October 3rd, 2024

THE CLIMATE INTELLIGENCE NETWORK DATA PROTECTION AND PRIVACY CODE OF CONDUCT

1. Introduction

This Data Protection and Privacy Code of Conduct outlines how Climate Intelligence Network (“CIN”) collects, processes, stores, and protects personal data in compliance with the General Data Protection Regulation (GDPR). All staff, volunteers, partners, and data processors engaged by CIN must adhere to this policy.

2. Scope

This Code applies to all personal data processed by CIN, including data collected through campaigns such as #TrackTheTrash, #SoundsOfNature, #OnTheGround, and through various software solutions.

3. Principles

CIN is committed to ensuring that personal data is:

  • Processed lawfully, fairly, and transparently.
  • Collected for specified, explicit, and legitimate purposes.
  • Adequate, relevant, and limited to what is necessary.
  • Accurate and kept up to date.
  • Stored securely and only as long as necessary.
  • Processed with integrity and confidentiality.

4. Data Collection and Processing

Personal data we may collect includes names, contact information, location data, audio recordings, and visual media submitted through our campaigns.

5. Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: Obtained before collecting and processing data.
  • Legitimate Interests: Where processing is necessary for our environmental and sustainability objectives.

6. Data Subject Rights

Data subjects have the right to:

  • Be informed about how their data is used.
  • Access their personal data.
  • Correct inaccurate data.
  • Request deletion of their data (right to be forgotten).
  • Restrict processing in certain circumstances.
  • Data portability.
  • Object to processing.
  • Withdraw consent at any time.

7. Data Security

We implement technical and organizational measures, including:

  • Data encryption and secure storage.
  • Restricted access to personal data.
  • Regular data protection audits.

8. Data Sharing and Transfers

We do not share personal data with third parties without explicit consent unless required by law. Data transfers outside the EU will follow GDPR-compliant mechanisms such as Standard Contractual Clauses.

9. Data Retention

Personal data will be retained only as long as necessary for the purposes stated. Once data is no longer needed, it will be securely deleted or anonymized. Personal data will be retained only as long as necessary for the purposes stated. Once data is no longer needed, it will be securely deleted or anonymized.

10. Breach Notification

In the event of a data breach, we will notify affected individuals and the relevant Data Protection Authority within 72 hours, as required by GDPR.

11. Training and Accountability

All CIN staff, volunteers, and partners will receive training on data protection practices. Compliance will be monitored regularly.

12. Contact Information

For data protection inquiries, contact:

Yuneth Wijenayake
Director – Data Science and Technology
Climate Intelligence Network
Email: yuneth@theclimateintel.org

13. Policy Review

This Code will be reviewed annually or as required by changes in data protection legislation.