Privacy statement
The Innocence Initiative, https://www.innocenceinitiative.org (hereafter “III”) processes personal data. In order to inform you in a clear and transparent way about this processing of personal data, this privacy statement is drafted. III respects your personal data and ensures that the personal information that is provided to us is handled in a confidential way. This privacy statement implements the obligation to inform data subjects of who III processes personal data. This obligation derives from the General Data Protection Regulation (GDPR) and other privacy nd data protection standards. In this privacy statement the most important questions concerning the processing of personal data by III will be answered.
Contact details
III is the controller with regard to the processing of your personal data. IIII is located at 180 N. LaSalle St., Suite 3700, Chicago, Illinois, USA. If questions rise concerning this privacy statement, you can contact us. You can reach us by telephone at number +1 (312) 204-7252 (ext. 2) and via email on mailto:mail@innocenceinitiative.org
Personal data
Personal data is all information that tells us something about a person or that can be associated with a person. Information that indirectly tells us something about a person, is also considered to be personal data. In this privacy statement, personal data means all information that III processes from you and by which you can be identified.
III processes personal data in order to provide services to clients or personal data that are provided by data subjects on their own initiative. This includes contact details and other personal details that are necessary for the handling of your case (or your application to volunteer with III), personal data you have filled in on contact forms or web forms, information you provide during (introductory) interviews, personal data available on public websites or personal data that can be obtained from public registers, such as the Cadastral Registry and the Trade Register of the Chamber of Commerce. III processes personal data in order to provide services, to improve these services and to be able to communicate personally with you as a data subject.
Whose personal data is processed by III?
This privacy statement applies to all persons whose data is processed by III. III processes personal data of people with whom we indirectly or directly have, want to have or have had a relationship. This includes the following persons:
(potential) clients of III;
applicants for positions (volunteers and affiliated attorneys);
people who are interested in the services of III;
people who are connected to a company or organisation with which III has, wants to have or has had a relationship;
visitors of the websites of III;
every other person that contacts III.
Purpose of the processing of personal data
III processes your personal data for the following purposes:
Providing legal services
Determining if you are eligible for legal services under our program
If you hire us in order to provide legal services, we ask you to share your contact details with us. It could also be necessary to receive other personal data in order to handle your case, depending on the nature of the matter. In addition, your personal data will be used in order to invoice for the services provided. If necessary for providing our services, we provide your personal data to third parties.
Providing information
III registers your personal data in a system and stores these data in order to provide information to you. This can be information concerning your relationship with III. If you don’t have a relationship with III (yet), you are able to request information using the contact form and submission forms on the website. III processes personal data in order to contact you and to provide you with the requested information.
Fulfilling legal obligations
III processes your personal data in order to fulfil legal obligations. According to the law and the rules of conduct that apply to lawyers, we are obligated to verify your identity on the basis of a valid identity document.
Recruitment and selection
III collects your personal data for the purpose of recruitment and selection. When you send a job/volunteer application to III, your personal data are stored in order to determine whether you will be invited for a job interview and in order to contact you with regard to your application.
Social media
III uses several social media networks, namely Facebook, Twitter and LinkedIn. If you use the functions on the website with regard to social media, we are able to collect your personal data through the social media networks concerned.
Measurement of business use of website
To measure the business use of our website, we use the Google Analytics service in the United States. We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, password, communications); payment details (including credit card information), comments, feedback, product reviews, recommendations, and personal profile.
Grounds for the processing of personal data
III processes your personal data on the basis of one or more of the following grounds:
Consent
III can process your personal data because you have given consent for such processing. You have the right to withdraw this consent at all times.
Based on a (yet to be concluded) agreement
If you hire III to provide legal services, we will process your personal data if and to the extend necessary for performing these services.
Legal obligations
Your personal data will be processed in order to comply with legal obligations. According to Anti money laundering and terrorist financing law, lawyers are obligated to collect and record certain information. This entails that, among others, the clients’ identity needs to be verified.
Legitimate interests
III processes your personal data when we have a legitimate interest to do so and when the processing does not breach your right to privacy in a disproportionate manner.
Sharing personal data with third parties
III discloses your personal data only to third parties when this is necessary for providing our services, respecting the grounds mentioned before. This could include the concluding of agreements, disclosing personal data with regard to (legal) procedures, correspondence with the counterparty or enabling third parties on behalf of and commissioned by III, such as ICT-providers. In addition, III can provide personal data to third parties, such as a supervisory or publicly appointed authority, insofar as there is a legal duty to do so.
A processor agreement will be concluded with each third party who processes your personal data on behalf of and commissioned by III. As a consequence, every processor is also obligated to comply with the GDPR. Third parties that are enabled by III, but provide services as a controller, are responsible themselves for compliance with the GDPR. This includes for example accountants and notaries.
Security of personal data
III values the security and protection of your personal data to a great extent and provides appropriate technical and organisational measures to ensure a level of security appropriate to the risk, keeping the state of the art in mind. When III makes use of the services of third parties, III will record agreements concerning the measures to be taken in the processor agreement.
Retention period
III will store the personal data that are being processed no longer than is necessary in order to reach the beforementioned purpose for which the data were collected, or than is required by laws or regulations.
Privacy rights of data subjects
According to privacy legislation, you have certain rights when your personal data are being processed:
Right of access
You have the right to obtain information as to which personal data of you are being processed and to have access to these personal data.
Right to rectification
You have the right to request the controller to rectify or complete inaccurate or incomplete personal data.
Right to erasure (‘right to be forgotten’)
You have the right to request III to erase the personal data that are being processed. III shall erase these personal data in the following situations:
if the personal data are no longer necessary in relation to the purpose for which they were collected;
if you withdraw your consent on which the processing is based and there is no other legal ground for processing;
if you object to the processing and there are no overriding legitimate grounds for the processing;
if the personal data have been unlawfully processed;
if the personal data have to be erased for compliance with a legal obligation.
Right to restriction of processing
You have the right to request III to restrict the processing of personal data when you believe that it is not necessary that certain information is processed.
Right to data portability
You have the right to receive the personal data that III processes and to transmit those data to another controller.
Right to object
You have the right, at any time, to object to processing of your personal data by III.
You can submit a request for access, rectification or completion, erasure, restriction, data portability or withdrawal of given consent at www.innocenceinitiative.org by sending an email to the following email address: Mail@innocenceinitiative.org You will receive an answer to your request within four weeks. There may be circumstances where III cannot (fully) implement your request. This could for example be the case when the confidentiality of lawyers or legal retention periods are involved.
mail@innocenceinitative.org
