CIP PRIVACY STATEMENT
(effective as of April 2020)
What personal information do we collect from CIP website, blogs and platform users?
- Personal identification information
- Non-personally identifiable information
- When do we collect personal information?
- How does CIP use your personal information?
- How does CIP protect your personal information?
- Third-party disclosure
- Legal disclosures
- Third-party links
- Children
Specific data subject rights regarding data privacy and protection
- Privacy by design
- Collection of and access to personal data
- Affirmative
- Data subject access rights
- Breach
- Third party data filing systems
- User acceptance of the terms
- Contacting CIP
This statement aims to help you understand what information the International Potato Center (CIP) collects about you and how we use it. CIP is committed to protecting your personal information.
What personal information do we collect from CIP website, blogs and platform users?
A. Personal identification information
When registering or logging into CIP website, blogs and platforms, collectively referred to as ‘the Site’, you may be asked to enter your email address or other details, such as name and institutional affiliation. CIP will collect your personal identification information only if you voluntarily submit such information to us. Users can always opt not to supply personal identification information, except that it may prevent them from engaging in certain activities, for example signing for email alerts.
B. Non-personally identifiable information
You can browse the Site without telling us who you are or revealing any personally identifiable information about yourself.
The only information we gather during general browsing is from standard server logs: these include your internet protocol (IP) address, browser type, operating system, and information such as the website that referred you to us, the files you download, the pages you visit, and the dates/times of those visits. These do not specifically identify you. The information is used only for website traffic analysis and is treated confidentially. Cookie data. The Site may use “cookies” to enhance your user experience. A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. There are multiple types of cookies, but cookies in general have two principal purposes:
- to improve your browsing experience by remembering your actions and preferences; and
- to facilitate analysis of website traffic.
CIP uses cookies to facilitate the analysis of website traffic and to remember preferences you may have set on the Site. This helps us to understand and improve the performance and usability of the Site. Specifically, CIP uses cookies when communicating with Google Analytics (for web traffic analysis) and on WordPress (to record user preferences like language). Personally identifiable information is not stored in these cookies.
C. When do we collect personal information?
You are not asked to provide any personally identifiable information to access most parts of the Site. You will be asked to provide basic personal information such as your email address to subscribe to email alerts or leave a comment on the Site. If you are applying for a job at CIP, you will be asked to provide the information routinely found in a curriculum vitae, or if you are tendering for a contract, you will be asked for information about your experience of supplying these services and possibly the financial stability of your business.
If you choose to participate in one of our online surveys, you will also be asked for personal information about the types of information you are seeking, the sector you work in and other feedback about the quality and appropriateness of our content. This information is used solely for the purposes of improving the quality of our information products and better tailoring them to your needs.
D. How does CIP use your personal information?
We will use your personally identifiable information for the purposes of:
- giving you the products, information or services you have requested
- improving the quality of the products, information or services you have requested
- communicating with you about an event or conference
- evaluating your job application
- complying with law and regulations
To do some of this, we may process your information using third party service providers or agents who may be located outside your home country. However, your information will only be used for the purposes you requested or agreed to or as required by law. Please see section F on third party disclosure for more information on how we share your information with others.
We will use your non-personally identifiable information to facilitate analysis of website traffic to improve the performance, usability and data security of the Site.
E. How does CIP protect your personal information?
CIP adopts appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information and data stored on the Site and elsewhere.
F. Third-party disclosure
CIP does not sell, trade, or rent user personal identification information to others. CIP may share generic aggregated demographic information not linked to any personally identifiable information regarding visitors and users with our partners, trusted affiliates and advertisers for the purposes outlined above or as described in section G below.
We may also use third party service providers to help us with the management of offline and online services (e.g. the Site), such as sending out newsletters and undertaking surveys. We may share user information with these third parties for those limited purposes for which you have given your permission.
G. Legal disclosures
Notwithstanding anything to the contrary in this Privacy statement, users acknowledge, consent and agree that CIP may disclose information in order to:
(a) comply with applicable law, regulation, legal process, or governmental request;
(b) protect the rights, property and safety of CIP and others, including intellectual property rights; and
(c) enforce or apply our agreements and policies.
If you post or send offensive, inappropriate, or objectionable content anywhere on or to the Site or otherwise engage in any disruptive behavior on any CIP service, we may use your personal information to stop such behavior. Where CIP reasonably believes that you are or may be in breach of any applicable laws (e.g. because content you have posted is considered defamatory or in violation of copyright), we may use your personal information to inform relevant third parties such as law enforcement agencies about the content and your behavior.
H. Third-party links
You may find other content on the Site that link to the sites and services of our partners, donors and other third parties. CIP does not control the content or links that appear on these sites and is not responsible for the practices employed by websites linked to or from the Site. Browsing and interaction on any other website, including websites which have a link to the Site, is subject to that website’s own terms and policies. CIP is, however, committed to the integrity of the Site and welcomes feedback on any of the linked sites. On the Site, CIP also uses “social plugins” for Facebook, LinkedIn, YouTube, Twitter, etc. The most common use of these social plugins is to share content on social networks. They also transmit cookies to and from the Site to a third party service.
I. Children
CIP does not intend, and the Site is not designed, to collect personal information from children under the age of 18. If you are under 18 years old, you should not provide personal information on the Site or use it without the supervision or authorization of an adult.
Specific data subject rights regarding data privacy and protection
J. Privacy by design
Privacy by design is a methodology that enables privacy to be ‘built in’ to the design and architecture of information systems, business processes and networked infrastructure. CIP ensures that all its archival systems containing personally identifiable information use design methodology or system procurement criteria that includes privacy by design.
K. Collection of and access to personal data
CIP will only collect the minimum amount of personally identifiable data that is necessary to complete the action to which that information is associated. If actions change and information is no longer needed, we will stop collecting the information immediately.
Further, CIP will only grant access to data to individuals who absolutely need access in order to perform their duties. If duties or individuals change, CIP will remove permissions from any accounts who do not need access.
CIP will also conduct periodic reviews of the data collected and under its controls and ensure that data collection and data access requirements are up to date.
L. Affirmative
In collecting your personal data, affirmative consent will be requested from you. The consent request notice contains the following information:
- CIP contact details;
- The reason for collecting the information;
- Whether the information will be transferred to another country or international organization (e.g. the CGIAR System Organization);
- How the data subject can correct, delete, restrict processing, or object to processing of their data as well as how they can receive their data to move it someplace else;
- The right for the data subject to withdraw their consent at any time;
- The right for the data subject to lodge a complaint with the appropriate authorities; and
- If providing the personal data is a requirement to comply with a law or contract, the possible consequences of not providing the information. Affirmative consent in signing up for CIP surveys or information products.
In signing up to CIP surveys or for our information products, the conditions and associated user rights are as follows:
- You may correct, delete or restrict processing of your data held by CIP by writing to CIP-dataprivacysupport@cgiar.org. We will respond within the time period specified in this privacy statement.
- The information collected is for the purposes of providing you with the product requested and/or to improve the quality of our content.
- Your information may be shared across CIP and with partners participating in the respective projects, often in different countries.
- The data provided to us through participation in CIP surveys will be held for five years after which it will be destroyed.
- The data provided to us by signing up for information products will be held for as long as you wish to receive the specific products. To remove yourself from the subscriber list, follow the instructions at the bottom of the email containing your information product.
- Comments left by you on our blogs will be deleted upon your request to CIP-dataprivacysupport@cgiar.org.
M. Data subject access rights
You have the right to, upon request, access your information to amend and confirm accuracy; request your data be provided so you can submit it elsewhere; and request that your information be deleted from the CIP data filing system.
- Upon request, CIP will provide the data subject with their information free of charge unless the request is manifestly unfounded or excessive (particularly if it is repetitive). If unfounded or excessive then CIP may charge a reasonable fee based on the administrative cost of providing the information;
- CIP will respond to you within one month of receipt of their request, and may extend the response period and must notify you within one month if so explaining why the extension is necessary, if the requests are complex or numerous. Unless the request is for a large amount of information, responses will not linger past three months of receipt of the request; and
- CIP will provide the requested information in an easily accessible, commonly used, electronic format. You can opt out of receiving emails from us at any time by unsubscribing. How to do so will be explained in each of CIP’s electronic communications.
N. Breach
For data filing systems over which CIP has control, a breach notification system and process is in place guaranteeing that data subjects will be notified of the breach within 72 hours (or less) of CIP first having become aware of a breach. CIP has robust mitigation and monitoring in place to prevent and/or identify a breach when it occurs.
O. Third party data filing systems
If data filing systems are hosted or managed by a third party, CIP will use its best efforts and execute service agreements with appropriate compliance, confidentially and non-disclosure clauses.
P. User acceptance of these terms
By using the CIP Site, you signify your acceptance of this statement, terms and conditions. If CIP changes this privacy statement, we will post those changes to this page so that you are always aware of what information we collect and how we use it.
Q. Contacting CIP
any questions regarding CIP’s Privacy statement, the practices of the Site or user’s dealings with it, the contact information is as follows:
International Potato Center (CIP)
Headquarters
Avenida La Molina 1895, La Molina Apartado 1558, Lima 12, Peru
CIP-dataprivacysupport@cgiar.org