Election Privacy

Information used

CivitasVote may process account names and email addresses, association roles, voter staff or membership numbers, names, contact details, institutional classifications, election eligibility, credential administration, nomination statements, candidate photographs, supporting documents, incidents, objections and complaint evidence.

The association should publish the purpose, legal basis, data controller, contact, recipients, retention period and complaint rights applicable to the election.

Ballot secrecy

The election register records eligibility and whether a voter participated. Accepted ballot selections are stored separately without a voter-side foreign key. Receipt verification confirms inclusion without revealing choices.

This separation does not eliminate all correlation risk from a compromised server, device, network or log. Production operation requires additional controls.

Public information

Published election pages may show association details, election dates, approved candidate names, photographs, biographies or manifestos, final results and declarations. Rejected or withdrawn nominations, voter records, protected nomination files and complaint evidence are not public merely because an election is public.

Rights and complaints

Provide a route for correction of inaccurate voter data before certification, access to appropriate personal information, objection or complaint where applicable and contact with the association’s data-protection officer. Requests must not disclose another voter’s data or weaken ballot secrecy.