(Last updated 1^st November 2018)

Introduction

This privacy policy sets out how IHRB collects and processes personal information. IHRB handles a small amount of personal data and does so in compliance with the provisions of the EU General Data Protection Regulation (GDPR) 2016 and the Data Protection Act 2018. (The GDPR applies to personal data of all citizens in the European Economic Area, regardless of where the data controller or data processor operates.) We will not use your data for any other than the purposes set out below.

What Data We Collect And How

IHRB may collect and process the following personal data:

• Technical data (e.g. IP address, geo-location);
• Identity and contact data (e.g. first and last name, professional role, address, phone, email, social media handle).

You may share your personal data with IHRB through: 

• visiting our website (cookies - click here to change settings);
• completing online forms;
• signing up to our e-newsletter;
• directly contacting IHRB;
• accessing our social media;
• or otherwise communicating with us or having a professional connection with our work.

What We Do With The Data We Collect

Using Your Data To Contact You

IHRB largely uses personal data to enable communications with individuals and organisations that are interested or involved in human rights as part of the legitimate interests of the company (where those interests are not overridden by your fundamental rights), or where required by legal or regulatory obligations.

IHRB sends a quarterly e-newsletter to its database of contacts (managed through MailChimp).  IHRB does not add contacts to this database - the list is self-subscription only.  IHRB sends occasional invites, reports, and updates to sections of its contacts database that we believe will be interested in the event or work (including to e-newsletter recipients who have expressed an interest in particular programme areas).

If you receive communication from IHRB and would like your details removed from our contacts list, please email [email protected] and we will remove you immediately from all future communications.

Third Party Processors

We sometimes use third parties (data processers) to ‘process’ information collected or stored on our behalf. We explain below when and why we process data through third parties.

Google Analytics

IHRB uses Google Analytics (GA) to track site user interaction by means of cookies (see below). We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website. Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you but Google does not grant us access to this. (To change your cookie settings for the IHRB site - click here. To manage your cookies more generally, adjust the settings on your browser: Safari > Preferences > Privacy; Chrome > Settings > Show advanced settings > Privacy; Firefox > Tools Menu > Options > Privacy Settings.)

Social Media

The IHRB website uses AddThis which facilitates social sharing of its content (via the ‘Connect with Us' buttons on our site). In order to deliver this service AddThis creates cookies, which may collect information from visitors, this information does not directly identify an individual and is instead designed to identify the devices used by visitors. You can opt out at any time using the AddThis opt out form: http://www.addthis.com/privacy/opt-out.

IHRB also has Twitter, Facebook, Google+, YouTube and LinkedIn accounts. Their privacy policies can be found on their websites.

Other Data Processors 

In the course of running our website and the charity, we use a number of other data processing organisations, such as file hosting services, email providers, event co-hosts, social media managers, web hosts and developers, web traffic analysers, event invite software and newsletter providers (such as Mailchimp). For more information please contact us at [email protected].

There are certain other scenarios under which IHRB, its programmes, subsidiaries or other assets may share personal data:

• if IHRB (or one of its programmes or assets) changes governance, becomes independent, or becomes part of another organisation;
• to protect IHRB from fraud, breach of confidence, theft of proprietary materials and other financial or business crimes;
• to comply with legal and regulatory obligations and bring and defend legal claims.This may ultimately involve disclosure of your information to competent regulatory, prosecuting and other law enforcement and governmental agencies and legal firms. 

Third Party Websites

The website and the IHRB e-newsletter may contain links to other websites which are outside our control and are not covered by this Privacy Policy. IHRB is not responsible for the privacy policies or practices of these third party websites.

Retention And Deletion Of Your Information

We will delete the information that we hold about you when we no longer need it. Specific information about our record retention policies is available on request. Please contact us at [email protected].

Note that we may retain some limited information about you even when we know that you have left the organisation that you represent, so that we can maintain a continuous relationship with you if and when we are in contact with you again, representing a different organisation.

Your Individual Rights

The GDPR provides the following rights for individuals:

• The right to be informed about the collection and use of your personal information.
• The right of access, this allows you to be aware of and verify the lawfulness of the processing.
• The right to rectification, to have inaccurate personal data rectified, or completed if it is incomplete.
• The right to erasure – this is the right to be forgotten, it is not absolute, and only applies in certain circumstances.
• The right to restrict processing - it is not absolute, and only applies in certain circumstances.
• The right to data portability – this allows you to obtain, reuse and move your personal data in a common format across different services.
• The right to object to processing based on legitimate interests, direct marketing and or processing for purposes of research and statistics. We confirm we do not engage in direct marketing.
• Rights in relation to automated decision making and profiling. We confirm we make no decisions on you using an automated process.

If you would like to exercise any of the above rights, please email us at [email protected] and we will enact the above free of charge.  

Changes to this Policy 

Any changes we make to this privacy statement in the future will be posted here and also available if you contact us at [email protected]. Please check back frequently to see any changes.

Information Commissioner's Office

Further information on your data privacy rights are available on the website of the UK Information Commissioner’s Office: www.ico.org.uk.

Cookie Controls

'Persistent' or analytical cookies help us to improve our website by collecting and reporting information such as on its usage. This information might include your geographical location, device, internet browser and operating system - none of this information personally identifies you to us. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiry date. You can choose to turn these off here:

(You can change the settings at any time by clicking the cookie icon in the bottom left hand corner of the site page or by visiting our privacy page: www.ihrb.org/privacy.)

For more information about cookies and instructions on how to adjust your browser settings to restrict or disable cookies, please see https://ico.org.uk/for-the-public/online/cookies/