ICED Privacy Policy

About the Privacy Policy

The International Centre for Evaluation and Development (ICED) is committed to protecting the privacy and security of the personal data we collect. This policy outlines how we collect, process, and store personal data in compliance with the General Data Protection Regulation (GDPR) and  the African Union Convention on Cyber Security and Personal Data Protection, commonly known as the Malabo Convention and the United States Data Protection Laws.

Your privacy on the Internet is of significant importance to us. This privacy policy applies to all the ICED online platforms and sites associated with the iced-eval.org domain and sub-domains.

Data Processors

For the purposes of data protection legislation, ICED is the controller of the personal data shared with us. This means that we decide why and how we process your personal data. For further information regarding privacy and data protection, please contact info@iced-eval.org.

We also work with various third-party service providers to process personal data. For instance, when collecting data via forms, we utilize Google Forms and Microsoft Forms as our data processors. These providers are responsible for securely handling personal data according to GDPR requirements.

Types of Personal Data we Process

The type and amount of personal data we collect depends on the purposes for which we will need to use it and will include:

  • Non-sensitive personal information used for identification and maintaining communication with you including details such as your name and contact information (email address, organization, job title/designation, and country). This information is obtained to facilitate communication with you in instances where you have granted ICED permission to process your data (e.g., newsletters, event sign-ups, grant applications, financial transactions, etc.).
  • Communication exchanged between us, for instance, if you send us an email or written correspondence.
  • Images, audio, and video recordings, e.g., if you participate in an event we are hosting.

How we Collect Data

We may collect your personal data in thefollowing ways:

Information provided directly by you:

For example, you may provide us your details when you attend our events, donate to sponsor us, or reach out to us for any purpose.

Information collected when you use our website:

When you use our website, some limited information about you is recorded and stored temporarily. Please see the ‘Google Analytics’ section for more details.

Publicly accessible information:

We might obtain some details about you sourced from social media or articles and/or newsletters.

Personal information:

  • ICED provides various services that require you to furnish your personal information. For instance, registration for event attendance or inclusion in our newsletter mailing list mandates the provision of personal details such as your name, email address, profession, and organizational affiliation.
  • Your personal data may be received if an individual within your organization appoints you as a contact person.
  • We may also collect information from various electronic forms that we host on our website as well as third-party platforms such as Google Forms, Microsoft Forms, or any other provider.
  • Additionally, we might acquire extra personal data from social media platforms and other external sources.

Non-personally identifiable information:

ICED utilizes third-party applications  to monitor and analyze non-personally identifiable data concerning the usage of its website and subsites. This information is solely used to generate overviews of visitor behaviour, including statistics on the most and least popular webpages or products, as well as interaction with different sections of a page. The collected information cannot be linked back to a specific individual.

Click-through URLs, Google Analytics:

  • If you opt to subscribe for newsletters, updates, or other communications from ICED, you will receive emails that might contain a 'click-through URL' associated with ICED online content. Clicking on one of these URLs will direct you through a distinct web server before reaching the intended page on our websites. This click-through data aids us in comprehending how recipients engage with or respond to our emails. To unsubscribe from our newsletter mailing list, you can click on the 'unsubscribe' button located at the bottom of the email that you have received.
  • ICED also employs Google Analytics to collect statistics for sections of our website and other platforms. This data will be utilized to enhance user interfaces and web services for visitors. Google Analytics retrieves information from your browser and ICED cookies to gather data on your activities on the ICED websites. To restrict this access, you can opt out of cookies by disabling them in your browser's settings or by downloading and installing the Google Analytics opt-out browser add-on. For more information on Google's practices, you can visit the following link: https://policies.google.com/technologies/partner-sites.

Social media and digital content:

ICED maintains a record of data from our social media platforms, which may encompass contact details provided by following us on Twitter, LinkedIn, or Flickr, in feedback or comments on posts across our Facebook page, LinkedIn page, Instagram, or Twitter account, or by engaging with ICED's Facebook page by 'liking' it. If you opt to share our digital content via social networks like Facebook, Twitter, and LinkedIn, or view a video on a third-party media platform (such as YouTube), cookies from these third-party applications may be sent to you. The setting of these cookies is not controlled by ICED; we recommend that you refer to the third-party websites for guidance on managing their cookies.

Registration for ICED events and workshops

When you register to attend an event organized by ICED, we will request your name, email address, organization, job title, country of residence, professional field, any dietary or special accommodation requirements, and areas of professional interest. If you are involved as a presenter, panelist, moderator, or facilitator at an event, we might gather your photo and presentation materials for publication on our website. Feedback and assessments about your performance as a presenter, panelist, or facilitator may also be collected. ICED will not disclose these data to external entities at the time of data collection. Attendee details for such events are maintained in our internal database and categorized based on your location, occupation, and expertise to ensure that you receive only pertinent updates from us.

Event photography and audio and video recordings:

In alignment with our role as a knowledge provider, we ensure that all event photography, video and audio recordings, and presentation slides are made available on our website and associated platforms. We capture photos and record videos of our public events, storing them in our data archive. Media consent forms will be made available prior to/during in-person events, in the event where we need to capture images, photos, and videos. Instructions on how to opt out of being photographed are provided during registration for in-person events. However, opting out of audio and video recording is not feasible for online events. These recordings are shared on our website in the media room section, on Flickr, and on YouTube.

How we Use Personal Data

We handle personal data relying on the lawful basis of legitimate interest or consent. The collected data is solely utilized for communication purposes, processing any donations that you make, and providing you with information or the services for which you have requested. We do not employ automated decision-making or profiling methods.

Our Legal Basis for Processing your Information

In compliance with the legal requirements of data protection, we have a lawful basis for processing your personal data. We may rely on any of the following legal bases to process your personal data, depending on the purpose for which we use your data:

  • Consent and Transparency: We may process your personal data when you have provided clear, explicit consent for us to do so for a specific purpose, such as receiving our newsletters.
  • Performance of a contract: Processing your personal data may be necessary for fulfilling the terms of a contract or agreement, such as delivering the services you have requested or managing donations.
  • Legal compliance: We may process your personal data to comply with legal obligations, such as keeping records for tax purposes or responding to lawful requests from regulatory authorities.
  • Legitimate interests: We may process your personal data when it is necessary for the legitimate interests of our organization, such as improving our services, provided that these interests are not overridden by your rights or interests.

How we Disclose Data

We do not disclose personal data to third parties unless essential for our business operations or as mandated by law. We carefully choose all third-party service providers and furnish them with the minimal information required to deliver their services. Any sharing of data with third parties is conducted in accordance with GDPR regulations and with suitable data protection measures implemented.

Who has Access to your Personal Data

We will not distribute your personal data to third parties without your consent unless permitted by law. We may reveal your personal data to the following third parties to facilitate the provision of our services.

  • Mailchimp: Used for managing our mailing list
  • Google Forms, Microsoft Froms, and other similar platforms
  • Zoom, Microsoft Teams, and other similar platforms: Used for our virtual events
  • Other online platforms

How we Store Data

Personal data is securely retained within our systems, which may involve transferring data outside the African Union  and the European Union. In instances of such transfers, we guarantee that data protection measures adhere to GDPR standards. Information is stored solely for the duration necessary to fulfil the intended purposes for which it was gathered or as mandated by law.

Data Protection and Security

ICED Implements adequate security measures in relation to encryption, access control, etc. to prevent data breaches.

International Data Transfers

ICED complies with laws regarding cross-border data transfers, including the GDPR, and ensures that all adequate levels of data protection in the receiving country are adhered to. In relation to the African Union Data Protection Laws, ICED implements all similar safeguards, especially under the Malabo Convention or national frameworks with which ICED is also in compliance.

How Long we Keep your Personal Data

We will retain your personal data only for the duration necessary to achieve the purposes for which it was collected, including meeting reporting and accounting obligations. Note that this does not include images, audio, and video recordings.

Upon the completion of this period, we will delete your personal data. If deletion is not immediately feasible, we will securely store your personal data and segregate it from any future utilization until deletion becomes possible. We reserve the right to dispose of any data at our discretion without prior notice, in accordance with relevant laws.

We strive to maintain accuracy in your contact information. If we identify that your details are outdated and cannot be rectified, we may proceed to delete your data.

The Data Subject's Rights

Under the African Union Convention on Cyber Security and Personal Data Protection, commonly known as the Malabo Convention, and the GDPR, individuals possess rights to access their personal data, request corrections, seek the deletion of their data (right to be forgotten), and object to the processing of their data. These rights can be exercised by contacting us at info@iced-eval.org.

You have the following legal rights over your personal data:

  1. Right of Access (Subject Access Request): You can obtain a copy of the personal data we hold about you and information about how we process your data.
  2. Right to Rectification: You can ask us to correct any inaccurate or incomplete personal data we hold about you.
  3. Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer needed for its original purpose. Users have the right to request the deletion of any media, including audio recordings, images, and video content, that involves them or their identifiable information. Upon receiving a written request, the organization will review and process the deletion provided the request aligns with applicable laws and contractual obligations. The organization reserves the right to verify the identity of the requesting party before processing the request.
  4. Right to Restrict Processing: You can request us to limit the use of your personal data in certain situations, such as when you believe your data is inaccurate and requires verification.
  5. Right to Object: You can object to the processing of your personal data in particular cases, for example, when we process your data based on legitimate interests. You always have the right to object to the processing of your data for direct marketing purposes.
  6. Right to Data Portability: You can request to have your personal data transferred to you or another party in a machine-readable format. This right applies to automated information you provided consent for or that was used to fulfill a contract with you.
  7. Right to Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw that consent. Withdrawal of consent does not affect the lawfulness of data processing before consent was withdrawn.

Please note that some of these rights may be subject to safeguards, limitations, or exemptions as per relevant regulations.

How to Complain

If you have any concerns regarding our handling of your personal data, you have the option to file a complaint with the supervisory authority in your country. However, you can reach us at info@iced-eval.org.

Changes to Privacy Policy

We retain the right to adjust this privacy policy at any time. Any alterations will be published on our website, and we will inform data subjects accordingly.

Contact

For any questions or concerns regarding this privacy policy, please contact us at info@iced-eval.org.