Accountability

 

Protecting Privacy – Website

1. Introduction

Cuso International (Cuso) is committed to protecting the privacy and personal information of our employees, donors, volunteers, alumni, and all other participants engaging with our organization. Cuso’s Protecting Privacy & Confidentiality Policy is outlined in our Code of Conduct (link above). Outlined below is important information about how we collect, use, disclose, and safeguard personal information.

 

2. Consent

Knowledge and consent is required before collection of personal information, it’s use or disclosure, subject to some exceptions (i.e. to satisfy legal requirements or in serious emergency situations).

By engaging with Cuso, individuals consent to the collection, use, and disclosure of their personal information as outlined below. Consent may be withdrawn at any time, subject to legal or contractual restrictions.

In the event of a data breach involving personal information, Cuso will immediately notify affected individuals and regulators as required by law.

 

3. What Personal Information Does Cuso Collect?

Cuso may collect and process different types of personal information including but limited to information about an individual that includes race, ethnic background, colour, age, gender, income, marital status, family status, religion, political opinions, education, trade union membership, sexual orientation, health information and medical history, photographs, criminal record, employment history, financial status, donation records, address, telephone number(s) and any numerical identification such as Social Insurance Number. Personal information also includes information that may relate to the work performance of an individual, as well as any allegations, investigations or findings of misconduct or discipline.

Cuso collects only the personal information necessary for the purposes identified below.

 

4. How Does Cuso Collect Personal Information?

Personal information is collected directly from individuals and through interactions with them through the following organizational activities:

- Apply to Cuso as an employee or volunteer

- Become an employee or volunteer

- Make a donation (including online donations involving credit card information)

- Register for events, newsletters, or webinar

- Participate in project activities, meetings, trainings, or events

- Cuso may also collect personal information from third-party sources, such as references, background check providers, or publicly available sources, where permitted by law.

 

5. How Does Cuso Use Personal Information

Personal information will be kept strictly confidential and may only be used for identified operational reasons. This includes:

- to facilitate the delivery of project activities, including reporting on progress and results to funders;

- for marketing and program development purposes;

- for recruitment, hiring and payroll administration;

- to meet our legal, regulatory or risk management obligations; and

- Personal information will be retained only as long as necessary to fulfill the purposes for which it was collected or as required by law.

 

6. How Does Cuso Protect your Personal Information?

Cuso protects personal information provided to us using appropriate physical, organizational, and technological safeguards to protect against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, misuse or other unlawful forms of processing of personal information in our possession.

- Secure storage and data backup of all data within Cuso’s IT environment.

- Restricted access permissions within Cuso’s IT environment to ensure that the only employees or volunteers who have access to your personal and or confidential information are those who have a need to know or whose duties reasonably require them to know it.

- Cuso ensures that all credit card donations are processed using industry-standard SSL technology to keep your information secure. Your sensitive financial information never touches our servers. We send all data directly to our third party’s PCI-compliant servers through SSL; and

- Staff training on privacy and data protection best practices.

 

7. Individual Access

Individuals have the right to access the personal information held about them and to request corrections if the information is inaccurate or incomplete. Requests for access to personal information or for corrections must be submitted in writing to the Privacy Officer and will be responded to within 14 days. The request should include:

- Full name and contact information of the requester

- A detailed description of the information being requested or corrected

- Any relevant dates, departments, or interactions to assist in locating the information.

 

8. How to Contact Cuso

Questions, comments, or complaints regarding Cuso’s Privacy Policy or the handling of personal information, as well as requests to exercise privacy rights, file a complaint, or obtain information about policies and practices related to service providers, should be directed to the Privacy Officer by email allegations@cusointernational.org or by mail as follows:

Cuso International

Attn: Chief Operating Officer

Privacy Officer

130 Slater Street, Suite 800

Ottawa, Ontario

K1P 5H2