Partners in Justice International (PJI) is committed to protecting the privacy of our web site visitors, donors, beneficiaries, partners, and supporters.
What is this Privacy Notice?
This Privacy Notice (Privacy Notice) sets out Partners in Justice International’s information processing practices in relation to you and your personal data and applies when we collect and process personal data from you through our website and mobile applications, or otherwise through our work. It explains Partners in Justice International’s information processing practices and describes your rights regarding your personal data.
This notice may be changed or updated at any time. By visiting www.partnersinjustice.org and/or providing the information described below, you acknowledge that you accept the terms of this Privacy Notice. If you do not agree to the terms of this Privacy Notice, please do not use the Website. This Privacy Notice is at all times subject to any applicable requirements of local and regional law and regulation.
Who is responsible for your information?
Partners in Justice International (PJI) and its various parts around the world (also referred to as “we”, “us”, or “our”).
This Privacy Notice describes:
- what personal information we collect about you;
- how we obtain your personal information;
- how we use your personal information;
- on what basis we use your personal information;
- how long we keep your personal information;
- who we share your personal information with;
- how we protect your personal information;
- which countries we transfer your personal information to; and
- your rights regarding your personal information
This Privacy Notice should be read in conjunction with PJI’s Data Handling and Protection Policy.
If you have any questions or comments regarding this Privacy Notice or the processing of your personal information by PJI, please contact firstname.lastname@example.org.
All processing (i.e., use) of your personal information will be in compliance with a “lawful basis” for processing. In the majority of cases, the legal basis will be that such processing is justified on the basis that it is conduced in lawful furtherance of our legitimate interests, subject to your interests and your fundamental rights. Processing may also be justified where it is necessary for the performance of a contract to which you are a party, or to take steps (at your request) to enter into a contract; necessary for us to comply with a relevant legal obligation (e.g., where we are legally required by court order to disclosure the information); or necessary for the performance of a task carried out in the public interest (e.g. documenting human rights violations). In limited circumstances, we will use your consent as the basis for processing your personal information, for example, where we are required by law to obtain your prior consent in order to send you marketing communications.
What personal information do we collect about you?
We may collect personal information from you in the course of our work, including through your use of our website, by our use of “cookies,” when you contact or request information from us, when you engage our services or as a result of your relationship with one or more of our staff and clients.
We may collect some or all of the following types of information including:
- Personal data. Our websites may collect personal data, information that either directly identifies you or could reasonably be used to identify you. Examples of personal data include your name, contact information, email address, and other information in combination with such identifiers.
- Mobile devices information. If you access our websites on your mobile telephone or mobile device, we may also collect your unique device identifier and mobile device IP address, as well as information about your device’s operating system, mobile carrier and your location information. We may also ask you to consent to providing your mobile phone number (for example, so that we can send you push notifications).
How we obtain your personal information
We collect information or data from you in various ways, including:
- During the course of your use of the Website (this will include any and all material you send or submit either to the Website or to any email address provided on the Website);
- Information which you provide to us and when we request further information from you from time to time;
- As part of our new work acceptance processes;
- While monitoring our technology tools and services, including our Website and email communications sent to and from PJI;
- When you provide it to us, or interact with us directly, for instance engaging with our staff;
- From providers of compliance-related information or credit-related information; and
- From other sources, such as keeping the contact details we already hold for you accurate and up to date using publicly available sources.
How we use your personal information
We collect and use data collected from you (however collected), including any personal information, for the following legitimate purposes of PJI:
- Operate our website and understand its use, for statistical purposes (number of site visits, average time visitors spend at the site, etc.) And security purposes;
- Manage and process inquiries, registrations, donations and other interactions with you;
- Send you information you have requested or consented to receiving such as PJI newsletters, breaking news, and other information regarding relevant PJI Activities.
- To perform a contract, such as engaging with an individual to provide legal or other services;
- For the establishment, exercise or defence of legal claims or proceedings;
- To comply with legal and regulatory obligations;
- Invite you to meetings, events, and seminars;
- Alert you to employment or volunteer opportunities;
- Ask for financial support;
- Seek your feedback;
- Communicate with you on other PJI matters not listed above;
- Provide you with personalized service;
- For legitimate purposes related to our work and mission; and
- Address matters incidental to the purposes of use set out above, where permitted by applicable local law and regulation.
With whom do we share your personal data?
We do not sell, share, or otherwise disclose the information we collect through our website and mobile applications, except as provided in this Privacy Notice.
We may allow our staff, volunteers, consultants, or other providers acting on our behalf (for example, our website hosts) to access and use your personal information for the purposes for which you have provided it to us. If we do this, we will not give those individuals/organizations any rights to use your personal information (or to contact you) except in accordance with this policy.
We may share your personal data with our affiliates and third-party organizations which we feel could be of interest to you, provided you agree to such sharing and such sharing is legal under applicable law. Please see the section on Your Rights Regarding Your Personal Information below if you wish to have your information shared this way.
We may disclose information to third parties who provide us with various business services, including monitoring and maintaining the websites and with whom we are working to provide you with services or information. We may also disclose information we collect in special cases, including when we have a reason to believe that such disclosure is necessary to identify, contact, or bring a legal action against someone who may be causing injury to or interference with our rights and property or those of any other person. We may also disclose information when we believe the law requires it and in any situation that involves threats to any person’s physical safety. When required by law, such sharing of information will be subject to an agreement with each such service provider, requiring such service provider to comply with data protection requirements.
Personal information may be shared with other non-affiliated third parties, including:
- service providers which perform certain services on behalf of PJI, pursuant to our direction, or as directed or consented to by you, including providers of word processing, translation, photocopying and document review;
- third parties engaged in the course of the services we provide to clients and partners, such as barristers, local counsel and technology service providers like data room and case management services;
- third parties involved in hosting events or seminars;
- auditors and professional advisors; and
- regulatory authorities, courts and tribunals, government agencies and law enforcement agencies (such as the police).
We will share personal information with these third parties where permitted by applicable laws and regulations:
- for the purposes set out in this Privacy Notice;
- as may be required by applicable law or regulation;
- as provided for by any contractual arrangement; or
- in connection with PJI’s work and our operations (including where disclosure is necessary or desirable in order to facilitate the conduct of a specific matter, including transactions, cases or other matters).
We will not sell, rent, distribute, or otherwise make personal information commercially available to any third party except with your prior permission.
We may disclose personal data (i) if we are required to do so by law, legal process, statute, rule, regulation, or professional standard, or to respond to a subpoena, search warrant, or other legal request; (ii) in response to law enforcement authority or other government official requests; (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss; (iv) in connection with an investigation of suspected or actual illegal activity; or (v) in the event that PJI is dissolved or otherwise reorganized. Disclosure may also be required for audits or to investigate a complaint or security threat.
- You can engage with us through social media websites..
- PJI may use social media sites such as Facebook, LinkedIn and Twitter. If you use these services, you should review their privacy policies for more information on how they deal with your personal information.
Meetings, events and seminars
We will collect and process personal information about you in relation to your attendance at our offices or at an event or seminar organized by PJI or its partners. We will only process and use special categories of personal information about your dietary or access requirements in order to cater for your needs and to meet any other legal or regulatory obligations we may have. We may share your information with IT and other service providers, or partners involved in organizing or hosting the relevant event.
If you submit personal information to us via any of the e-mail addresses specified on our Contact page or to an e-mail address specified in the Get Involved page for applying for a position at PJI, we will process such personal information solely for the purposes of considering applications and recruitment, not for marketing purposes.
We may also collect data that may include your personal information by sending “cookies” to your browser, which will store them in your device (e.g., computer, phone, etc.) in order to facilitate your browsing. A cookie is a small chunk of information sent by our web server to the web browser software that you are using to access the Website. A cookie enables our web server to collect information from your web browser software.
How long we keep your personal information?
PJI endeavours to ensure that personal information is kept up-to-date and that irrelevant, excessive or out-of-date personal information is updated or deleted. To determine the appropriate retention period for your personal information, we will consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process the personal information and whether we can achieve such purposes through other means, the applicable legal and regulatory requirements (including requirements to retain the personal information for a minimum period), limitation periods for taking legal action, good practice and PJI’s work and mission-related purposes.
Do we have security measures in place to protect your information?
The security of your personal information and respect for your right to privacy are important PJI priorities. PJI has implemented physical, technical and administrative security standards to protect personal information from loss, misuse, alteration or destruction. We will protect your personal information against unauthorised access, use or disclosure, using security technologies and procedures. PJI adheres to a Data Handling and Security Policy, which supplements this Notice and is available on our website.
While we take reasonable measures to protect the information you submit via the website against loss, theft, and unauthorised use, disclosure, or modification, we are also aware, and would like you to be aware, that no internet, email, or mobile application transmission is ever fully secure or error free. Email or other messages sent through the website are not automatically secure or encrypted. You should use caution whenever submitting information through email or the website and take special care in deciding which information you provide us. If you would like to transmit information to us more securely, please contact us to make appropriate arrangements.
Transfer of information across national borders
We work throughout the world and may transfer certain personal information across geographical borders within PJI, or to authorised service providers or business partners in other countries working on our behalf in accordance with applicable law. Some of our activities and third parties may be in countries that have not been determined by the European Commission to have an adequate level of data protection. When we do transfer your personal information, we use a variety of legal mechanisms to help ensure your rights and protections travel with your data:
- we ensure transfers within PJI ensure that personal information receives an adequate and consistent level of protection wherever it resides within PJI;
- where we transfer your personal information outside PJI or to third parties who help provide our services, we obtain contractual commitments from them to protect your personal information; or
- where we receive requests for information from law enforcement or regulators, we carefully validate these requests before any personal information is disclosed.
If you would like further information about whether your information will be disclosed to overseas recipients, please contact us on email@example.com. You also have a right to contact us for more information about the safeguards we have put in place to ensure the adequate protection of your personal information when it is transferred.
Security of electronic communications
Please note that any electronic communication made between you and us, including via the Website, may not be secure and, unless you are already a client, may not be treated as privileged or confidential. While we welcome your enquiries, please do not send us any electronic communication that contains any confidential or sensitive personal information or data.
Your rights regarding your personal information
Subject to the provisions of local and regional laws and regulations from time to time, you may be entitled:
- to object, on grounds relating to your particular situation and subject to certain conditions, to the processing of your personal information;
- to request confirmation as to whether PJI has personal information relating to you;
- to access the personal information about you being processed by PJI and to obtain certain information about the processing of that personal information;
- to require PJI to rectify any inaccurate or incomplete personal information about you;
- to require PJI to erase personal information about you in certain circumstances, subject to compliance with any applicable data retention obligation;
- to restrict PJI from processing personal information about you in certain circumstances;
- to receive personal information relating to you in a format that can be processed by a device and the right to have personal information relating to you transferred to another data controller in certain circumstances;
- to stop unauthorized transfers of your personal information to a third party; and
- if you are subject to French data protection laws, to establish guidelines for the preservation, deletion and transmission of your personal information after your death.
Should you wish to discuss your entitlement to, or exercise of any such rights, please contact firstname.lastname@example.org
EU Data Subject Rights
If you are an EU Data Subject, you have the following rights of this EU Data Subject Rights section. To exercise these rights, please email us at email@example.com with a description of your request.
- Right to Access. You have right to access personal data that PJI holds about you.
- Right to Rectification. You have a right to request us to correct your personal data where it is inaccurate or out of date.
- Right to be Forgotten (Right to Erasure). You have the right, under certain circumstances, to have your personal data erased. Your information can only be erased if your data is no longer necessary for the purpose for which it was collected, and we have no other legal ground for processing the data.
- Right to Object to Processing. You have the right to object to the processing of your personal data at any time, on legitimate grounds, except if otherwise permitted by applicable law, or to lodge a complaint with a supervisory authority. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
- Right to Restrict Processing. You have the right to restrict the processing of your personal data, but only where:
- its accuracy is contested, to allow us to verify its accuracy; or
- the processing is unlawful, but you do not want it erased; or
- it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or
- you have objected to processing of your data, and verification of overriding grounds is pending.
- Right to Data Portability. You have the right to data portability, which requires us to provide personal data to you or another controller in a commonly used, machine readable format, but only where the processing of that information is based on (i) your consent; or (ii) the performance of a contract to which you are a party.
- Right to Decline Automated Decision Making. You have the right to not be subject to decisions based solely on automated decision making, which produce legal or significant effects for you, except where these are (i) necessary for a contract to which you are a party; (ii) authorized by law; (iii) based on your explicit consent.
Even where such decisions are permitted, you can contest the decision and require PJI to exercise human intervention.
We currently do not use automated decision making (including automated decision making using profiling) when processing your personal data. If we ever use an automated decision-making solution, you have a right to request that a decision based off your personal data cannot be solely decided via an automated process.
Your California Privacy Rights
Section 1798.83 of the California Civil Code permits California residents to request from a business, with whom the California resident has an established business relationship, certain information about the types of personal data the business has shared with third parties for those third parties’ direct marketing purposes and the names and addresses of the third parties with whom the business has shared such information during the immediately preceding calendar year. You may make one request each year by emailing us at firstname.lastname@example.org.
Do we collect information from children?
Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from an individual under age 16. If you are under the age of 16, please do not submit any personal information through the website. If you have reason to believe that we may have accidentally received personal information from an individual under age 16, please contact us immediately at email@example.com.