21 November 2024

Centre for Digital Rights

Non-profit

Centre for Digital Rights — Privacy Notice

 

This privacy notice (“NOTICE”) provides details about how the Centre for Digital Rights (“CDR”) collects, uses and discloses your personal information/data (“PI”) on this website (“SITE”). CDR is responsible for PI under its control and has a privacy officer/data protection officer (“PRIVACY OFFICER”) to promote and help ensure compliance with applicable privacy laws, which include the Personal Information Protection and Electronic Documents Act (Canada) (“PIPEDA”) and the European Union’s General Data Protection Regulation (“GDPR”).

 

THE SITE — By using the Site, you signify your consent and agreement to our collection, use and disclosure of your PI as outlined in this Notice. CDR is committed to protecting the privacy of Site users’ PI and respects the need for security surrounding the collection, use and disclosure of this information. The Site may contain links to sites that are owned or controlled by other organizations. CDR has no influence on, and is not responsible for, the privacy practices or the content of other sites.

 

USE OF PI FOR THE SITE — We use your PI to provide you with this Site, make sure it does not go offline and obtain an anonymous statistic to see if we succeeded in doing so.

 

OUR PURPOSES IN COLLECTING YOUR PI — We collect transactional data such as your IP address in order to provide this Site to you and use it for ensuring the security of the Site. This information includes IP addresses of computers accessing the Site, the operating systems and the types and versions of browsers used to access the Site, the date and time the Site is accessed, the webpages visited, the key words used in the search engine, the name and size of files requested, and the URL of any referring website.

 

LEGAL BASIS — The legal basis of our collecting your PI is your request to enable you to use the Site and our legitimate interests in the security of the Site. For security reasons, we may process your PI (including IP addresses) on the Site.

 

STORAGE — Transactional data is not stored. Security log data (e.g., when the software identifies an “incident”) are deleted within 7 days, unless there is a specific reason to keep that information for a longer period of time (e.g., individual IP addresses are blocked).

 

SHARING YOUR PI — We do not share your PI with other organizations/data controllers.

 

DATA PROCESSORS — We use trustworthy third party service providers/data processors that process your PI on our behalf.  For the Site, our current hosting provider is Web Hosting Canada.

 

TRANSFER OF DATA TO THIRD COUNTRIES — We store your PI within Canada and do not transfer it to other countries.

 

STATISTICS — We maintain a statistics system that does not track PI. While our system is anonymous, we also respect “do not track” requests and offer opt-out options to exclude data on your visit to the Site from any kind of statistics.

 

COOKIES — We do not store PI in cookies. We may store your own-page settings in non-personalized ways (e.g., your language settings).

 

DISPOSAL OF PI — PI that is no longer required will be disposed of in a secure manner.

 

PRIVACY BREACH NOTIFICATIONS — If any breach of the security safeguards involving your PI under our control occurs that creates a real risk of significant harm, we will, as soon as feasible after we determine that such a breach has occurred, notify you and report the breach to the Office of the Privacy Commissioner of Canada (“OPC”) as required under PIPEDA.

 

DISCLOSURE REQUIRED BY LAW — We will disclose your PI as required by law or to comply with a judicial proceeding, court order or legal process served on us.

 

USER RIGHTS — With respect to your PI, you have the right to access, to rectification, to object, to restriction of processing, to data portability and to withdraw your consent: Just send us a message at info@centrefordigitalrights.org. You also have the right to make a complaint to the OPC.

 

INFORMATION REQUESTS AND CONCERNS — If you have any requests or concerns regarding this Notice or the collection, use or disclosure of your PI by CDR, or if you wish to withdraw consent for CDR to collect, use or disclose your PI, please contact our Privacy Officer with your request or concern.

 

CDR’s Privacy Officer is Neve Peric who can be contacted at: info@centrefordigitalrights.org.

 

Alternatively, you may contact the OPC at:

 

Office of the Privacy Commissioner of Canada
30 Victoria Street, 1st Floor
Gatineau QC  K1A 1H3
Canada
+001 800 282 1376

 

CHANGES TO NOTICE — Privacy laws and circumstances are rapidly evolving and, as a result, from time to time, we may need to change this Notice in which event we will post the most current version on the Site.

 

Last updated November 26, 2019