clear understanding of the types of personal data we collect, how we use it, the circumstances in which we may share the information, your rights in connection with it, and the steps we take to safeguard it.
When does this privacy policy apply?
This notice explains GYE’s practices for the collection and use of your personal data when you:
- Visit the Durability Collective website at https://durability.net or any other site managed by Generation for the purposes of the Durability Collective such as the Learning Platform;
- Email or engage in any other form of correspondence with The Durability Collective;
- Provide information to GYE for purposes of The Durability Collective offline including in-person and in paper documents;
- Or any other purposes that are mentioned in this notice.
We also collect personal information through automated technologies. Please refer to our Cookies Policy for more information about the types of cookies we use and their purpose.
We may collect, use and share aggregated or anonymized data such as statistical or demographic data for any purpose. Aggregated or anonymized data could be extracted from your personal information but is not legally considered personal information as this data will not directly or indirectly reveal your identity. If we combine or connect aggregated data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information which will be used in accordance with this notice.
We might update this notice to reflect changes to our data collection practices. If changes to this privacy policy materially affect the processing of your personal data, we will endeavor to communicate these changes to you in a way that we would normally communicate with you (e.g. via e-mail) in a reasonable period prior to implementing the changes. We will note the date the terms were last revised at the top of the notice.
Personal Data We Collect and Why We Collect Personal Data
When you visit The Durability Collective’s website https://www.durabily.net/ or any site or platform managed by GYE related to The Durability Collective, we collect certain information about you either because you provided it directly to us or automatically. We also may collect your information when you contact us either by using the contact form on the website, completing forms or surveys, or by using email, telephone or social media channels.
The following information we collect directly when you choose to provide it to us:
| Personal Data We Collect Directly | Why and Legal Basis |
| When you register to join The Durability Collective on https://www.durability.net/, we collect the following personal data: your name, email, organizational name and location, and your position with the organization. | We collect this personal data based on your consent, to allow you to register, and to be able to receive communications related to The Durability Collective. |
| When you register for The Learning Platform, we collect the following personal data: your name, email, phone number, organizational name and location, and your position with the organization. | We collect this personal data based on your consent, to allow you to register and our legitimate interest to engage with you in activities relating to the Learning Platform. |
| When you use the contact form on the website, we collect: your name, your email, name of organization (and country of headquarters), your position, telephone number and any questions or comments you may leave. | We process this personal data based on our legitimate interest to manage our operations and effectively respond to your comments and questions. |
| When you contact us via phone, email or social media channels, we collect: your name, address, telephone number, social media account information, the company you work for, and any details of the communication. | |
| When you sign up for our mailing list or when you receive marketing messages from us, we will collect: your name and email. | We process this personal data based on our legitimate interest to promote The Durability Collective’s services and objectives. In jurisdictions where consent is required for sending marketing communications (opt-in), we will only send you marketing messages with your consent. In jurisdictions where no consent is required, we rely on our legitimate interest to promote our programs and services. You may at any time withdraw your consent or object to the processing of your personal data for marketing purposes by following the unsubscribe instructions found in any e-mail we send. |
| All categories of personal data mentioned above. | We may process your personal data to comply with legal obligations or to comply with any reasonable request from competent law enforcement agencies or representatives, judicial authorities, governmental agencies or bodies, including competent data protection authorities. In this case we will process your personal data on the lawful basis to comply with our legal obligation. We will also process your personal data when we need them for evidence purposes, so that we may defend ourselves in possible legal or other proceedings. In this case we will process your personal data on the basis of our legitimate interest. In this case we will process your personal data on the basis of our legitimate interest. |
The following information we will collect indirectly when your visit The Durability Collective’s website https://www.durabily.net/ or any site or platform managed by GYE for purposes of The Durability Collective:
| Personal Data We Collect Indirectly | Why and Legal Basis |
| Technical information associated with the device you use, such as your IP address, browser type, geographical location and operating system. | We process this personal data to provide you a personalized and efficient way with the services we offer via our Website or Platform. We also process this personal data to perform statistical analyses so that we may improve our Websites, our Services or develop new programs. We may process your personal data to preserve our legitimate interest, and that of other third parties (such as the service provider of The Learning Platform) if and when you register with or use our Website, Learning Platform, or other communication channels. |
| Information concerning your browsing behavior or use of The Durability Collective website or The Learning Platform, such as how long you visit and how many times you visit our sites. |
Who We Share Your Information With
Within Generation, the following persons and parties will have access to your personal data:
- GYE personnel: we may share the information we collect within certain GYE personnel on a need-to-know basis. Anyone with access to your personal data will be bound by strict legal or contractual obligations to keep your personal data safe and confidential.
If we are required by law to disclose the information that you have submitted, we will attempt to provide you with prior notice (unless we are prohibited or it would be futile) that a request for your information has been made in order to give you an opportunity to object to the disclosure. We will attempt to provide this notice by email, if you have given us an email address, or by postal mail if you have entered a postal address. If you do not challenge the disclosure request, we may be legally required to turn over your information.
We share your personal data with third parties only when strictly necessary, and for the purposes as mentioned above. We will share your personal data with the following third parties:
- Other TDC members: in principle, we will only share anonymous and aggregated information with our members. In some instances, such as when we are holding an event for members, we may provide members with a list of attendee names, organizational associations, and contact information.
- Other service providers/sub-contractors: GYE works with various service providers to provide Website and The Learning Platform. This includes Service Providers who provide for the performance of hosting, providing analytics, performing research, and undergoing development of the services. These third parties will only process your personal data on the basis of GYE’s instructions. GYE will ensure that the necessary data processing agreements are in place with these service providers to ensure that your personal data is kept secure.
How long do we keep your personal data?
Your personal data will be processed for as long as necessary to achieve the purposes described above in accordance with our Record Retention Policy. In general, we will keep your information for a period of 7 years starting with the date of the data creation, but if the information is no longer needed or if you withdraw your consent, we will delete or anonymize your personal data.
When we no longer need your personal data or when you withdraw your consent, we will delete or anonymize your personal data. In some cases, we will however maintain a back-up of your personal data in a secured location in cases where we would need your data for our legitimate interest to use in court proceedings. In this case, we will only access the back-up data for these purposes. We will not delete your personal data if we are not allowed to do so based on a legal obligation or a court of administrative order prevents us from doing so.
Where will my data be transferred to?
Due to the global reach of The Durability Collective, personal data may be transferred to countries outside of your own. As described above, all personal data collected on The Durability Collective website or Learning Platform is processed in systems that are owned and maintained by GYE. For EEA data subjects, this means that under the GDPR, appropriate safeguards need to be implemented to ensure a safe cross-border international transfer of data:
- For the EEA: GYE has implemented the Commissions Standard Contractual Clauses to ensure an adequate level of protection for your personal data.
- For the United Kingdom: we have additionally implemented the data transfer UK addendum to the European Commission’s Standard Contractual Clauses.
Keeping your personal data secure
The security and confidentiality of the personal data we process is very important to us. That is why we have taken security measures to ensure that all personal data that is being processed is kept secure. When you submit personal information via the Platform, we take measures designed to ensure your information is protected. The measures we use are designed to provide a level of security appropriate to the risk of processing your Personal Data. We also protect your information offline. We limit access to personal information to GYE employees who need the information to perform a specific job (for example, communications to The Durability Collective members). The servers on which we store personal information are kept in a secure environment. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Website or Learning Platform, you are responsible for keeping this password confidential. Please do not to share your password with anyone.
Unfortunately, the transmission of information via the internet is always subject to security vulnerabilities. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Platform. In the case a data breach would occur, GYE takes the necessary measures to mitigate the risks and to, if mandatory, report the data breach to the competent supervisory Data Protection Authority. If a personal data breach is to occur and likely to result in a high risk to your rights and freedoms, GYE will inform you of the personal data breach without undue delay.
What are your rights regarding your personal data?
If you are a resident of the European Economic Area (“EEA”) or of the United Kingdom (“UK”), the General Data Protection Regulation (“GDPR”) and the United Kingdom General Data Protection Regulation (“UK GDPR”) provide additional rights regarding your personal data, which might not be applicable to residents located in other countries outside the EEA or the UK. However, the rights of access, correction and deletion of your information as described below are also applicable to non-EEA or UK residents. This section describes the rights given to data subjects under the GDPR or UK GDPR. Please be aware that whenever you wish to exercise a right, we will ask you for a proof of identity. We do this to avoid that we have a data breach on our hands, e.g. because an unauthorized person pretends to be you and exercises a right in your name.
You have the right to access your personal data, which means that you can ask us to provide you information regarding the personal data we have about you. You can even ask for a copy of your personal data. However, note that you must specify for which processing activities you would like to have access to your personal data. If you make the same request repeatedly, we are allowed to refuse granting you these subsequent requests or charge an administrative fee covering the expenses. We can also refuse granting you a right to access your personal data, or only grant it partially, if such access would risk disproportional detriment to the rights and freedoms of others or to Generation.
You have the right to ask that we correct your personal data if you can show that the personal data we process about you are incorrect, incomplete or outdated. Please specify the context in which we use your personal data (e.g. to send you marketing correspondence or to respond to a request), so that we may assess your request swiftly and accurately.
If we asked for your consent to collect and use your personal data, e.g. to send you marketing correspondence, you have the right to withdraw that earlier given consent. You may withdraw your consent at any time by contacting privacy@generation.org. A withdrawal of consent will not affect the validity of our use of your personal data collected up to the point of your withdrawal.
You can ask that we delete your personal data, if these personal data are no longer needed for the purposes for which we collected them in the first place, if our collection of them was illegitimate or if you have successfully exercised your right to withdraw your consent or your right to object to the processing of your personal data. When one of these circumstances applies, we will immediately delete your personal data unless the law, regulatory obligations or administrative or judicial orders prohibit us to delete your personal data.
You can ask that we restrict the processing of your personal data:
- during the time we are assessing your request for correction of your personal data;
- during the time we are assessing your objection to the processing of your personal data;
- when such processing was unlawful but you prefer restriction to erasure;
- we no longer need your personal data, but you require them for the establishment, exercise or defence of a legal claim.
When we process your personal data on the basis of our own interests, i.e. you have not given us your consent and we do not need them for the execution or performance of an agreement nor to comply with legal obligations, you have the right to oppose our processing of your personal data. When our interest relates to direct marketing, we will grant you your request immediately. For other interests, e.g. our security interests, we will ask you to describe your specific circumstances giving rise to request. We then need to balance your circumstances against our interests. If this balancing exercise results in your circumstances outweighing our interests, we will cease processing your personal data.
When we have collected your personal data on the basis of your consent or because they were necessary for the execution or the performance of an agreement with you, you have the right to obtain a copy from us in a structured, commonly used and machine-readable format. However, this right only applies to personal data you have provided to us.
If you would like to exercise any of these rights, we ask that you send us an e-mail. You can reach us at privacy@generation.org. Rest assured that we will not interpret an e-mail from you requesting to exercise a right as your consent with any processing of your personal data beyond what is required for handling your request. A request should clearly state and specify which right you wish to exercise. Always indicate the context in which we have obtained your personal data so that we may handle your request swiftly and diligently. We will promptly inform you of having received this request. If the request proves valid, we will notify you as soon as reasonably possible and at the latest thirty (30) days after having received the request. If you have any complaint regarding the processing of your personal data by Generation, you may always contact us via the e-mail address mentioned in the first paragraph of this clause. As always, you also have the right to contact the competent data protection authority at any time.
Should you have any questions about this notice or desire to exercise any of the rights listed above, you should contact GYE at privacy@generation.org or at the following address:
Generation: You Employed, Inc.
601 Pennsylvania Avenue NW, Suite 900
Washington, DC 20004
Children’s use of the Generation Services
Within the EEA. The Platform is not intended for children living in the EEA who are under 16 years of age. No one under the age of 16 may provide any information to or on the Platform. If you are under 16, do not use or provide any information to GYE or otherwise interact with the Platform. If we determine that we have collected or received any information from any child under the age of 16, we will delete that information immediately. If either (1) a child under 16 has provided information to the Platform or (2) you believe that we might have any information from or about a child under the age of 16, please contact us at privacy@generation.org to provide additional information or to request the removal of the relevant information from our database.
Outside of the EEA. Also, the Platform is not intended for children under the age of 16 years of age living outside of the EEA. No one under the age of 16 may provide any information to or on the Platform. If you are under 16, do not use or provide any information to GYE or otherwise interact with the Platform. If we determine that we have collected or received any information from any child under the age of 16, we will delete that information immediately. If either (1) a child under 16 has provided information to the Platform or (2) you believe that we might have any information from or about a child under the age of 16, please contact us at privacy@generation.org to provide additional information or to request the removal of the relevant information from our database.
Do you have any further questions?
If you have any further questions about the processing of your personal data, please do not hesitate to contact our data protection officer at: privacy@generation.org.
v. 4.14.25