This Policy contains important information about your personal rights to privacy. Please read it carefully to understand how we use your personal information.
The provision of your personal information to us is voluntary. However, without providing us with your personal information, your use of our services or your interaction with us may be impaired. For example, you may be unable to attend one of our travelling exhibitions or engage with our online communities.
1. How do we collect personal information about you?
When you give it to us directly:
For example, personal information that you submit through our website by subscribing to our newsletter or making a press enquiry, or personal information that you give to us when you communicate with us by email, phone, letter or our online chat service. You may also provide us with personal information if you apply for a job opening at UN Live.
When we obtain it indirectly:
Your personal information may be shared with us by third parties including, for example, our business partners or subcontractors in technical, payment and delivery services (please see section 8 below for more information). To the extent we or the relevant third party has not done so already, we will notify you when we receive personal information about you from them and tell you how and why we intend to use that personal information.
When it is available publicly:
Your personal information may be available to us from external publicly available sources. For example, depending on your privacy settings for social media services, such as Facebook or Twitter, we may access information from those accounts or services.
When your visit our website:
When you visit our website, we automatically collect the following types of personal information:
i. Technical information, including the internet protocol (IP) address used to connect your device to the internet, browser type and version, time zone setting, browser plug-in types and versions and operating systems and platforms.
ii. Information about your visits to the websites, including the uniform resource locator (URL) clickstream to, through and from the website (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, referral sources, page interaction information (such as scrolling or clicks) and methods used to browse away from the page.
For example, we use Facebook Pixels, Twitter Pixels and Google Analytics pixels to track activity from our social media accounts through to our websites.
We also collect and use your personal information by using cookies on our website – please see our Cookie Notice [https://museumfortheun.org/cookie-policy] for more information.
2. What personal information do we use?
We may collect, store and otherwise process the following kinds of personal information:
- Your name and contact details (including emergency contacts), including postal address, telephone number, email address and, where applicable, social media identity;
- Your date of birth and gender;
- Your financial information, such as bank details and/or credit/debit card details, account holder name, sort code and account number;
- Information about your computer/mobile device and your visits to and use of this website, including, for example, your IP address and geographical location;
- Details of your qualifications/experience;
- Immigration/emigration information;
- Information about our services which you use/which we consider may be of interest to you; and/or
- Any other personal information which we obtain as set out in section 1 above.
Do we process special categories of personal information?
The EU General Data Protection Regulation (“GDPR”) recognises certain categories of personal information as sensitive and therefore requiring more protection, for example information about your health, ethnicity and political opinions.
In certain situations, UN Live may collect and/or use these special categories of personal information (for example, if you have any medical conditions which require access arrangements at one of our exhibits). We will only process these special categories of your personal information if there is a valid reason for doing so and where the GDPR allows us to do so.
3. How and why will we use your personal information?
Your personal information, however we obtain it, may be used for the following purposes:
- Personalising your experience on our websites: We may use personal information we collect about you to provide you with a personalized experience on our websites, such as providing you with content in which you may be interested and making navigation on our sites easier.
- Providing Support: We may use your personal information to support products or services you have obtained from us, such as notifying you of a product update or fix. In the course of providing technical support to you, we may sometimes have incidental access to personal information that you have provided to us or personal information that is located on your system. This data may contain information about you, your organization’s employees, customers, partners, or suppliers.
- Marketing: To provide further information about our work, services, activities, or products (where necessary, only where you have provided your consent).
- Recruitment: In connection with a job application or inquiry, whether advertised on a UN Live website or otherwise, you may provide us with personal information about yourself, such as a resume. We may use this personal information in order to address your inquiry or consider you for employment purposes. Unless you ask us not to do so, we may keep the information for future consideration (you can change your mind at any time by contacting us using the details in section 14 below).
- Monitoring or Recording of Calls, Chats and Other Interactions: Certain online transactions may involve you calling us or us calling you. They may also involve online chats. Please be aware that it is UN Live's general practice to monitor and in some cases record such interactions for staff training or quality assurance purposes or to retain evidence of a particular transaction or interaction.
- Use of Information in the Social Computing Environment: UN Live provides social computing tools on some of its websites to enable online sharing and collaboration among members who have registered to use them. These include forums, wikis, blogs and other social media platforms. When registering to use these tools, you will be asked to provide certain personal information. Registration information that is not automatically made available to other participants as part of your profile will be subject to and protected in accordance with this Policy. You should be aware that the content you post on any such social computing platforms may be made broadly available to others inside and outside UN Live:
- So that we can administer our business relationship with your organisation.
- So that you can provide an endorsement on UN Live or other publicity purposes.
- To improve customer service: information you provide us helps us to respond to your customer service requests and support needs more efficiently.
- To register, administer and personalise online accounts.
- To run/administer our websites, keep them safe and secure and ensure that content is presented in the most effective manner for you and your device.
- To improve our websites – we may use feedback you provide to improve our products and services.
- To run a promotion, contest, survey or other features on our websites.
- To answer your questions/requests and communicate with you in general (for example to email you to update you about your order).
- To manage relationships with our business partners.
- To report on the impact and effectiveness of our work.
- To personalise user experience: we may use information in the aggregate to understand how individuals use the services and resources which we provide.
- To audit and/or administer our accounts.
- To satisfy legal obligations which are binding on us, for example in relation to regulatory, government and/or law enforcement bodies with whom we may work (for example requirements relating to the payment of tax or anti-money laundering).
- For the prevention of fraud or misuse or services.
- For the establishment, defence and/or enforcement of legal claims.
4. Lawful bases
The GDPR requires us to rely on one or more lawful bases to use your personal information. We consider the grounds listed below to be relevant:
- Where you have provided your consent for us to use your personal information in a certain way (for example, we will ask for your consent to use your personal information to send you email updates, and may ask for your explicit consent to collect special categories of your personal information [please see section 2 above]).
- Where necessary so that we can comply with a legal obligation to which we are subject (for example, where we are obliged to share your personal information with regulatory bodies which govern our work and services).
- Where necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering a contract (for example when you visit one of our exhibitions) or if you apply to work for us).
- Where it is in your/someone else’s vital interests (for example, in case of medical emergency suffered by someone on our premises).
- Where there is a legitimate interest in us doing so.
The GDPR allows us to collect and use your personal information if it is reasonably necessary to achieve our or others’ legitimate interests (as long as that processing is fair, balanced and does not unduly impact your rights).
In broad terms, our “legitimate interests” means the interests of running UN Live as a museum with global outreach through online and physical locations around the world and by connecting people to the work, values and goals of the UN.
When we process your personal information to achieve such legitimate interests, we consider and balance any potential impact on you (both positive and negative), and your rights under data privacy law. We will not use your personal information for activities where our interests are overridden by the impact on you, for example where use would be excessively intrusive (unless, for instance, we are otherwise required or permitted to by law).
We may use your contact details to provide you with information about our work, events, services and/or products which we consider may be of interest to you (for example, aboutservices you previously used, or email updates about the work that we do). Where we do this via email, SMS or telephone, we will not do so without your prior consent (unless allowed to do so via applicable law).
Where you have provided us with your consent previously but no longer wish to be contacted by us about our products and/or services in the future, you may at any time choose not to receive marketing materials from us by following the unsubscribe instructions included in each email you may receive, by indicating so when we call you, or by contacting us directly using the contact details in section 14 below.
Please note that we also use Facebook’s Custom Audiences and Lookalike Audiences programs to serve existing or prospective users with targeted UN Live marketing material. In order to do this, we upload your encrypted personal information via a secure line to Facebook to identify your profile, or profiles with similar interests, before serving you targeted newsfeed adverts with UN Live marketing material through the Facebook social network program. Please let us know using the contact details in section 14 below if you would prefer us not to upload personal information about you to Facebook.
6. Children’s personal information
When we process children’s personal information, where required we will not do so without their consent or, where required, the consent of a parent/guardian. We will always have in place appropriate safeguards to ensure that children’s personal information is handled with due care.
7. How long do we keep your personal information?
In general, unless still required in connection with the purpose(s) for which it was collected and/or used, we remove your personal information from our records six years after the date it was collected. However, if before that date (i) your personal information is no longer required in connection with such purpose(s), (ii) we are no longer lawfully entitled to use it or (iii) you validly exercise your right of erasure (please see section 11 below), we will remove it from our records at the relevant time.
8. Will we share your personal information?
We do not sell, trade, or rent your personal information to others. However, in general we may disclose your personal information to selected third parties in order to achieve the purposes set out in this Policy.
Non-exhaustively, those parties may include:
- Our business partners;
- Suppliers and sub-contractors for the performance of any contract we enter into with them, for example IT service providers such as website hosts or cloud storage providers, or shipping companies to deliver products you order;
- Financial companies that collect or process payments on our behalf;
- Professional service providers such as accountants and lawyers;
- Parties assisting us with research to monitor the impact/effectiveness of our services;
- News media outlets and social media platforms;
- Facebook for the purposes of the Audience programs (please see section 5 above);
- Regulatory authorities, such as tax, customs or government authorities; and/or
- Analytics and search engine providers.
In particular, we reserve the right to disclose your personal information to third parties:
- In the event that we sell or buy any business or assets, in which case we will disclose your personal information to the (prospective) seller or buyer of such business or assets;
- If substantially all of our assets are acquired by a third party, personal information held by us may be one of the transferred assets;
- If we are under any legal or regulatory duty to do so; and/or
- To protect the rights, property or safety of UN Live, its personnel, users, visitors or others.
9. Security/Storage of, and access to, your personal information
UN Live is committed to keeping your personal information safe and secure. We have appropriate and proportionate physical, administrative and technical safeguards in place to help us protect your personal information, for example from unauthorised access, use and disclosure. For example, we encrypt certain sensitive personal information such as credit card information when we transmit such information over the internet. Your personal information is only accessible by appropriately trained staff, volunteers and contractors, and stored on secure servers with features designed to prevent unauthorised access. We also require that our suppliers protect such information from unauthorised access, use and disclosure.
Unfortunately, no transmission of your personal information over the internet can be guaranteed to be 100% secure – however, once we have received your personal information, we will use strict procedures and security features to try and prevent unauthorised access.
10. International transfers of your personal information
UN Live is a global organization with processes, management structures and technical systems that cross borders. We also use agencies and/or suppliers to process personal information on our behalf. As such, we may share personal information about you within UN Live and transfer it to countries outside the European Economic Area (“EEA”), for example the United States, where we have operations in connection with the uses identified above and in accordance with this Policy.
Please note that some countries outside of the EEA have a lower standard of protection for personal information, including lower security requirements and fewer rights for individuals. Where your personal information is transferred, stored or otherwise processed outside the EEA, we will take all reasonable steps necessary to ensure that the recipient implements appropriate safeguards (such as by entering into contractual clauses obliging the recipient to offer the standards of protection for your personal information required by the GDPR). Our internal practices are designed to provide a globally consistent level of protection for personal information all over the world. This means that even in countries whose laws provide for less protection for your information, UN Live will still handle your information in the manner described here.
11. Your rights and how to exercise them
Where we rely on your consent to use your personal information, you have the right to withdraw that consent at any time. This includes the right to ask us to stop using your personal information for marketing or fundraising purposes or to unsubscribe from our email list at any time. You also have the following rights;
- Right of access: you can write to us to ask for confirmation of what personal information we hold on you and request a copy of that personal information. Provided we are satisfied that you are entitled to see the personal information requested and we have successfully confirmed your identity, we will provide you with your personal information subject to any exemptions that apply.
- Right of erasure: at your request we will delete your personal information from our records as far as we are required to do so.
- Right of rectification: if you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated. You can also ask us to check the personal information we hold about you if you are unsure whether it is accurate / up to date.
- Right to restrict processing: you have the right to ask us to restrict our use of your personal information if there is disagreement about its accuracy or our entitlement to use it.
- Right to object: you have the right to object to processing where we are (i) processing your personal information on the basis of the legitimate interests ground (please see section 4 above), (ii) using your personal information for direct marketing or (iii) using your information for scientific, historical research or statistical purposes.
- Right to data portability: to the extent required by the GDPR, where we are processing your personal information (that you have provided to us) either (i) by relying on your consent or (ii) because such processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract, and in either case we are using automated means to process your personal information, you may ask us to provide the personal information to you – or another service provider – in a machine-readable format.
- Rights related to automated decision-making: you have the right not to be subject to a decision based solely on automated processing of your personal information which produces legal or similarly significant effects on you, unless such a decision (i) is necessary to enter into/perform a contract between you and us/another organisation, (ii) is authorised by EU or Member State law to which UN Live is subject (as long as that law offers you sufficient protection), or (iii) is based on your explicit consent.
We may ask you for additional information to confirm your identity and for security purposes before we respond to a request to exercise a right in full. Please note that some of these rights only apply in limited circumstances. For more information, we suggest that you contact us using the details in section 14 below.
You are further entitled to make a complaint about us or the way we have used your personal information to the data protection supervisory authority in your home country. A list of the EU authorities can be found here. For further information on how to exercise this right, please contact us using the details in section 14 below.
12. Changes to this policy
13. Links and third parties
You may see advertising or other content on our websites that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the personal information processing practices employed by websites linked to or from our website. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our websites, is subject to that website's own terms and policies.
14. How to contact us
If you have any questions about this Policy, our personal information processing practices, or your experience of our websites, please contact us at: firstname.lastname@example.org.