This privacy notice describes how CatalyticAction (“CatalyticAction” “we,” or “us”) collects and processes personal data about you, how we use and protect this information, and your rights in relation to this information. When we collect or process about you as part of our work, we are a ‘controller’ of your personal data, which means that we make decisions about the personal data we have collected from you.
1. Personal data we collect
We will collect personal data from you directly (e.g. when you contact us or provide information in connection with your participation in a project). The categories of information that we collect directly from you are:
We do not collect information about you from any other sources, including public sources.
2. How we use your personal data and the basis on which we use it
We must have a legal basis to process your personal data. In most cases the legal basis will be as necessary to perform our contract with you, i.e. to manage your engagement in our projects and communicate as reasonably necessary with you.
We may also process your personal data where this is necessary to comply with applicable laws and regulations.
We may also rely on legitimate interests to process your personal data for our legitimate business purposes, such as improving the services and administration. When we process personal data to meet our legitimate interests, we make sure we consider and balance any potential impacts on you (both positive and negative) and your rights before we process your personal data.
We may also rely on your consent to process your personal data or share it with certain third parties. If we rely on your consent, we will ask for it before sharing your personal data with such third parties and you may withdraw your consent at any time by contacting us using the details in Section 8 (Contact Us) below. Your withdrawal of consent will not affect the lawfulness of processing based on consent before the point at which you withdrew your consent.
3. Your rights over your personal data
You have certain rights regarding your personal data, subject to applicable law. These include the right to (a) confirm that we are processing your personal data, and how; (b) to access or rectify the personal data we keep about you; (c) to restrict, object to, or erase the processing of your personal data, e.g. where there is no longer a legal ground for us to hold it; and (d) in some circumstances, transfer/port any information we hold about you to a specified third party. You also have the right to lodge a complaint about our use of your personal data with the appropriate regulatory authority. You can find details of the ICO, the UK’s data protection regulator here.
If you would like to discuss or exercise any such rights or to submit a complaint about our use of your personal data, you may contact us at the details set out in Section 8 (Contact Us) below.
4. Information Sharing
We may share your personal data with third parties under the following circumstances:
· Our Volunteers, Donors and Sponsors. We share your personal data with people that we work in collaboration with when hosting activities, events, meetings, conferences relating to our projects and work, to facilitate our projects, e.g. to enable them to contact you and respond to your queries and feedback.
· Compliance with Laws and Law Enforcement, Regulatory Authorities or for Protection and Safety Purposes. We may share personal information for legal, regulatory, protection, and safety purposes.
· Professional Advisors, Partners and Service Providers. We may share information with those who need your information to perform their work or services for us or on our behalf.
5. International Transfers
Your personal information may be transferred to or from Lebanon and Italy, or other locations outside of the UK where privacy laws may not be as protective as in the UK. We will take steps that are reasonably necessary to ensure that your personal information is treated securely and appropriately safeguarded in accordance with this privacy notice and applicable data protection or privacy laws.
Please contact us using the details in Section 8 (Contact Us) below if you want further information on the specific mechanism used by us when transferring your personal information out of the UK.
6. Information Security
We implement technical and organizational measures to ensure an appropriate level of security. These measures are aimed at ensuring the on-going integrity and confidentiality of personal data. We will continue to evaluate these measures to ensure the security of the processing.
7. Retention
We will keep your personal data for as long as is necessary for the purposes as stated in this privacy notice. We will only retain your personal data after this time if we are required to do so to comply with the law, or if there are outstanding claims or complaints that will reasonably require your personal data to be retained.
8. Contact Us
CatalyticAction is a data controller and is responsible for the personal data we collect and process. If you have questions or concerns regarding the way in which your personal data has been used, please contact us at info@catalyticaction.org and put “Privacy Request” in the subject line.
9. Changes to our Privacy Notice
We reserve the right to revise and reissue this privacy notice at any time. Any changes will be effective from the “effective date” stated at the end of this notice. If there are material changes to this privacy notice or in how we will use your personal information, we will notify you either by prominently posting a notice of such changes before they take effect or by sending you a notification directly. We encourage you to periodically review this privacy notice to learn how we are protecting your information.
Effective date: May 2023
We received your application and we will be in touch soon. In the meantime please consider subscribing to our newsletter: