This policy governs all pages hosted at www.hivjustice.net. Please read the following policy to understand how your personal information will be treated. This policy may change from time to time, so please check back periodically. The HIV Justice Network (HJN) is committed to ensure the confidentiality and security of personal data.
What information do we collect?
Personal information is any information that can be used to identify you. HJN collects information such as your name, email address, country and name of your organisation. We collect personal information when you register with us to receive our email newsletters, participate in an event, or make a donation to us. These personal details are used to provide the services or information that you contacted us about.
How do we use your information?
We use your information to help us with understanding more about how our site is used, to make the site more useful and to be able to send you relevant communications such as our e-newsletters, or inform you of relevant events happening in your area. We also use this information to help us decide whether there are other information resources we could develop to meet the needs of people visiting the website, and occasionally we may also use your information for administrative purposes, to let you know about changes to our services.
We do not share your details to any third parties or organisations, other than to provide direct HJN services. We may use data from the list in the form of aggregated statistics, which do not identify you, for tracking web usage only.
If you have subscribed to the HJN e-newsletter, we will only send you communications as specified in the registration form.
You are able to unsubscribe from the newsletter at any time via the unsubscribe link on the newsletter itself or by emailing info[at]hivjustice.net .
Accessing and updating your personal information
You can ask us what information we hold about you by contacting us at any time at info[at]hivjustice.net .
You can also ask for your personal details to be removed from our database.
Please keep your information up to date by letting us know of any changes.
(Last updated: 12 May 2018)
A cookie is a small text file passed to your computer, mobile phone or other device, through your web browser, so the website remembers who you are when you return. Cookies cannot be used by themselves to identify you. No part of this website sets cookies.
We use this information in several ways. For example, we look at how our website is being used so we can assess how well it is working and to help us make decisions about how to improve it.
We also use this information to help us decide whether there are other information resources we could develop to meet the needs of people visiting the website.
As a non-profit organisation in receipt of public funds we are also regularly required to account to our funders and donors on how money is being spent, for example, to report on how many people are accessing relevant pages of the website and from which countries.
No other user tracking methods are used on this website.
(Last updated: 12 May 2018)
Data Protection Policy
1.1 Purpose of Policy
The HIV Justice Network (HJN) needs to collect and use certain information about individuals in order to provide our services. These include individual users, subscribers, suppliers, employees and other people the organisation has a relationship with or may need to contact.
This policy describes how this personal data will be collected, handled and stored to comply with the General Data Protection Regulation (GDPR).
1.2 Policy statement
HJN is committed to protecting the rights and privacy of service users, staff and others in accordance with GDPR.
HJN commits to:
- Comply with both the law and good practice;
- Respect individuals’ rights;
- Be open and honest with individuals whose data we hold;
- Provide training and support to staff who handle personal data, so that they can act confidently and consistently.
1.3 Personal data
HJN holds data for the following purposes:
- To provide information and resources to individuals, subscribers and other organisations related to HIV criminalisation;
- To provide information on appropriate events, training, campaigns;
- For staff administration.
The responsible person/s shall take responsibility for:
- The organisation’s ongoing compliance with this policy;
- The annual review of this policy.
3. Data recording, security and storage
3.1 Data accuracy and relevance
HJN will ensure that any personal data we process is accurate, adequate, relevant and not excessive, given the purpose for which it was obtained. We will not process personal data obtained for one purpose for any other reason unless the individual concerned has agreed to this or would reasonably expect this.
3.2 Data security
HJN will keep personal data secure against loss or misuse. Where other organisations process personal data as a service on our behalf, we will establish what, if any, additional specific data security arrangements need to be implemented in contracts with those third-party organisations.
3.3 Storing data securely
- In cases when data is stored on printed paper, it will be kept in a secure place where only authorised people can access it.
- Printed data will be shredded when it is no longer needed.
- Data stored on a computer will be password-protected.
- Cloud services used to store personal data will be assessed for compliance with GDPR principles.
- Appropriate back-up and disaster recovery solutions shall be in place.
- Appropriate technical measures will be put into place to keep data secure.
3.4 Data retention
HJN will retain personal data for no longer than is appropriate. Routine audits will review the time that personal data is held.
Any individual or organisation can ask about their information and this can be deleted on request.
4. Accountability and transparency
HJN will ensure accountability and transparency in all our use of personal data. We will keep written up-to-date records of all data processing activities that we do and ensure that they comply with each of the GDPR principles.
We will regularly review our data processing activities and implement measures to ensure privacy by design including data minimisation, transparency, and continuously improving security and enhanced privacy procedures.
HJN will ensure that consents are specific, informed and plain English. This is to make sure that individuals understand why their information will be collected, who it will be shared with, and the possible consequences of them agreeing or refusing the proposed use of data.
Where consent is relied upon as a lawful basis for processing data, evidence of opt-in consent shall be kept with the personal data.
Where communications are sent to individuals based on their consent, the option for the individual to withdraw their consent will be clearly available. We will have systems to ensure such requests are reflected accurately in our systems.
6. Subject access requests
Individuals have the right to access their personal data. HJN will provide an individual with a copy of the information requested free of charge.
This will occur within one month of receipt.
(Last updated: 12 May 2018)