Purpose and lawful basis for processing

The National Institute for Transparency, Access to Information and Personal Data Protection (INAI), with address at Av. Insurgentes Sur 3211, Zip Code 04530, Mexico City, currently acts as Secretariat for the Global Privacy, is the controller for processing the personal data that provide of GPA members, applicants and current members of the Reference Panel, observers, alumni, volunteers, conference speakers and members of the public who proactively engage with us via our communication channels.

This information provided will be safeguarded in compliance with the provisions of General Law on Personal Data Protection held by Obliged Subjects (LGPDPPSO); the General Guidelines for the Protection of Personal Data for the Public Sector (abbreviated “LG” in Spanish); as well as the Guidelines establishing the parameters, modalities and procedures for personal data portability (Portability Guidelines), and also Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Contact details for the public:

 o Controller’s name: National Institute for Transparency, Access to Information and Personal Data Protection (INAI)

o Phone number: 800 835 4324

o Website Address: https://home.inai.org.mx/

o E-mail: unidad.transparencia@inai.org.mx

Personal data to be processed:

 Identification data: Full name, nationality and photograph.

Contact details: Address, e-mail address, landline and mobile telephone number.

Employment data: Institution where you work, job, position, current commission, institutional e-mail, career and professional experience.

How we obtain your personal data to be processed?

 

Category Mean sor source of obtainment Sensitive personal data
YES NO
Identification data:

Ø Full name.

Ø Nacionality.

Ø Photograph.

Personal data can be collected from the data subject and via e-mail.    

x

Contact details:

Ø Address.

Ø E-mail address.

Ø Landline telephone number.

Ø mobile telephone number.

Personal data can be collected from the data subject and via e-mail.    

x

Employment data:

Ø Institution where you work.

Ø Job, position, current commission

Ø  Institutional e-mail

Ø Career and professional experience

Personal data can be collected from the data subject and via e-mail.    

 

x

 Please note that NO sensitive personal data will be collected.

What purposes will the GPA Secretariat use your personal data for?

 The personal data collected by the GPA Secretariat will be used for the following purposes that do not require consent:

 Communicate with you for the implementation, development and follow-up of the GPA’s activities.

  • Provide and distribute communication with the GPA Executive Committee members.
  • Adopt the reports of the working groups and the report of the GPA Executive Committee.
  • Conduct elections of the GPA Executive Committee.
  • Conduct the discussion and adoption of GPA Resolutions.
  • Integrate the GPA’s newsletter.
  • Provide the Newsletter to be developed by the GPA members
  • Send press releases, as well as disseminate and circulate publicity regarding the work produced for the GPA.

Basis for the processing of personal data:

Processing of personal data is carried out based on articles 17, 21, section XVII of the Federal Law of Transparency and Access to Public Information, last amendment published in the Official Gazette of the Federation on May 20, 2021; 31, sections II, V and XIV of the Organic Statute of the National Institute for Transparency, Access to Information and Personal Data Protection, published in the Official Gazette of the Federation on January 17, 2017 and last amended on March 18, 2021; as well as numeral 3.4 of the GPA Rules and Procedures.

With whom we share your personal data and for which purposes?

 Please note that your personal data may be transferred to the recipients below and for the purposes specified, which do not require consent, according to the terms set out below:

 

 

Recipient of personal data Purpose Legal Basis
 

Jersey Data Protection Authority

Carry out the work and tasks assigned for the operation of the GPA. Article 22, section II and 70, section II of the LGPDPPSO, published in the Official Gazette of the Federation on 26 January 2017.

Numeral 3.4 of the GPA’s Rules and Procedures.

Federal Commissioner for Data Protection and Freedom of Information, Germany. Carry out the work and tasks assigned for the operation of the GPA. Article 22, section II and 70, section II of the LGPDPPSO, published in the Official Gazette of the Federation on 26 January 2017.

Numeral 3.4 of the GPA’s Rules and Procedures.

Morocco-National Commission for the Protection of Personal Data Protection Carry out the work and tasks assigned for the operation of the GPA. Article 22, section II and 70, section II of the LGPDPPSO, published in the Official Gazette of the Federation on 26 January 2017.

Numeral 3.4 of the GPA’s Rules and Procedures.

 

Bulgarian Commission for Personal Data Protection

Carry out the work and tasks assigned for the operation of the GPA. Article 22, section II and 70, section II of the LGPDPPSO, published in the Official Gazette of the Federation on 26 January 2017.

Numeral 3.4 of the GPA’s Rules and Procedures.

Office of the Bermuda Privacy Commissioner Carry out the work and tasks assigned for the operation of the GPA. Article 22, section II and 70, section II of the LGPDPPSO, published in the Official Gazette of the Federation on 26 January 2017.

Numeral 3.4 of the GPA’s Rules and Procedures

Personal Information Protection Commission Carry out the work and tasks assigned for the operation of the GPA. Article 22, section II and 70, section II of the LGPDPPSO, published in the Official Gazette of the Federation on 26 January 2017.

Numeral 3.4 of the GPA’s Rules and Procedures.

Philippines National Privacy Commission Carry out the work and tasks assigned for the operation of the GPA. Article 22, section II and 70, section II of the LGPDPPSO, published in the Official Gazette of the Federation on 26 January 2017.

Numeral 3.4 of the GPA’s Rules and Procedures.

No transfers will be made that require consent, in compliance with articles 27, section III of the LGPDPPSO, and 32 of the GL; as well as section 101 and articles 44, 45 and 46 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation),  ensuring an adequate level.

Processor

We inform you that INAI does not have any data processors for the treatment of personal data.

Where can the rights of access, correction/rectification, cancellation, or opposition of personal data be exercised?

You may exercise your rights of access, rectification, cancellation, or opposition of your personal data directly in the Transparency Unit of this Institute, located at Av. Insurgentes Sur 3211, Zip Code 04530, Mexico City, with telephone number 55-50-04-24-00, extensions 2121, 2760 and 2565, or through the National Transparency Platform (http://www.plataformadetransparencia.org.mx/) or in the email unidad.enlace@inai.org.mx.

If you want to know the procedure for exercising these rights, you can go to the Transparency Unit, send an email to the address mentioned above, or contact Telinai 800835-43-24.

Likewise, if you are an European resident, you may exercise your rights of access, rectification and deletion of your data, limitation and opposition to its processing, when applicable, to the INAI.

Portability of your personal data

In terms of the provisions of Article 57 of the LGPDPPSO, the right to portability is the right of the owner of the personal data to obtain from the data controller a copy of the data being processed in a structured and commonly used electronic format, to allow him/her to continue using his/her personal data and, where appropriate, to deliver it to another data controller for its reuse and exploitation in a new processing, provided that portability does not affect the rights and freedoms of a third party.

INAI, currently, does not process personal data subject of this privacy notice in structured formats and commonly used for the portability of personal data, in terms of the provisions of Articles 57 of the LGPDPPSO; 6 and 8 of the Portability Guidelines.

If you are dissatisfied with the response granted to your request for ARCO and Portability rights, you have the right to file an appeal for review before the INAI, in accordance with the provisions of articles 94 to 116 of the LGPDPPSO and 123 to 159 of the LG.

Also, if you are a resident of the European territory, and you consider that there is any violation of your rights of access, rectification and deletion of your data, limitation and opposition to its processing, you can file a complaint with the data protection authority of your country and other competent supervisory authorities.

 Changes to the privacy notice

We are committed to keep you informed about the changes that this privacy notice may undergo, through the website https://globalprivacyassembly.org/privacy-notice/.

 How long will we process your personal data?

We hereby inform you that INAI will process personal data for as long as we are GPA Chair and Secretariat. will end in October 2023.

 

Date of elaboration: March 31, 2022