As of 29 August 2022
Data Protection Principles
UNARC is committed to processing data in accordance with its responsibilities, including under the EU General Data Protection Regulation (GDPR)
- This policy applies to all personal data, set out in section 4 below, processed by UNARC.
- This policy shall be reviewed at least
How We Protect Personal Information
- UNARC understands that storing data in a secure manner is essential.
- UNARC stores personal data using reasonable physical, technical and administrative safeguards to secure data against foreseeable risks, such as unauthorised use, access, disclosure, destruction or modification.
- Access to personal data shall be limited to internal UNARC personnel.
- Although we make good faith efforts to store information we collect securely, we cannot guarantee the integrity and security of our network and systems, nor that our security measures will prevent third-party hackers from illegally obtaining this information.
- Email address(es);
- Postal address;
- Telephone number(s);
- Job title;
- and Employer.
Personal information: Data collection
UNARC may collect information from different sources, including:
- Information provided directly to us when a person subscribes to our mailings;
- Details provided off-line (e.g. business cards).
- Such details will only be used for the purpose for which they have been provided;
- Non-identifying information, such as statistics on website usage and content viewed;
- Non-identifying information on the use of our mailings, such as opened emails and clicked-through links;
UNARC may use information collected to enable us to create mailing lists to send campaigning and marketing material, including:
- UNARC’s monthly monitor / newsletter containing press releases and articles on our work;
- Press releases;
- Open and private letters including specific advocacy calls promoting the aims and objectives of UNARC;
- Event invitations
- Any person has the right to opt out of receiving marketing communications through the link at the bottom of each of our mailings. We will then delete the associated personal information promptly.
- Any person has the right to access their personal data and any such requests made to UNARC shall be dealt with in a timely manner.
- If any person wishes to raise a complaint on how we have handled their personal information, they can contact us and we will investigate the matter and respond promptly.
Link To Third Parties
This website (unarc.org) may contain links to other sites that may be of interest to you. Once you click on these links and leave our site, we no longer have control over the site to which you are redirected and therefore we are not responsible for the terms or privacy or data protection practices of such other sites. These sites are subject to their own privacy policies and we recommend that you check with them to confirm that you agree with them.
Lawful, fair and transparent processing
- To ensure its processing of data is lawful, fair and transparent, UNARC shall maintain a Register of Systems.
- The Register of Systems shall be reviewed at least annually.
All data stored and processed by UNARC are done so on one of the following lawful bases:
- legal obligation;
- vital interests;
- public task;
- or legitimate interests.
UNARC will seek consent to store and process personal data through periodic emails.
Lawful purposes: Legitimate Interest
- UNARC’s legitimate interest is to promote and protect human rights by supporting human rights defenders, strengthening international human rights systems, and leading and participating in coalitions for human rights change for the previous.
- UNARC considers that in respect of the following categories it is within the legitimate interest of UNARC or those in the following categories to store and process their data: United Nations experts; Regional human rights experts; Government representatives; Civil society representatives and human rights defenders;
and Media representatives.
- UNARC shall note the appropriate lawful basis corresponding to the data in the Register of Systems.
UNARC shall ensure that personal data stored and processed by UNARC are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
- UNARC shall take reasonable steps to ensure personal data is accurate.
- Steps shall be put in place to ensure that personal data is kept up to date.
Archiving / Removal
To ensure that personal data is kept for no longer than necessary, UNARC shall review data it stores annually, at the time this Policy is reviewed. b. When personal data is deleted this should be done safely such that the data is irrecoverable.
Contacting us about privacy concerns