Privacy Policy
At the Arab Center for Law and Society Studies (ACLSS), we are committed to protecting your privacy and ensuring the confidentiality of the personal data you provide when using our website and services. This Privacy Policy explains how we collect, use, protect, and disclose your personal data in accordance with applicable laws and regulations. By using our website and services, you consent to the practices outlined in this policy.
1. Data we collect
We collect personal data that includes any information that can identify you, either directly or indirectly. This includes:
- Personal information you provide, Such as your name, email address, and any additional details you provide when subscribing to newsletters, participating in surveys, registering for events, or contacting us.
- Automatically collected information: Technical data automatically gathered when you visit our website, such as your Internet Protocol (IP) address, browser type, operating system, and browsing patterns.
2. How do we collect your information?
Your data is collected through the following methods:
- Direct interactions: When you register for services, subscribe to our newsletter, participate in events, or comment on website content.
- Cookies: Our website uses cookies to enhance your experience and gather information about website usage. The types of cookies we use include:
- Essential cookies: These ensure the website functions properly, such as saving language preferences and login details.
- Analytical cookies: These collect data on how the website is used (e.g., pages visited, time spent on the site) to improve the user experience.
You can manage cookies through your browser settings and choose to accept or reject cookies based on your preferences.
We use cookies to analyse website traffic, improve user experience, and save your preferences, ensuring your experience is continuously optimised.
3. How do we use your information?
We use your personal data for the following purposes:
- Improving our services: Analysing data to enhance the user experience and deliver better services.
- Providing support: Using your data to offer necessary assistance and resolve any issues you may encounter.
- Communicating with You: Sending updates or messages regarding our services or any changes to them.
- Engaging with users: Personalising content and tailoring services to match your interests.
We are committed to using your data solely for the purposes for which it was collected and in alignment with this policy.
4. Legal basis for processing your data
Following the General Data Protection Regulation (GDPR) and relevant laws, the legal basis for processing your personal data is as follows:
- Consent: When you have explicitly provided your consent for data processing, such as subscribing to email updates or submitting service requests.
- Contract: For processing data necessary to fulfil a contract between you and us, such as support services or delivering products.
- Legal compliance: In cases where the law requires the collection or retention of your data.
- Legitimate interests: Activities that enhance our services while aligning with your or our legitimate interests, including:
- Improving user experience: Analyzing user behaviour to improve the website or application interface.
- Providing customer support: Using your data to deliver efficient and responsive support.
- Managing targeted marketing campaigns: Reaching the right audience through tailored marketing initiatives.
We ensure that such processing is conducted in alignment with your rights and interests in protecting your personal data.
5. Disclosure of your information
We share your personal information with third parties only in cases required to deliver the services we provide to you or as outlined in this policy. This may include service providers or legal authorities if mandated by law.
We ensure that any third parties we share your data with adhere to data protection policies comparable to ours to guarantee its security.
These third parties may include:
- Stripe: If you use the online payment service.
- Mailgun: For managing newsletter subscriptions or actions requiring automated email responses, such as membership registration.
- Google: We use Google servers for email services and our "Contact Us" page. We do not use services like Google Analytics on this website, and our data is stored on Google enterprise servers, ensuring complete control over the data and preventing its use for targeted advertising by Google.
- Cloudflare: We utilise Cloudflare to protect the website from Distributed Denial of Service (DDoS) attacks and to encrypt certain parts of your connection to the site. Consequently, Cloudflare may process some of your personal data, such as your IP address.
6. Security
We implement standard security measures to protect your personal data and ensure it is not lost, misused, or breached. However, there are inherent risks associated with transmitting information online. We use security protocols such as SSL encryption to safeguard our website. Our security policies are regularly reviewed to ensure alignment with best practices and current security standards against emerging threats.
7. Data retention
We retain personal data only for as long as necessary to provide our services or to comply with legal obligations. Data is kept only for the duration required to fulfil the purposes outlined in this policy or as mandated by applicable legal requirements. After this period, the data will be deleted or anonymised as needed.
8. Transfer of personal data
Your personal data is stored on servers located outside your country. If data transfer to third parties is required, we take all necessary steps to protect it. We ensure that any transfer of data complies with data protection laws and take appropriate measures to safeguard personal data during transfers, including the use of security technologies such as encryption to ensure data protection during transmission.
9. Your rights regarding personal data
Under the law, you have several rights concerning your personal data, including:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: If your data is inaccurate, you can request its correction.
- Right to erasure: You can request the deletion of your personal data under specific circumstances.
- Right to object: You can object to the processing of your personal data in certain cases, such as when processing is based on legitimate interests.
- Right to restrict processing: You can request the restriction of your data processing if you contest its accuracy or if the processing is unlawful but you prefer the data to be retained for other purposes, such as establishing or defending legal claims.
You can exercise these rights by contacting us via the email address provided below. We will process your request in compliance with applicable laws.
To exercise these rights, please contact us at [email protected].
10. Changes to the Privacy Policy
We may update this Privacy Policy periodically. It is typically reviewed and updated annually or as necessary to reflect changes in legislation or to improve our services. Any changes will be announced on this page, and we recommend visiting this page regularly to stay informed about the latest updates.
11. Legal references
This Privacy Policy is based on the following international legislation and standards to ensure the protection of personal data:
- General Data Protection Regulation (GDPR):
The Arab Center for Law and Society Studies complies with the GDPR, which governs the collection, use, and protection of personal data within the European Union. We are committed to implementing all principles and procedures outlined in the regulation, including ensuring individuals’ rights to access, correct, delete, and restrict the processing of their data, as well as implementing appropriate security measures. - French Data Protection Law (Loi Informatique et Libertés):
The centre adheres to the French "Loi Informatique et Libertés," which regulates the collection, use, and protection of personal data in France. We are committed to upholding this law to protect the digital rights of French users and applying key privacy principles such as access, rectification, and deletion. This law aligns with the GDPR, enhancing security and transparency in personal data processing within France. - United Nations Convention on the Protection of Human Rights and Digital Rights:
We comply with international agreements, such as the United Nations Convention on the Protection of Human Rights and Digital Rights. This convention supports the safeguarding of individuals' digital rights and ensures that personal data is collected and used in accordance with international standards. - International Security Standards:
To comply with international security standards, we use technologies such as SSL encryption and store data in secure environments. We are committed to implementing robust security measures to protect personal data from unauthorised access, both within and outside the European Union.
We are dedicated to aligning our privacy policies with global standards established by international organisations to ensure the continuous protection of your personal data. These policies foster trust and reinforce our commitment to safeguarding your personal rights on both local and international levels.
Last updated: 5/12/2024