PRIVACY POLICY
Introduction
The Swedish Observatory for Human Rights Information (SOHRI) is committed to ensuring the privacy of all our users. We have long campaigned for the right to privacy and against government surveillance and intrusion. This policy represents our commitment as an organisation to your right to privacy, giving you a clear explanation about how we use your information and your rights over that information.
This policy applies to all online systems offered by The Swedish Observatory for Human Rights Information to the public, through our website www.sohri.org and other websites we operate.
References to ‘we’,‘us’ and ‘our’ are to The Swedish Observatory for Human Rights Information, registered in Sweden as an ideell förening (organisation number: 802528-2545).
The Swedish Observatory for Human Rights Information is the registered data controller to which the policy refers. Our contact information can be found at the end of this policy and please feel free to contact us with any questions related to it. This policy was last updated on 1st of October 2022 and is reviewed every 12 months.
What types of information do we collect and how?
The type and amount of information we receive and store depends on how you use our website. You can access most of the pages on our website without telling us who you are and without revealing any personal information.
Our web servers use cookies and collect anonymous logs during user visits to our website which provide valuable information for improving it in the future.
In some circumstances your information may be shared with us by third parties, but only where you have specifically consented. Examples include registering for a human rights education course, or if you register your interest in joining SOHRI or one of its campaigns through Facebook, Facebook will share information such as your name and email address with us.
We collect personal information in the following ways:
When you sign up to online actions or express an interest in joining us as an international member
When you make a donation to us
When you sign up for our human rights education courses
When you participate in other online campaigns or activities
When you apply for a job or volunteering opportunity with us
If you choose to provide it, we can collect the following types of personal information from you:
Name
Age
Address
Email address
Phone number
Credit card details
Information provided for the purpose of applying for a job or volunteering opportunity, including: gender, ethnicity, sexual orientation, disability and criminal convictions
How do we use information collected?
We use your personal information collected via our websites for the following purposes:
To undertake email actions or compile petitions
To update you on our campaigns and activities
To ask you to donate or get involved in our campaigns
To action your expression of interest in joining The Swedish Observatory for Human Rights Information
To administer your membership of The Swedish Observatory for Human Rights Information
To process donations that we receive from you
To administer and progress your applications for employment or volunteering opportunities with us
To monitor the diversity of applicants for employment or volunteering opportunities
To improve our websites
To fulfil any legal obligations
Legal basis of processing
Data protection law requires us to have a legal justification to process your personal information. We use the following depending on the type of data and the type of processing:
Consent
We require your consent to send you our communications for example to send you emails to update you on our work and our campaigns and to request donations. We will only process your information in this way if you consent. If you apply for a job with us and provide us with sensitive personal information (including details of your race, ethnicity, gender) we will only process that information with your consent.
To fulfil a contractual obligation
If you donate to us or express an interest in joining our organisation we will process the personal data you provided to process that donation or action your membership request.
Legal obligation
We will process your personal information to fulfil any legal obligations placed upon us, such as the prevention of fraud or money-laundering. We will also process your personal information if lawfully required to do so by a legal authority or a court of law.
Necessity
For example where you are applying for an employment or volunteering opportunity with us, processing certain information is necessary for employment purposes.
Security
We take appropriate security measures to ensure that we keep your information secure, accurate and up to date. We also take care to ensure that we have secure systems for processing payments through our payment services provider. However the transmission of information over the Internet is never completely secure, so while we do our best to protect personal information, we cannot guarantee the security of information transmitted to our website.
Third Party Websites
On our website we sometimes have links to third party websites or applications. This policy does not apply to such pages or applications hosted or operated by other organisations. These other sites may have their own privacy policies which apply to them.
Sharing of your personal information
Hosting and processing arrangements
Our website is hosted by third party service providers and therefore any personal details you submit through them may be processed by that third party service provider. We also use other third parties to process your personal details including in the following areas:
to action all online expressions of interest to join SOHRI or take actions and manage all related communications
to process online payments
to process all information associated with applications for employment or volunteering opportunities and related recruitment processes.
All third party services providers process your personal information only on The Swedish Observatory for Human Rights Information behalf and are bound by contractual terms that are compliant with data protection law.
Payment processing and fraud
Where submitted, your card details may be disclosed to banks or relevant financial institutions to arrange payments. In the case of a suspected fraudulent transaction, your details may be further disclosed for the sole purpose of performing further checks (for example, disclosure to a credit checking agency).
Other sharing
We may also share your personal information with your permission, or if we are legally required to disclose your information in circumstances where this cannot be reasonably resisted.
Use of cookies
A cookie is a text-only piece of information that a website transfers to your computer’s hard disk so that the website can remember who you are. A cookie will normally contain the name of the Internet domain from which the cookie has come, the “lifetime” of the cookie, and a value, usually a randomly generated unique number.
If you wish to restrict or block cookies you can set your internet browser to do so – click on the following link for more information: www.aboutcookies.org.
Retention Period For Data
We only hold your personal information on our systems for as long as is necessary for the purposes outlined above. We remove personal data from our systems once it is no longer required, in line with our guidelines on how long important information must remain accessible for future use or reference, as well as when and how data can be destroyed when it is no longer needed.
The length of time each category of data will be retained will vary depending on how long we need to process it for, the reason it was collected and in line with any statutory requirements. After this time the data will either be deleted or we may retain a secure anonymised record for research and analytical purposes.
Access to and your rights over your personal information
The personal data we hold about you is yours. You have the following rights over your information:
To be informed how your data is being processed
To access your data
To rectify any data that is inaccurate
To instruct us to delete your data
To restrict our processing of your data (which includes contacting you via email) at any time. All our email communications to you will contain an unsubscribe link.
To object to your data being stored.
To move your data
