PRIVACY NOTICE [FOR STAFF MEMBERS & PARTNERS-CONTRIBUTORS]

This Privacy Notice applies to the Rights Mapping and Analysis Platform  (together, “RiMAP” or the “Platform”). It sets out how we collect, use, and store your personal information and what steps we take to protect your information. UNHCR will process your personal data in accordance with its General Policy on Personal Data Protection and Privacy. 

Please read our Privacy Notice carefully before using the Platform and refer back to it regularly to check for updates. Remember, by accessing and using the Platform, you agree to all provisions of this Privacy Policy. 

1.            What personal information do we collect through the Platform? 

We obtain personal data relating to you from various sources described below:

Registration/Account Information

To provide content on the Platform, you must first register. When registering and with subsequent use of the Platform, you are required to provide certain personal data such as name, e-mail address,  and other contact information. 

User-Generated Content and Communications

We collect any personal data that you provide to us when you update the country analysis that you are assigned. We are able to see the revisions to the content.

If you contact us directly, we may receive additional information about you. For example, when you contact us, we may receive your name, email address, phone number, the contents of a message or attachments that you may send to us, and other information you choose to provide.

Personal Data We Collect Automatically From Your Use of the Platform

When you use the Platform, we and our third-party service providers may collect information about you and your device through automated means, such as cookies and web server logs. Cookies are small text files which identify your computer, phone, and other devices to our server. Aside from the personal data that you disclose to us for a specific purpose, UNHCR also collects anonymous information about your browsing behaviour when you visit our Platform, through the use of cookies. By using UNHCR Platform, you agree that we can place the types of cookies set out below on your computer, mobile phone, or handheld device.

We use this information, for example, to ensure that the Platform functions properly, to determine how many Users have visited certain pages, or to prevent fraud. We use IP address information to derive your approximate location. We also work with analytics providers, which use cookies and similar technologies to collect and analyse information about use of the Platform and report on activities and trends. These services may also collect information about the use of other websites, apps, and online resources.

If you do not want information collected using cookies, you can decline the transfer to your computer of a particular cookie (or cookies) from a particular site. You may also wish to refer to https://allaboutcookies.org/how-to-manage-cookies for more general information about cookies.  If, however, you do not accept our cookies, you may experience some inconvenience in your use of the Platform.

2.            How do we use the information collected on the Platform?

Communications

We will use your information to contact you for validating the information, testing, capacity building and providing updates , and for user-service or technical-support purposes. 

Internal and Service-Related Usage

We may use your personal data for internal and platform-related purposes, including to operate, provide, and maintain the Platform.

Analytics and Improving the Platform

We and our service providers may use the information that we collect on the Platform, such as your location and your activities on the Platform, to monitor and analyse usage of the Platform and to improve and enhance the Platform.

Legal

We may use your personal data to enforce our Terms and Conditions of Use of the Platform to defend our legal rights, and to comply with our internal rules, regulations, and policies. 

3.            With which third parties do we share your personal information? 

We disclose information that we collect through the Platform to third parties in the following circumstances:

•             To third-party service providers who provide services to us, such as website hosting, data analysis, information technology and related infrastructure provisions, analytics providers to deliver content targeted to your interests and to help us to better understand how you use the Platform, email delivery, and other services. 

•             We may, in line with our data protection and privacy framework, disclose your personal data in order to fulfil a legal requirement, enforce our Terms and Conditions of Use of the Platform, or protect anyone’s rights, privacy, safety, or property and for other legitimate purposes. 

We will only transfer your personal data to trusted third parties who provide sufficient guarantees in respect of the technical and organizational security measures governing the processing to be carried out and who can demonstrate a commitment to compliance with those measures. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

4.            How long do we keep your personal data?

We will retain your personal data for as long as it is required for the purposes it was collected for and as specified in our data protection and retention policies. In practice, we delete or anonymize your information upon deletion of your account, unless:

•             we must keep it to evidence our compliance with UNHCR internal rules and regulations and to enforce our agreements and rights;

•             there is an outstanding issue, claim or dispute requiring us to keep the relevant personal data until it is resolved; or

•             the information must be kept for purposes such as fraud prevention and enhancing users’ safety and security pursuant to UNHCR’s internal rules and regulations. For example, information may need to be kept preventing a User who was banned for security incidents from opening a new account.

Although the Platform is designed to carry out data deletion processes according to the above terms, we cannot promise that all data will be deleted within a specific timeframe due to technical constraints. Otherwise, we will seek to delete your personal information within a reasonable timeframe upon your request.

5.            Is RiMAP secured?

We are committed to protect your personal data through the implementation of encryption methods, secured login, firewalls, regular security patches and antivirus. However, it is always a possibility that third parties may unlawfully intercept or access your personal data . So, although we work extremely hard to safeguard your personal information, we cannot guarantee that your information or communications will always remain private.

We also ask that you do your part to safeguard your personal data. Select and protect your password appropriately. Limit access to your account and sign out of your account once you have finished using it. 

6.            Controlling Your Information

If you have registered an account, you can access and modify most information associated with your account by logging in and editing your profile page. If you want to have all of your information removed from our servers, please contact us at [email protected] for assistance.  Bear in mind that if you delete your account this means you will not be able to use most of the features of the Platform. 

7.            Third Parties Websites

The Platform may contain links to other websites that are not covered by this Privacy Notice. This Privacy Notice does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any site or service to which the site links. The inclusion of a link on this Platform does not imply endorsement of the linked site or service by UNHCR. Please be aware that the terms of this Privacy Notice do not apply to these outside websites or content, or to any collection of data after you click on links to such outside websites.

8.            Notifications of Changes to the Privacy Notice

We review our security measures, and we may modify our Privacy Notice as we deem appropriate. If we make changes to how we process your personal data, we will post a notification to the Platform alerting that the Privacy Notice has been amended. Such changes will be effective immediately upon posting them to the Platform. For this reason, we encourage you to check our Privacy Notice frequently.  The “Last Updated” date at the bottom of this page indicates when this Privacy Notice was last revised. Your continued use of the Platform following these changes means that you accept the revised Privacy Notice.

9.            Contact Us

Should you have questions or concerns related to privacy and use of personal data on this Platform, please feel free to contact us at [email protected].

Last Updated: June 2024