Privacy and Data Protection Policies

I – Privacy Policy

This policy governs all pages hosted at www.hivjusticeworldwide.org and registration to its listserv. Please read the following policy to understand how your personal information will be treated. This policy may change from time to time, so please check back periodically. HIV JUSTICE WORLDWIDE is committed to ensure the confidentiality and security of personal data.

What information do we collect?

Personal information is any information that can be used to identify you. HIV JUSTICE WORLDWIDE collects information such as your name, email address, country and name of your organisation, if relevant. We collect personal information when you register with us to receive our email newsletters, join our listserv, participate in an event, or make a donation to us. These personal details are only used to provide the services or information that you contacted us about.

 How do we use your information?

We use your information to help us with understanding more about how our site is used, to make the site more useful and to be able to send you relevant communications such as our e-newsletters, or inform you of relevant events happening in your area. We also use this information to help us decide whether there are other information resources we could develop to meet the needs of people visiting the website and occasionally we may also use your information for administrative purposes, to let you know about changes to our services.

We do not share your details to any third parties or organisations, other than to provide direct HIV JUSTICE WORLDWIDE services. We may use data from the list in the form of aggregate statistics, which do not identify you, for tracking web usage only.

If you have subscribed to the HIV JUSTICE WORLDWIDE e-newsletter, or the HIV JUSTICE WORLDWIDE listserv we will send you regular communications as specified in the registration form.

You are able to unsubscribe from the newsletter at any time via the unsubscribe link on the newsletter itself or by altering your preferences on the listserv, or by emailing info[at]hivjusticeworldwide.org

Information security

HIV Justice Network (on behalf of HIV JUSTICE WORLDWIDE) is responsible for collecting your personal information. When we collect your personal information we use strict procedures and security features to prevent unauthorised access. You may request a copy of this information by emailing us at info[at]hivjusticeworldwide.org.

How we use cookies

A cookie is a small text file passed to your computer, mobile phone or other device, through your web browser, so the website remembers who you are when you return. Cookies cannot be used by themselves to identify you. No part of this website sets cookies.

HIV JUSTICE WORLDWIDE uses Google Analytics to track how this website is used. Google Analytics uses cookies to help gather statistics on how people use this website. For example, which country the user is from, and which pages you visit while on the website.

We use this information in several ways. For example, we look at how our website is being used so we can assess how well it is working and to help us make decisions about how to improve it.

We also use this information to help us decide whether there are other information resources we could develop to meet the needs of people visiting the website.

As a non-profit organisation in receipt of public funds we are also regularly required to account to our funders and donors on how money is being spent, for example to report on how many people are accessing relevant pages of the website.

Google Analytics cookies are only stored for the time of your visit to this website. If you do not wish to receive cookies you can easily modify your web browser to refuse cookies, or to notify you when you receive a new cookie, see how here.

No other user tracking methods are used on this website.

Accessing and updating your personal information

You can ask us what information we hold about you by contacting us at any time at info[at]hivjusticeworldwide.org

Please keep your information up to date by letting us know of any changes.

Updated on May 12, 2018

 

II – Data protection policy

Purpose of Policy

HIV JUSTICE WORLDWIDE needs to collect and use certain information about individuals in order to provide our services. These include individual users, subscribers, suppliers, employees and other people the organisation has a relationship with or may need to contact.

This policy describes how this personal data will be collected, handled and stored to comply with the General Data Protection Regulation (GDPR).

Policy Statement

HIV JUSTICE WORLDWIDE is committed to protecting the rights and privacy of service users, staff and others in accordance with GDPR.

HIV JUSTICE WORLDWIDE commits to:

  • Comply with both the law and good practice.
  • Respect individuals’ rights.
  • Be open and honest with individuals whose data we hold.
  • Provide training and support to staff who handle personal data, so that they can act confidently and consistently.

Personal Data

HIV JUSTICE WORLDWIDE holds data for the following purposes:

  • To provide information and resources to individuals, subscribers and other organisations related to HIV criminalisation.
  • To provide information on relevant events, training, campaigns.
  • For staff administration.

Data Protection Principles

There are six data protection principles that are core to the GDPR. HIV JUSTICE WORLDWIDE will make every possible effort to comply with these principles at all times in our information-handling practices. The principles are:

  • Lawful, fair and transparent– data collection must be fair, for a legal purpose and we must be open and transparent as to how the data will be used.
  • Limited for its purpose– collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes shall not be considered to be incompatible with the initial purposes.
  • Data minimisation– any data collected must be necessary and not excessive for its purpose.
  • Accurate– the data we hold must be accurate and kept up to date.
  • Retention– we cannot store data longer than necessary.
  • Integrity and confidentiality– the data we hold must be kept safe and secure.

 Responsibilities

The responsible person/s shall take responsibility for the organisation’s ongoing compliance with this policy and the annual review of this policy.

Data recording, security and storage

HIV JUSTICE WORLDWIDE will ensure that any personal data we process is accurate, adequate, relevant and not excessive, given the purpose for which it was obtained. We will not process personal data obtained for one purpose for any other reason unless the individual concerned has agreed to this or would reasonably expect this.

HIV JUSTICE WORLDWIDE will keep personal data secure against loss or misuse. Where other organisations process personal data as a service on our behalf, we will establish what, if any, additional specific data security arrangements need to be implemented in contracts with those third-party organisations.

In cases when data is stored on printed paper, it will be kept in a secure place where only authorised people can acess it.

  • Printed data will be shredded when it is no longer needed.
  • Data stored on a computer will be password protected.
  • Cloud services used to store personal data will be assessed for compliance with GDPR principles.
  • Appropriate back-up and disaster recovery solutions shall be in place.
  • Appropriate technical measures will be put into place to keep data secure

HIV JUSTICE WORLDWIDE will retain personal data for no longer than is appropriate. Routine audits will review the time that personal data is held.

Any individual or organisation can ask about their information and this can be deleted on request.

Accountability and Transparency

HIV JUSTICE WORLDWIDE will ensure accountability and transparency in all our use of personal data. We will keep written up to date records of all data processing activities that we do and ensure that they comply with each of the GDPR principles.

We will regularly review our data processing activities and implement measures to ensure privacy by design including data minimisation, transparency and continuously improving security and enhanced privacy procedures.

Consent

HIV JUSTICE WORLDWIDE will ensure that consents are specific, informed and plain English. This is to make sure that individuals understand why their information will be collected, who it will be shared with, and the possible consequences of them agreeing or refusing the proposed use of data.

Where consent is relied upon as a lawful basis for processing data, evidence of opt-in consent shall be kept with the personal data.

Where communications are sent to individuals based on their consent, the option for the individual to withdraw their consent will be clearly available. We will have systems to ensure such requests are reflected accurately in our systems.

 Subject access requests

Individuals have the right to access their personal data. HIV JUSTICE WORLDWIDE will provide an individual with a copy of the information requested free of charge. This will occur within one month of receipt. Please email us at info[at]hivjusticeworldwide.org to request a copy of your information.

You can unsubscribe at any time either by email us directly at info[at]hivjusticeworldwide.org or by clicking on the unsubscribe link in the footer of all our emails.

Updated on May 14, 2018