Open Pilot — Free Access destinationready.ai is in open pilot. Access is free. Pilot members retain free access for one year if the platform introduces paid membership.

Legal

Privacy Policy

How we handle your personal data under the EU General Data Protection Regulation (GDPR).

Last updated July 2026.

1. Who we are

destinationready.ai is a service operated by Global DMO Services, a limited liability company registered in Finland (Business ID / Y-tunnus: 3139669-3). Global DMO Services operates destinationready.ai as a trading name.

Data controller: Global DMO Services
Contact: info@globaldmoservices.com

2. What personal data we collect

When you register for the pilot community or complete the AIRETT — AI Readiness and Ethical Targeting Toolkit to assess organisations' AI readiness — assessment, we collect:

  • Full name
  • Organisation name and type
  • Country
  • Work email address
  • Optional: a statement of why you are requesting access
  • Optional: an indication of willingness to participate in doctoral research (see Section 7)

When you use the members area, we may collect:

  • Login session data
  • AIRETT assessment responses and scores
  • Star ratings and optional comments submitted in the Destination AI Toolkit
  • Discussion forum posts and replies submitted in the Member Exchange
  • Use case submissions

3. Where your data is stored

All personal data and community content submitted through destinationready.ai is stored in a MySQL database hosted on servers operated by Hostingpalvelu Oy in Finland. Data does not leave the European Economic Area as part of normal site operation.

We do not use Notion, third-party cloud databases, or any external database service for storing member personal data or community content.

4. How we use your data

We use your data for the following purposes:

  • To review and process your pilot community access request
  • To provide you with access to the destinationready.ai member community
  • To send you notifications about new blog posts when you have enabled this preference
  • To send transactional emails including welcome messages, password reset links, and access confirmations
  • To calculate and display community ratings in the Destination AI Toolkit
  • To improve the community resources and content

5. Legal basis for processing

We process your personal data on the following legal bases under GDPR Article 6:

  • Performance of a contract: processing necessary to provide you with community access
  • Legitimate interests: maintaining the security and integrity of the community
  • Consent: where you have explicitly opted in, such as blog notification emails and optional research participation

6. Email communications

We use Resend (resend.com) to send transactional emails including welcome messages, password reset links, and blog notifications. Resend processes email data on our behalf as a data processor. Resend is incorporated in the United States. Data transfers to Resend are governed by Standard Contractual Clauses approved by the European Commission.

We do not send marketing emails unless you have explicitly requested them. You can update your notification preferences at any time from your member dashboard under Notification Preferences.

7. Doctoral research

destinationready.ai is the applied output of a doctoral research project at the University of Gloucestershire. Where you have given consent, described in the registration consent block and the research participation information page, some of your data may be used for research purposes connected to this study. This section explains what that involves and does not apply if you have not given the relevant consent.

The research is conducted under a Project Approval Form approved by the University of Gloucestershire on 23 January 2026. This is the operative ethics approval instrument for the study; a separate Research Ethics Committee reference was not required for this project.

We process the following categories of research data, each on the legal basis of your consent under Article 6(1)(a) of the UK/EU GDPR.

Anonymised assessment responses and usage patterns. Legal basis: your consent to the first research consent item. Retention: three years following formal approval of the doctoral thesis by the University of Gloucestershire, after which the data is deleted or transferred to an approved long-term research data store in accordance with University policy. Where this data has been integrated into a published academic output, it may be retained beyond that period as a matter of research integrity.

Contact details for optional follow-up research invitations. Legal basis: your consent to the second research consent item. Retention: deleted within thirty days of a withdrawal request or on completion of the doctoral study, whichever is earlier.

Interview records, where applicable. Legal basis: separate consent obtained at the time of the interview.

Aggregated, anonymised observations used in publications or presentations. Legal basis: your consent to the third research consent item. Once included in a published output, this data cannot generally be withdrawn from that specific publication.

You can withdraw any of these consents at any time. Members can use the consent withdrawal page; others can email info@globaldmoservices.com.

8. Data retention

We retain your personal data for as long as your pilot membership is active. If you request deletion of your account, we will delete your personal data from our database within 30 days, except where retention is required by law or legitimate interest (for example, transactional records required for accounting).

Community content you have submitted (forum posts, use cases, ratings) may be retained in anonymised form after account deletion to preserve the integrity of community discussions.

9. Your rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: you may request a copy of the personal data we hold about you
  • Right to rectification: you may ask us to correct inaccurate data
  • Right to erasure: you may ask us to delete your personal data
  • Right to restrict processing: you may ask us to limit how we use your data
  • Right to data portability: you may ask for your data in a portable format
  • Right to object: you may object to processing based on legitimate interests

To exercise any of these rights, contact info@globaldmoservices.com. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

10. Cookies

This site uses a small number of cookies. Cookies that are strictly necessary, for example keeping you logged in and remembering your session, are required for the platform to work and do not require your consent. Cookies that remember your preferences and account state are not strictly required, but we mention them here for transparency; you can clear these through your browser at any time without affecting your account. A further category, research analytics, would only become active if you have given the first research consent item described above ("use of anonymised assessment data and platform usage patterns"); no research analytics collection is currently active on this platform. We do not use advertising cookies or tracking pixels.

The Crisp chat widget (help.destinationready.ai) may set its own cookies when you interact with the chat. Crisp’s privacy policy is available at crisp.chat/privacy.

11. Changes to this policy

We may update this policy when the service changes significantly. The date at the top of this page shows when it was last updated. Continued use of the service after an update constitutes acceptance of the revised policy.

12. Contact

For any privacy-related question or to exercise your data rights:

Global DMO Services
info@globaldmoservices.com
Business ID (Y-tunnus): 3139669-3
Finland

Last updated: July 2026