Who We Are

UNDP Sustainable Insurance Forum is the data controller for this website.

Email: sif.secretariat@undp.org
Address: UNDP, 1 United Nations Plaza, New York, NY 10017, United States

What Data We Collect

We collect the following categories of personal data when you visit and use this website:

Cookie consent preferences: your choices about which cookies you accept or reject, and related records needed to apply those choices.

Device and connection information: information your device sends when you access the site, such as your IP address, browser type, device type, operating system, and basic connection and request information needed to deliver the website to you.

Contact form details: the information you choose to send us when you contact us through the website (for example, your name, email address, and the content of your message).

Website usage data (analytics): information about how visitors use the site (for example, pages viewed and interactions). This is collected through analytics cookies and similar technologies only when you give consent.

Sources of data:
We receive data directly from you when you contact us through the website.
We receive some data automatically when you access the website (such as IP address and device information).
We receive data from cookies and similar technologies; non-essential cookies are used only after you provide consent.

Providing contact form details is optional, but if you do not provide them, we may not be able to respond to your enquiry. Providing device and connection information is necessary to load and secure the website. Providing analytics data is optional and depends on your cookie choices.

How We Use Your Data

We use your personal data for the following purposes:

To provide and display the website and its content, and to ensure the site functions properly (legal basis: legitimate interests).

To respond to enquiries and follow up on messages you send through the contact form (legal basis: legitimate interests).

To protect the website and visitors by monitoring, preventing, and investigating security threats and misuse (legal basis: legitimate interests).

To measure and understand how the website is used, so we can improve its content and performance, using analytics cookies and similar technologies (legal basis: consent).

Who We Share Your Data With

We share personal data only as needed for the purposes described in this policy.

Analytics services: if you consent to analytics cookies, website usage data may be shared with our analytics provider(s) to help us understand how the site is used. Such providers process data in accordance with their own privacy policies.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Some of our service providers are located outside the EU/EEA, specifically in the United States. This may involve transferring personal data to the United States where it may be subject to different data protection standards.

Google Analytics (United States): Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).

Microsoft (United States): Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework (DPF).

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

We keep the details you send through the contact form for as long as we need them to deal with your enquiry and any follow-up, and in any case no longer than 2 years from our last contact, after which we delete them.
Analytics data collected through Google Analytics is retained for 14 months, in line with our Google Analytics settings, or until you withdraw consent, whichever comes first.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.

Analytics data: until consent is withdrawn or according to the analytics tool retention settings.

Your Rights

If you are in the EU/EEA, the UK, or Switzerland, you have the following rights in relation to your personal data, subject to applicable conditions and exceptions:

You can request access to your personal data.
You can ask us to correct inaccurate or incomplete data.
You can ask us to delete your data.
You can ask us to restrict how we use your data.
You can request to receive certain data in a portable format and, where technically feasible, have it transmitted to another organization.
You can object to processing based on our legitimate interests, and we will stop unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or we need the data for legal claims.
You can withdraw your consent at any time for processing based on consent (this will not affect processing carried out before you withdrew consent).
You have the right not to be subject to automated decision-making or profiling that produces legal effects or similarly significantly affects you.

To exercise your rights, contact us at sif.secretariat@undp.org. We will respond within one month.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. Where required, we will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it. We maintain procedures to detect, report, and investigate security incidents. If you suspect a security issue, please contact us at sif.secretariat@undp.org.

How to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection authority in your jurisdiction. We encourage you to contact us first at sif.secretariat@undp.org so we can try to address your concerns directly.

Updates to This Policy

We review and update this policy periodically. The “Last updated” date at the top of this policy shows when it was last changed. If we make significant changes, we will provide a notice on the website or, where appropriate, contact you by email. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: sif.secretariat@undp.org
Address: UNDP, 1 United Nations Plaza, New York, NY 10017, United States
Data Controller: UNDP Sustainable Insurance Forum