Who are we?
The party responsible as data controller for the processing of your personal data described in this Privacy Policy is the International Finance Facility for Education (IFFEd), with registered address at Route de Chêne 30A, c/o L&S Trust Services SA, 1208 Geneva, Switzerland.
If you have any questions or requests relating to this Privacy Policy or to our processing of your personal data in general, please contact us at the above address or by e-mail at: info@iff-education.org.
What personal data do we process?
We primarily process personal data of Website users, partners, and private individuals who contact us regarding collaborations, partnerships, general inquiries or other specific interests.
While we usually collect personal data directly from you, we may also obtain it, where legally permitted, from public or semi-public sources (e.g. debt enforcement, criminal or land registers, commercial registers, media, or the Internet) or from third parties such as legal, tax, hiring, or media advisors. This information can include details about your role and professional activities, media or online mentions, and data related to your Website usage (e.g. IP or MAC address, device information, cookies, visit timestamps, content viewed, applications used, referring sites, and location data).
Why do we process personal data?
In accordance with applicable law and where applicable, IFFEd may process personal data for the following purposes:
- to carry out, promote and develop our activities towards the development of a financing engine for the promotion of global education and skills development;
- to implement, improve and measure the use of our processes, operations and websites (including but not limited to the Website), applications and other platforms on which we may operate;
- to communicate with you, assess and process your requests or inquiries;
- to initiate and conduct calls for partnerships and inviting submissions from eligible parties for collaboration;
- to carry out media campaigns;
- to the extent permitted by law, to advertise and promote our activities, including but not limited to through the organization of events or the processing of promotion communications (unless you are not interested)1;
- for research and development of our activities;
- for media and press monitoring;
- to ensure efficient management of the administrative and technical aspects of our activities and proper conduct of our operations, including our computer systems, websites, apps and other applications, as the case may be;
- to comply with applicable legal and regulatory framework (such as tax, accounting and AML/CFT regulations) and our internal rules and policies such as our ethical standards;
- assert and defend our rights and interests in litigation and legal proceedings;
- for network and information security purposes, i.e. to take measures to protect our and your information from loss, damage, alteration, theft or unauthorized access; and/or
- to guarantee the security of our premises, systems, property, assets and interests as well as the protection of any person working with us.
Do we use cookies, tracking or similar technologies to monitor our Website?
This Website uses cookies and similar technologies to help us understand how you interact with the Website by providing information on metrics such as the number of visitors, bounce rate or traffic source (analytical cookies).
For more details on the cookies and other similar technologies we may use, please contact us: info@iff-education.org.
Do we share your personal data?
As part of our activities and for the purposes outlined in section 3, we may share personal data with third parties where permitted and appropriate. These third parties may process your data on our behalf or, in some cases, for their own purposes. We are not responsible for how third parties use your personal data for their own purposes and encourage you to review their privacy policies. Your personal data may be shared with the following categories of recipients (“recipients“):
- our service providers and subcontractors, which can be affiliates of IFFEd or external service providers (such as website developers, customer service centers, HR and employment service providers, private intelligence companies and payment service providers);
- information technology service providers (for telecommunications, data storage and hosting and IT security in particular);
- financial establishments and insurance companies or brokers;
- partners and other organization associates;
- external consultants and event planners;
- legal, tax, accounting and fiduciary advisors as well as other professional advisors (including but not limited to auditors);
- national and foreign authorities or courts, as well as arbitral tribunals; and/or
- other parties involved in possible or pending legal proceedings.
We take appropriate measures to ensure that recipients of your personal data comply with data protection laws and handle your information securely. We only share the data necessary for the intended purpose and, whenever possible, use anonymized or aggregated data.
When outsourcing services, we carefully select recipients and ensure they process and store your personal data lawfully and securely. We are committed to protecting your personal data and do not sell it to third parties.
IFFEd stores and processes personal data primarily in Switzerland. While most recipients are based in Switzerland or the European Economic Area, some may be located in other countries, such as the United States of America.
If your personal data is transferred to a country without adequate legal protection, we implement safeguards, such as binding corporate rules or standard contractual clauses approved by the relevant supervisory authority. We may also rely on statutory derogations such as your express consent, contract necessity, the recognition, safeguarding or exercise of rights, an overriding public interest, personal data made public without objection and/or the need to protect individuals.
How long do we keep your personal data?
We retain your personal data only as long as necessary to fulfill the purposes outlined in section 3. Once no longer needed, the data is deleted or anonymized where possible. Operational data, such as system logs, is typically kept for no more than twelve months.
We may keep personal data longer if required by law or contract, or if we have a legitimate interest, such as preserving evidence to protect our rights. In all cases, data is not retained beyond legally permitted limits.
How do we protect personal data?
We take appropriate technical and organizational measures in order to avoid accidental or unlawful loss, deletion, destruction or modification or unauthorized disclosure or access to personal data.
These measures aim at protecting personal data confidentiality, integrity, availability and traceability, such as by means of internal regulations, training, IT and network security solutions, physical and logical access controls and restrictions, encryption of data carriers and transmissions and pseudonymisation.
What are your rights?
In line with applicable law, you may exercise your rights to access, correct, delete, or transfer your personal data, and to restrict or object to its processing. You may need to verify your identity (e.g. by providing ID) when exercising these rights. To do so, contact us as described in section 1 above.
You also have the right to take legal action or file a complaint with the relevant data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
To help us maintain accurate and up-to-date records, please promptly inform us of any changes or errors in your personal data.
Changes to this Privacy Policy
We may amend this Privacy Policy at any time and without prior notice. The current version published on our Website is authoritative. If the Privacy Policy forms part of an agreement with you, we will inform you of any changes by e-mail or other appropriate means.
1 Note that promotion communications should always (1) include clear contact details of the sender (i.e. IFFEd), (2) allow the recipient to easily unsubscribe from these communications and (3) be limited to IFFEd’s customary activities. For broader marketing communications (going beyond the scope of IFFEd’s customary activities for which you do not know if the recipient will have an interest), you should collect the recipient’s consent (opt-in procedure).
