Selected Language - English

Data Protection and Privacy Policy

This Data Protection and Privacy Policy was issued by UNITAR through the circular AC/UNITAR/2022/04 with the purpose of communicating data protection and privacy terms to UNITAR participants:

Background

  • UNITAR delivers hundreds of training and broader knowledge-sharing events yearly, with the participants from these events comprising UNITAR’s primary programme output.
  • UNITAR records a range of personal data to process participant applications/registrations and report on its various training and related services. This data may include first and last names, email addresses, main and billing addresses, gender, nationality, date of birth, organizational affiliation, and disability status.
  • Over the years, personal data protection and privacy have become growing concerns, and UNITAR is committed to ensuring that all participants understand why UNITAR records personal data, how long their personal data will be held by UNITAR, and what rights participants have as data subjects.
  • The UNITAR Data Protection and Privacy Policy (“policy”) on the Events Management System (EMS) has been revised to align with the United Nations Personal Data Protection and Privacy Principles.

Participant self-registration on the EMS

When participants apply or register for a UNITAR event directly through the EMS interface, they are required to agree to the policy and provide consent for UNITAR to use their personal data as described in the policy before their registration for the event is accepted.

 

Participants not self-registering on the EMS

When participants apply/register or participate in a UNITAR event that does not require direct participant registration through the EMS (i.e. when a participant’s application/registration is processed by paper or by a non-EMS registration platform or interface), UNITAR shall inform participants of the policy at the time of application/registration/participation by using the text below and/or inserting the QR code and/or hyperlink in the event’s announcement information, which may include calls for applications, registration forms (online or paper-based), course brochures, or other relevant event documents. In addition to this requirement and for events delivered in-person, the Programme Unit, Office, or other entities responsible for administering the event should ensure that a printed copy of the policy is available for consultation by participants.

 

Application

  • This policy shall apply to all UNITAR events, including events that are organized by affiliated partners (e.g., CIFAL Global Network) and implementing partners on behalf of UNITAR, in which any personal data is collected.
  • Programme Units, Offices, and other UNITAR entities administering events are responsible for ensuring that the policy is applied, including with relevant affiliated partners or implementing partners.
 

This Data Protection and Privacy Policy¹ stipulates how UNITAR collects and uses the personal data that you, as a UNITAR participant or website visitor (“user”), provides or that we collect from you when you use this website or when you register, apply or participate in a UNITAR event, whether in person or online, and outlines your data protection and privacy rights as a user.

Personal data is “any information relating to an identified or identifiable natural person” as defined in the United Nations Personal Data Protection and Privacy Principles, October 2018

When registering, applying or participating in a UNITAR event, UNITAR may collect the following data:

  • Personal identification information that you voluntarily provide to us:
    • E-mail
    • First Name
    • Last Name
    • Title
    • Gender
    • Nationality
    • Date of birth
    • Organization affiliation
    • Disability
    • Authorizations
      • To use the images or videos of UNITAR events in which you appear in digital or print media.
      • To receive UNITAR newsletters, upcoming course announcements and other communications by email.
    • Main and billing addresses

UNITAR does not request all of the above-listed personal data in all circumstances and some data such as date of birth and disability status are optional

You provide UNITAR with most of the data we collect. We collect and process data when you:

  • Create an account on this website.
  • Apply or register for UNITAR events.
  • Use or view this website (via cookies).

UNITAR collects your data so that we can:

  • Process your application or registration for an event.
  • Use your data for statistical purposes and internal reports. For example, we may download personal data from time to time in aggregate form for reporting purposes (e.g., to report on gender or geographic representation of our beneficiaries). We may also download personal data (e.g., email addresses) for the purpose of inviting feedback on our training services in the form of surveys. We never disclose or share an individual's identity in any reports unless duly authorized, except if required when reporting to donors.
  • Inform you of other UNITAR learning opportunities as a former participant or registered user.

UNITAR would like to ensure that you are fully aware of your data protection rights. All users are entitled to:

  • The right to access – You have the right to access your personal data from UNITAR. You can download a copy of your data by clicking on the button, “Download my personal data” on your profile page at any time, or by submitting a request by email to UNITAR at communications@unitar.org with a subject line “Subject Access Request”.
  • The right to rectification – You have the right to request that UNITAR corrects any personal information you believe to be inaccurate, or to add information that you consider to be incomplete. You can edit your own personal profile and update it at any moment.
  • The right to erasure – You have the right to request that UNITAR erases your personal identification information. Once data is erased, it won’t be possible to retrieve it, and any application in the process of selection will no longer be considered. You can delete your data by clicking on the “Delete my account” button on your profile page
  • The right to restrict processing – You have the right to request that UNITAR restricts the processing of your personal data. You can access your personal profile and click on the “Restrict access to my personal data” button. This action will temporarily anonymize your personal data. It will not be possible to access your data during this period and you will not be able to apply or register for events. You cannot restrict the use of your data while you are enrolled on an event.
  • The right to data portability – You have the right to download the personal data that you have provided to UNITAR. You can download a copy of your data on your profile page by clicking on the “Download my personal data” button. The data will be provided exclusively in CSV format.
  • The right to lodge a complaint – You have the right to lodge a complaint by contacting communications@unitar.org if you feel that the protection of your personal data has been breached.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit this website, we may collect information from you through cookies or similar technology. Please consult our cookie policy for more information.

UNITAR uses cookies to allow you to create an account on this website and access your personal data

Functionality – UNITAR uses cookies so that we can identify you and remember your preferences. This could include your preferred language or geographical location

You can set your browser to refuse cookies. However, in a few cases, some of our website features may not function as a result. Please consult our cookie policy for more information: - “How to Change Cookie Settings”

If you have any questions about UNITAR’s privacy policy, the data we hold on you, or, if you would like to exercise your data protection rights, please do not hesitate to contact us at communications@unitar.org

By creating a user account and/or submitting applications or related documents via this website, you hereby accept this data protection and privacy policy, and grant consent to UNITAR to collect, process and use your personal data in accordance with the provisions contained herein, or as may be modified from time to time.

UNITAR keeps your personal data for 5 years from the date you create a user account or from the date which UNITAR may record your personal data in our record system, at which point an automatic process will anonymize your personal data. After anonymization, your personal data, registrations and invoices cannot be recovered.

The conditions to anonymize the data are:

  • The user account has been created 5 years ago but the user has never accessed his / her account;
  • The user account has been created more than 5 years ago, but the last access from the user took place 5 years ago or more; or
  • The personal data has been recorded by UNITAR in its records system 5 years ago.

We keep your personal data on a secure website and we do not share or sell your data with third parties. Sensitive data, like passwords, are kept encrypted and all navigation is done under a secure (SSL) connection.