ORGANISATION DETAILS
|
Name of Organisation |
Caribbean Development Bank (“CDB” or “we”) |
|
Headquarters: |
Wildey |
|
Data Protection Contact |
Chairperson, Privacy Working Group |
CDB is committed to ensuring that we adequately protect the privacy of individuals who apply for a vacancy, provide CDB with services, or participate in a CDB-financed project, training programme, workshop, seminar or event (“users” or “you”). This Privacy Notice provides information regarding the processing of your personal data (i.e. information that identifies or may be used to identify you as an individual) by CDB in the course of providing you with our services or otherwise engaging with you. This processing is consistent with, or is reasonably necessary to enable CDB to carry out its mission, mandate, functions or purpose as an international organisation established by its member countries. In certain cases, processing personal data is also necessary for the performance of a contract or compliance with a binding obligation or undertaking by CDB.
SUMMARY
CDB respects your privacy and seeks to protect your personal data. The following information describes how we gather and use personal data. The amount of information we hold on you and how it is used depends on your relationship with us and on what service you use, so some of the sections below may not be relevant to you. Please note:
- We keep to a minimum the amount of information we hold about you.
- We use your personal data to respond to your enquiries about our services, to send you other useful information and to provide our services to you.
- We apply appropriate security mechanisms to protect your personal data.
We are happy to answer any questions you have about this Privacy Notice. Contact us via email at dataprivacy@caribank.org.
What Personal Data do we collect and why?
Please select the applicable section below to find out what Personal Data we collect and our basis for doing so.
We collect and update information about users of our services. We may obtain this information via direct contact with you, from third parties or automatically via your use of our services.
This information may include your contact details, registration and payment details, support problems, details around participation in events and certain relevant details of your preferences.
We also collect and use your information to administer, support, improve and obtain feedback on our services and to detect and prevent faults, breaches of our network security, the law or our contract terms. We may contact you to obtain feedback on that service and any improvements we could make to it.
Our legitimate basis for processing your personal data is that it is necessary for the performance of a contract or compliance with a binding obligation or undertaking by CDB.
We will collect contact details for the purposes of communication and invoicing. If as part of a tender process, we may also collect references and/or expert bios.
Our legitimate basis for processing your personal data when you contact us is to provide you with the content you have requested and to allow CDB to contact you post-event to solicit feedback and allow you the opportunity to subscribe for other events, seminars, and newsletters which we feel may be of interest to you.
We collect your contact information and use it to respond to your questions and requests. We keep this information on our database and may use it to periodically inform you of additional useful information. We may also inform you of other related events, publications or services unless you have requested that we do not do so.
Our legitimate basis for processing your personal data when you contact us is to allow us to respond to your communication.
We will collect your contact details including your name, email address and any other social media identity you provide.
Our legitimate basis for processing your personal data when you sign up for a newsletter or marketing is to allow us provide you with the content you have requested.
We will collect your name, address, contact details and any other data you supply to us via your curriculum vitae (CV). We may also subsequently collect proof of ID, references and right to work/visa documentation.
Our legitimate basis for processing your personal data when you apply for a vacant position is for reasonable pre-contractual or post-contractual communications and reference, qualification, and background checks if you are successful in the interview application process.
In certain circumstances we may collect your contact details and any other personal data relevant to the specific project.
Our legitimate basis for processing your personal data when you are a Beneficiary of or a participant in a CDB-financed Project is that it allows us to communicate with you with respect to the project and how it impacts you.
We will collect contact details for the purposes of communication and invoicing. If as part of a tender process, we may also collect references and/or expert bios.
When you participate in a procurement exercise, including responding to a CDB tender, is to service a contract between you and CDB or for reasonable pre-contractual or post-contractual obligations and requirements pertaining to this contract.
REASONS FOR PROCESSING PERSONAL DATA
CDB may process personal data for any of the following purposes:
- administering, coordinating and managing CDB’s relationships with CDB’s partners and potential partners in the context of CDB’s advisory, investment and project activities;
- analysing and monitoring the use of CDB’s projects and services for the purposes of developing and improving CDB’s projects and services;
- conducting advisory, investment and project activities, including relevant due diligence and monitoring in compliance with CDB’s policies and procedures;
- conducting credit and other risk assessment and control activities, including for the prevention and detection of corruption and fraud;
- investigating and responding to complaints, and establishing, complying with, exercising and defending CDB's legal rights and obligations, which may arise from CDB’s projects and services;
- maintaining appropriate accounting and other records;
- managing CDB’s information technology and ensuring the security of CDB’s systems; or
- understanding and monitoring the impact of CDB’s projects and services on development within the Caribbean region.
How do we Process your Personal Data?
ACCESS TO YOUR DATA
We apply role-based access to all of our core business systems. This means we work on a ‘need to know’ principle and only enable access for those within our organisation who have a legitimate business reason to access your data.
PROTECTING YOUR IDENTITY
In some cases, it may be appropriate to protect your data using pseudonymisation or anonymisation techniques. If this is something you require please contact us in advance of sharing your data.
Whom do we share your data with?
We work with various partners and associates in the provision of our services. We may disclose personal data about you to the legal entity (if any) with which you are associated, intermediaries, partners or other organisations involved in the ordinary course of conducting our advisory, investment, and project activities or monitoring the impact of such activities on development. We may also disclose your personal data to our legal and other advisors and service providers, subject to appropriate conditions of confidentiality and security.
All relevant third parties we use – including those who provide email and storage solutions used in our day-to-day work – are selected for, and monitored on, how they meet our data protection requirements. Where this includes storage or processing of information outside of CDB, we include checks to ensure that compliance with the appropriate frameworks for exchange of personal data are in place.
CDB may disclose relevant personal data about you to relevant legal, regulatory or administrative authorities, as we believe to be appropriate in the following circumstances: (i) to enforce the terms of relevant documents; (ii) to protect and defend our rights and property; (iii) to protect the interests of CDB or others; and (iv) to permit us to pursue available remedies or limit the damages that we may sustain.
We do not share your personal data with anyone else unless required to do so by law. We NEVER sell personal data.
How long do we store your data?
We keep your personal information for as long as reasonably necessary to fulfil the relevant purposes set out in this Privacy Notice and in order to comply or demonstrate compliance with our legal obligations and applicable records retention and disposal schedules.
Where we can, and it is appropriate, we will minimise personal data or anonymise data to use for statistical, analytical or reporting purposes. The length of time we retain your personal information for will differ depending on the nature of the personal information and what we do with it.
Further details as to the length of time we keep personal data regarding a specific processing activity can be obtained on request.
Requests and Complaints
You can request access to or information regarding your Personal Data processed by CDB. You can also request the correction of any inaccurate Personal Data held by CDB. In certain circumstances, particularly when your Personal Data is no longer necessary for processing by CDB, you can request its deletion. Should you wish to access your Personal Data, you can do so by completing the Personal Data Access Request Form, available on CDB’s website. All other requests may be submitted to dataprivacy@caribank.org or by writing to us at the address below:
Caribbean Development Bank
P.O. Box 408
Wildey
St. Michael
Barbados, West Indies
Should you feel that you need to complain about how CDB is handling your Personal Data or should you have any other questions related to CDB’s data privacy framework, kindly send an email to dataprivacy@caribank.org.
CONSENT
Where CDB has used your consent to process your personal data you can withdraw that consent at any time. This will not impact any previous processing activities that took place prior to the withdrawal.
Security
We have developed strict policies governing information technology. These cover areas such as access control, authentication, audit, monitoring, alarms, data storage and back up and transmission standards and environment integrity. We will use reasonable endeavours to install and have appropriate security measures in place in our facilities to protect against the loss, misuse or alteration of information that we have collected from you at our website.
What if this privacy notice changes?
CDB may update this Privacy Notice at any time. Changes to this Privacy Notice will be dated and will be effective from the date specified forward so that users are always aware of what Personal Data CDB collects, how CDB uses it, and under what circumstances CDB discloses it. You are advised to check CDB’s Privacy Notice regularly for updates.
Immunity
Nothing contained in this Privacy Notice shall operate or be regarded as a waiver, renunciation or modification of any right, privilege or immunity of CDB under the Agreement establishing the Caribbean Development Bank, international conventions or any other applicable laws.
Questions
If you have any questions about CDB’s personal data privacy framework or the use of data in a particular service, you should email dataprivacy@caribank.org.