NRGI strives to comply with all applicable privacy laws in the jurisdictions in which it operates. This includes the U.K. General Data Protection Regulation and the Data Protection Act.
 
NRGI may collect information about you
 
NRGI collects information from you in three ways: directly from you during your ongoing relationship with NRGI, from publicly available sources, and/or from third parties providing NRGI with services or acting on its behalf. The amount of data NRGI collect depends on the frequency and nature of your interactions with NRGI. NRGI collects this information to better interact with you and to further its mission to improve natural resource governance.
 
NRGI may collect and store the following on paper or electronically:

  • your name
  • present and past professional and educational affiliations and roles
  • mail addresses, electronic addresses, and/or telephone numbers
  • topics about which you wish to interact with NRGI
  • the type, form, location, and date of your interactions with NRGI
  • in a public forum or with your consent, your photograph
  • any correspondence you have with NRGI
  • publicly available, public interest information about you
  • your publicly available social media postings such as tweets or Facebook posts or those made via direct message to NRGI personnel
  • other material and/or speeches authored or published by you

In order to understand how you interact with the organization NRGI may collect and store the following when you contact NRGI electronically:

  • your email address and subscription preferences when you agree to receive emails from NRGI
  • how you use NRGI’s emails—for example whether you open them and which links you click on
  • your IP address and which version of a web browser you used
  • information on how you use NRGI’s sites, using cookies and similar technologies such as pixels, tags, web beacons, and other identifiers

Links to and from other websites. NRGI websites such as ResourceGovernance.org, ResourceGovernanceIndex.org, ResourceContracts.org, and ResourceProjects.org contain links to other, non-NRGI websites. If you go to a non-NRGI website from an NRGI web site, read the privacy policy on that other website to find out what it does with your information. If you come to one of NRGI’s websites from a non-NRGI website, NRGI may receive information from the other website. You should read the privacy policy of the website you came from to find out more about this.
 
Legitimate interest. NRGI holds and processes professionally relevant data for individuals where it has a legitimate interest (as defined by the General Data Protection Regulation) to do so based in its mission and purpose. Where NRGI uses legitimate interest as the basis for holding or processing your information the organization has carefully considered how it holds and processes your data to ensure it carries out activities balancing your and its interests in the most efficient and effective way.
 
Who can use your information
 
Your data can be viewed by authorized people in NRGI to:

  • improve the site by monitoring how you use it
  • gather feedback to improve NRGI’s services, for example email alerts
  • respond to any feedback you send NRGI upon request
  • provide you with the services, event invitations, newsletters, and information about NRGI which you request by subscribing to NRGI’s updates
  • audit the downloading of data from NRGI’s sites

Where and how your data are stored and processed
 
NRGI stores your data in physical form and on its own computers and servers secured in its offices and on secure cloud-based servers operated by third-party contractors who are contractually obligated to keep the information secure and not to share it with others. NRGI has staff and offices based within and outside the U.K., the EU, and the European Economic Area (EEA), and may store and/or process your information outside the U.K, EU, and/or EEA. Any such storage or processing is carried out only under GDPR-compliant data-sharing agreements and with staff and offices bound to maintain GDPR-compliant policies and security. By submitting your personal data and asking NRGI to keep you informed in a way which requires us to maintain your information, you agree to this.
 
One of the contractors NRGI uses is MailChimp for email updates. MailChimp has staff based outside the EEA, and stores your data in the U.S. As a data processor on behalf of NRGI, MailChimp will use your information to send you email updates if you request them. NRGI, through MailChimp and using its own databases, maintains a record of when you requested to be contacted and for what purposes.
 
Sending information over the internet is generally not completely secure, and NRGI cannot guarantee the security of your data while it’s in transit. Any data you send over the internet is at your own risk.
NRGI has procedures and security features in place to keep your data secure once NRGI receives it.
 
Disclosing your information
 
NRGI treats your information with respect. NRGI won’t share your information with any other organizations for marketing, market research, or commercial purposes, and NRGI doesn’t pass on your details to other websites except as part of its own internal processing. NRGI may pass on your personal information if it is legally compelled to do so.
 
How long NRGI keeps your data
 
NRGI stores, processes, and retains your data only as long as it is deemed relevant to fulfilling your requests or, in the case of public interest or research, relevant to NRGI’s mission. You may instruct NRGI to delete your information that is not publicly available/public interest at any time as detailed elsewhere in this policy. NRGI may also keep a record of your request for deletion, but not the information itself, in order to ensure NRGI does not re-collect or otherwise process such information in the future.
 
Your rights
 
You can find out what information NRGI holds about you, and ask NRGI not to use any of the information it collects about you.
 
If you’ve signed up for email updates, you can unsubscribe at any time. There is an unsubscribe option at the bottom of every email update. You can also ask NRGI to amend or delete the information NRGI holds about you. Contact details are at the end of this policy.
 
Changes to this policy
 
This policy may be revised in order to comply with regulatory or legal requirements, to make it clearer, or to improve NRGI’s practices. The current policy will be kept up to date here and can always be obtained by contacting NRGI directly.
 
Contacting NRGI
 
You can submit any questions, concerns, or comments you have about this privacy policy or any requests concerning your personal data by email to [email protected]. You can also write to the Chief Financial Officer, NRGI, 80 Broad Street, Suite 1801, New York City, New York 10004, USA.
 
Last updated 23 May 2018