Effective Date: May 1, 2018
ADDRESSED TO ALL DATA SUBJECTS
- About the Institute of Development (IoD)
- Our Privacy Commitment
- What Data We Collect and Process
- How We Use Data
- Accessing Your Personal Information and Your Rights
- About Minors (Children)
- Sharing Personal Information Outside the European Union
- Data Security and Retention
About the Institute of Development (IoD)
The Institute of Development which aims to improve people’s wellbeing & overall performance through research, consulting and training is a private business organization based in Cyprus. We collaborate with local and international organizations, public and private bodies, and across diverse disciplines in designing solutions for societal challenges. Our vision is to contribute to the improvement of our society’s quality of life through the continuous development of the individual, the family, the human resources of businesses and educational organisations, promoting a positive outlook towards life and work experiences, the boost of creativity, performance, motivation and overall wellbeing.
Our Privacy Commitment
“Personal Data” is defined by GDPR as any information relating to an identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Sensitive Personal Data” refers to personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation (referred to as “Special Categories of Data” in the EU General Data Protection Regulation).
What Data We Collect and Process
As part of the projects, studies, and other engagements which are part of IoD’ s normal activity, we will process information you share with us. This may include:
Directly identifying data, like your full name, home address or personal email address that by itself, or in combination with other readily available data, could identify you, or another member of your household
Demographic data such as age, gender, marital status, occupation and income range
Your behaviors and preferences to help us better understand behavior, use, and trends “Behavior data” refers to when, why or how you take some action or behave in a certain way and “Preference data” refers to the specific choices you make
Any content or material you choose to submit, upload or share with IoD, including without limitation, photos, videos and images
Certain profile information stored in your social media platform account, should you agree to participate in research projects through a third party service such as Facebook or Twitter
Voluntarily provided or disclosed Sensitive Information. “Sensitive Personal Data” means personal identifying information that discloses or reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation
Your voice / physical appearance in cases we will be audio/video taping your participation in a focus group discussion, in-person interview or something of a similar nature
How We Use Data
We use the data we collect for the purpose of fulfilling our contractual obligations as to the execution of a particular project, research study or other engagement. We assure you that we adhere to these principles:
We use tools and methods to make sure that there is no reasonable possibility of identifying you from the reports, apps and any other deliverables that we create. For example, we combine the responses we collect from you with the responses of many others to produce aggregated results from which you cannot be uniquely identified.
We may use data about you for quality assurance and research and development purposes such as data analysis, audits, and developing new products and services.
We may use your data to contact you by the means you provide us for this purpose. When we contact you – by phone (including mobile phone), email, SMS, or postal mail depending on what data you provide to us – we usually do so to respond to your inquiries, validate or clarify your response or send you information regarding your participation.
We may de-identify (anonymize) data about you and use it for historical, academic or longitudinal research. We ensure in such cases that there is no reasonable possibility of re-identifying you from the data used.
Accessing Your Personal Information and Your Rights
Participation in our projects/studies is always voluntary and you may withdraw at any time. If you withdraw from a project, we may continue processing the data we collected during the time you were a participant. By contacting us at firstname.lastname@example.org you may choose to exercise any of your privacy rights listed here:
The right to obtain information about your personal data without undue delay, including the purpose of the processing, what kinds of personal data are being processed and who are the recipients of such data
The right to request access to your personal data (including confirmation as to whether or not personal data concerning you are or are not being processed)
The right to request data rectification/correction, erasure or restriction of processing if you establish or believe that the collected data is inaccurate
The right to request that certain data about you be erased
The right to propose other restrictions on the processing of data about you, and
The right of data portability (“take back”) for data you have provided
Furthermore, if you believe that IoD has not complied with the Privacy laws or the terms of this Policy, you have the right to file a complaint with the relevant supervisory authority (click HERE for details).
About Minors (Children)
For our projects and research studies, we never knowingly collect data directly from minor children (under age 18). If a specific project is about children, they may participate only after we obtain the explicit consent of a parent or guardian. Once data collection about them has been authorized by a parent or guardian, all of the provisions of this notice apply to data about children of any age (up to the age of 18).
Data Security and Retention
We will retain your data for as long as needed for the purposes described in this Notice and in accordance with applicable law. When you are no longer an active respondent, we will continue to use data about your demographic characteristics, as well as behavior and preference data for historical and statistical research, but we keep this data separate from data that could be used to identify you, and strictly limit access to your identifying data. All data will be permanently de-identified when we no longer need to identify you for audit, legal, fraud prevention or related purposes.
This Notice replaces any other statement, whether written or oral, made to you about our practices with respect to IoD’s collection and use of personal data about you.
Last updated: January 11, 2021