Privacy Notice for Island Rights Initiative
Island Rights Initiative is a non-profit consultancy whose purpose is to build networks and support small island communities in the field of human rights, governance and the rule of law.
This notice explains to Island Rights Initiative contacts (you) how Island Rights Initiative (“we/us”) use your personal information.
This privacy notice covers:
- Why we use your personal information
- The legal basis for processing
- What personal information we use
- How we use your personal information
- Your rights under data protection legislation
- Sharing personal information with third parties
- How long we may keep your information
- Changes to our privacy notice
- Contact details for our Data Protection Officer
Why we use your personal information
We process your personal data for the following purposes:
- to develop a network of professional contacts related to small island jurisdictions
- for Island Rights Initiative business development
- to identify possible collaborators for future work and projects
- to identify possible funders and funding opportunities
If we plan to introduce further processes for the use of your information, we will provide information about that purpose prior to such processing.
The legal basis for processing
Under Data Protection Law, there are various grounds which are considered to be a ‘legal basis for processing’.
The legal basis for processing should be determined by the Data Controller.
Where we are the Data Processor, the legal basis is determined by the Customer. Typically, the legal basis in this scenario is:
‘processing is necessary for the performance of a task carried out in the public interest’
Where we are the Data Controller, the legal basis for processing is based on:
‘processing is necessary for the purposes of legitimate interests pursued by the controller’
It should be noted that in some circumstances this legal basis may vary, however, we always operate in full compliance with Data Protection Law and will only process data with a fair and reasonable legal basis for doing so.
What personal information we process
In order to carry out these services, we obtain directly from you and process the following information:
| Data Subject (Who) | Data Category (What) | Description |
| Associate | Forename | This is the forename of the Associate |
| Associate | Surname | This is the surname of the Associate |
| Associate | Contact Details | These are the contact details provided which may include
Email, phone, skype, twitter, physical address |
| Associate | Photo | Photo provided for inclusion on the website |
| Associate | Biography | Biography provided for inclusion on the website |
| Contact | Forename | This is the forename of the Contact |
| Contact | Surname | This is the surname of the Contact |
| Contact | Contact Details | These are the contact details provided which may
Include email, phone, skype, twitter, website, address |
| Member | Forename | This is the forename of the Member |
| Member | Surname | This is the surname of the Member |
| Member | Contact Details | These are the contact details provided which may include
Email, phone, skype, twitter, website, address |
| Member | Membership Details | Nature and status of membership |
How we process your personal information
We use your personal information, and some of our associates have access to such information, only to the extent required to carry out work.
We have introduced appropriate technical and organisational measures to protect the confidentiality, integrity and availability of your personal information during storage, processing and transit.
Your rights under Data Protection Law
Right to Access
You have the right of access to your personal information that we process and details about that processing.
You can raise a Data Subject Access Request (DSAR) to request this information.
Right to Rectification
You have the right to request that information is corrected if it’s inaccurate. You can contact us to make the changes on your behalf.
Right to Erasure (Right to be Forgotten)
You have the right to request that your information is removed; depending on the circumstances, we may or may not be obliged to action this request.
Right to Object
You have the right to object to the processing of your information; depending on the circumstances, we may or may not be obliged to action this request.
Right to Restriction of Processing
You have the right to request that we restrict the extent of our processing activities; depending on the circumstances, we may or may not be obliged to action this request.
Right to Data Portability
You have the right to receive the personal data which you have provided to us in a structured, commonly used and machine readable format suitable for transferring to another controller.
Right to lodge a complaint with a supervisory authority
If you think we have infringed your privacy rights, you can lodge a complaint with the relevant supervisory authority. You can lodge your complaint in particular in the country where your live, your place of work or place where you believe we infringed your right(s).
You can exercise your rights be sending an e-mail to info@islandrights.org Please state clearly in the subject that your request concerns a privacy matter, and provide a clear description of your requirements.
Note: We may need to request additional information to verify your identity before we action your request.
Sharing personal information with third parties
If we need to add additional third parties, we will always update our Privacy Notice accordingly. We will only disclose your information to other parties in the following limited circumstances
- where we are legally obliged to do so, e.g. to law enforcement and regulatory authorities
- where there is a duty to disclose in the public interest
- where disclosure is necessary to protect our interest e.g. to prevent or detect crime and fraud
- where you give us permission to do so e.g. by providing consent
How long we may keep your personal information
We will only retain information for as long as is necessary for the purposes outlined. We may need to retain some records to maintain compliance with other applicable legislation – for example finance, taxation, fraud and money laundering law requires certain records to be retained for an extended duration, in some cases for up to seven years.
Changes to our Privacy Notice
This policy will be reviewed regularly and updated versions will be posted on our websites.
Contact details for our Data Protection Officer
We have appointed a Data Protection Officer (DPO); their contact details are as follows: