Privacy policy (GDPR)

INTOSAI CBC Privacy Policy in accordance with GDPR (General Data Protection Regulation)

Introduction

The INTOSAI Capacity Building Committee (CBC) provides a website for its members. For the CBC Leadership and Secretariat the privacy and security of our committee members and stakeholders, respondents and website visitors are of paramount importance. The CBC Leadership and Secretariat is committed to protecting the data you share with us. This privacy policy explains how CBC processes information that can be used to directly or indirectly identify an individual (personal data) collected through use of its website and platform.

For the purposes of this policy, the CBC Secretariat defines the term “User” as an entity with which the CBC Secretariat has an established relationship, the term “Respondent” as any individual who responds to invitations or surveys powered by the CBC Secretariat, and the term “Visitor” as an individual that visits our website, www.intosaicbc.org.

Any information stored on the CBC website or in listings (e-mail-, meeting registrations, memberships) is treated as confidential. All information is stored securely and is accessed by authorized personnel only. The CBC Secretariat implements and maintains appropriate technical, security and organisational measures to protect personal data against unauthorized or unlawful processing and use, and against accidental loss, destruction, damage, theft or disclosure.

Collection and use

Respondents

The CBC Secretariat receives information from respondents when they produce and distribute invitations or surveys. Data entered or transferred to the CBC Secretariat such as texts, questions, contacts, media files, etc., may not be shared with a third party by the CBC Secretariat.

Respondents should be aware that in responding to inviations or surveys, they could be disclosing information that could make them personally identifiable to the CBC Secretariat. The security and privacy protection implemented on the CBC website does not cover this type of transfer or disclosure of any personal information. Respondents responding to surveys or invitations should be aware that they alone are responsible for the content of their responses. It is the CBC Secretariat’s responsibility to ensure that collection and processing of data is done in accordance with applicable law. The CBC Secretariat will not process personal data of respondents for other purposes or by other means than instructed.

Following meeting registrations the CBC Secretariat collects information such as name, company name, email, address, telephone, credit-card number and other relevant data. This information is used strictly by the CBC Secretariat to provide support, services, mailings, information and/or to meet contractual obligations.

Visitors

By visiting the website only, you consent to the collection and use of your personal data as described herein. If you do not agree with the terms set out herein, please do not visit this website. The CBC Secretariat may collect and keep record of visitors to its website for the purpose of reporting and statistics, used as a base for marketing and developing the website. We may record your IP address and use cookies. The CBC Secretariat may add information collected by way of page-view activity. Furthermore, the CBC Secretariat may collect and process any personal data that you volunteer to us in our website’s forms, such as when you register for events or sign up for information and newsletters.

Such personal data may comprise your IP address, first and last name, your business postal and email address, your telephone number, your job title, as well as information as to the type of relationship that exists between the CBC Secretariat and yourself.

Users

Any user with whom the CBC Secretariat has an established relationship may request excerpt of his/her personal data, or request updating or deletion of the same. This is easiest done by e-mailing the CBC Secretariat on secretariat@intosaicbc.org.

Purpose of processing personal data

The CBC Secretariat gathers data about visits to the website, including numbers of visitors and visits, geo-location data, length of time spent on the site, pages clicked on or where visitors have come.

The CBC Secretariat uses the collected data to communicate with visitors and to improve its website by analyzing how visitors navigate its website.

Sharing personal data

The CBC Secretariat ensures that no personal data may in any way be shared with service vendors or contractors, or anyone outside the range of our work.

Cookies

Cookies are small pieces of information sent by a website to a visitor’s hard disk. Cookies cannot be used to run programs or deliver viruses to your computer. By continuing to visit the website, you agree to the placement of cookies on your device. If you choose not to accept our cookies, we cannot guarantee that your experience will be as fulfilling as it would otherwise be.

Links to other sites

Please be aware that while visiting our site, visitors can follow links to other sites that are beyond our sphere of influence. The CBC Secretariat is not responsible for the content or privacy policy of these other sites.

Processing in the European Economic Area (EEA)

From May 25th, 2018, the EU Directive 95/46/EC and local legislation based on the Directive will be replaced by the Regulations (EU) 2016/679 of the European Parliament and of the Council of 27 April, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known as the General Data Protection Regulation (GDPR. The CBC Secretariat processes personal data as defined in the Directive and the GDPR:

The CBC Secretariat adheres to the 95/46/EC Directive of 1995 and the GDPR from May 25th, 2018. Consequently, all data collected by the CBC Secretariat through invitations, registrations or surveys will be stored exclusively in secure hosting facilities. The CBC Secretariat has a data processing agreement in place with its provider, ensuring compliance with the Directive. All hosting is performed in accordance with the highest security regulations.

Retention and deletion

The CBC Secretariat will not retain data longer than is necessary to fulfill the purposes for which it was collected or as required by applicable laws or regulations. For respondent data, the CBC Secretariat has control of the purpose for collecting data, and the duration for which the personal data may be kept.

Acceptance of these Conditions

We assume that all visitors of our website, respondents to invitations or surveys powered by the CBC Secretariat and users of the CBC Secretariat’s platform have carefully read this document and agree to its contents. If someone does not agree with this privacy policy, they should refrain from using our website and platform. We reserve the right to change our privacy policy as necessity dictates. Continued use of the CBC Secretariat website and platform after having been informed of any such changes to these conditions implies acceptance of the revised privacy policy.

Legal obligation to disclose personal information

We will reveal a user’s personal information without his/her prior permission only when we have reason to believe that the disclosure of this information is required to establish the identity of, to contact or to initiate legal proceedings against a person or persons who are suspected of infringing rights or property belonging to the CBC Secretariat or to others who could be harmed by the user’s activities or of persons who could (deliberately or otherwise) transgress upon these rights and property. We are permitted to disclose personal information when we have good reason to believe that this is legally required.

For Further Information

If you have any further questions regarding the data the CBC Secretariat keeps, or how it is used, then please feel free to contact us by email at: secretariat@intosaicbc.org.