International Olive Council Website and Social Media Privacy Policy

The purpose of this policy is to set out how the International Olive Council (IOC) safeguard any information disclosed to the IOC or that may be collected by the IOC through its website and social media (herein shortly “site”). Any personal data received by the IOC will be treated in accordance with this policy.

This policy extends to all processing of personal data. This privacy policy also applies to the use of IOC’s social media sites (Twitter and LinkedIn platforms). Anonymised data, e.g., for statistical evaluations or studies, is not subject to this policy.

Social media platforms collect and process personal data when you visit them, and the IOC has no control over this.

“Personal data” includes any information relating to an identified or identifiable natural person (herein after “user” of “visitor”). This means any individual who can be identified directly or indirectly by reference to an identifier such as name, identification number, location data, online identifiers (e.g. IP addresses – if they can be used to identify), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

The IOC recommends that users do not disclose sensitive personal data via site, such as information relating to racial or ethnic origin, political opinions, religious or other beliefs, physical or mental health, criminal background, etc.

On accessing IOC’s web pages, the user may have an opportunity to provide IOC with personal data, such as name, email address, home address, telephone number, social media account ID, among others. This includes, for example, information provided when participating in social media features on a site, entering a contest, promotion, or survey, or filling out a form or reporting a problem with a site.

Personal data collected by IOC will only be used for the purposes for which it was provided by the user.

IOC recommends that users read this policy carefully to understand its personal data practices and how IOC treats it.

Personal Data collected from users include the following:

IOC does not collect or retain users´ personal data longer than is necessary for the purposes for which it was collected or as required by IOC policy and procedures.

With the user’s consent and where appropriate, IOC will keep user’s name, address and/or contact information (including telephone numbers and/or email addresses) in IOC’s databases and may from time to time use this information to inform users of IOC activities and publications that may be of interest to them. For this purpose, IOC may contact the users in writing, by telephone or email for this. If, at any time, a user decides not to use his or her contact information for these purposes, he or she is requested to inform IOC (see “How to contact us” section).

Users have the following rights under IOC data privacy regulations:

• the right to request access to the Personal Data IOC hold about users.
• the right to rectification including to require IOC to correct inaccurate Personal Data.
• the right to request restriction of processing concerning user´s Personal Data,
• the right to request the erasure of user´s Personal Data where it is no longer necessary for IOC to retain them.
• the right to withdraw consent to any processing for which user have previously given that consent.

Users are requested to contact IOC in case they want to exercise any of these rights.

The IOC will not disclose user´s personal data to any third parties, except as described in this policy.
The IOC may disclose user´s personal data to third parties, including, but not limited to, the following:

1. To third parties who provide services to IOC and who help the IOC carry out its activities. For example, a third party may have access to the user´s personal data in order to support IOC’s information technology or to manage mailings on behalf of IOC.
2. To IOC’s legal and other professional advisors.
3. As necessary to comply with a legal requirement, to protect vital interests, to safeguard the security or integrity of IOC’s databases or this site, to insure against legal liability.

   and

4. IOC may engage third parties to manage the site and provide other services in connection with the site, such as the collection and analysis of data. Such third parties may have access to certain personal data provided by the user as necessary to perform such services on IOC’s behalf; provided, however, all such third parties are required to protect such personal data in accordance with this Privacy Policy.

We endeavour to use appropriate technical and physical security measures to protect personal data which is transmitted, stored or otherwise processed by us, from any unlawful destruction, loss, alteration, unauthorised disclosure of, or access, in connection with IOC sites. These measures include computer backups and secured files and facilities. IOC’s service providers are also carefully selected and are required to use appropriate protective measures.

In particular, IOC endeavour to implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including as appropriate:

1. pseudonymisation (such as where data is separated from direct identifiers so that linkage to an identity is not possible without additional information that is held separately) and encryption,
2. ensuring the ongoing confidentiality, integrity, availability and resilience of systems and services used to process user´s personal data,
3. ensuring the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
4. ensuring a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational security measures.

Notwithstanding the foregoing, IOC cannot guarantee the security of any information that the user transmit to a Site and user do so at user´s own risk. If the user has reasons to believe that their interaction with IOC is no longer secure, then s/he is requested to notify IOC immediately of the suspected problem.

IOC may from time to time use cookies on its sites. Cookies are small text files that user´s web browser leaves on user´s hard drive, in order to recognize the user as a regular user of the IOC site, to track the user´s use of the IOC site and to target advertising. This allows for personalization of certain aspects of user´s visit to IOC site. Information gathered from cookies in this way is only used on an aggregate basis. Unless a visitor specifically provides their identity to IOC, e.g., by registering at IOC sites, providing information through an online form or sending IOC correspondence from the Sites, IOC will not know the identification of individual visitors. The aggregated information collected permits IOC to analyse traffic patterns on IOC site. This helps IOC provide users with a better experience by improving the content and making IOC site easier to use.

Users can disable cookies by using their Internet browser settings. Users are requested to consult their browser’s help function to find out how to disable cookies. Users must note that if they disable cookies, some features of the IOC sites may not function properly.

The IOC is committed to respecting the privacy of those who use its website, IOC controlled social media pages and any other form of electronic communication. The IOC website currently includes a common and a private area (limited access).

The IOC reserves the right in its sole discretion to amend this Privacy Policy at any time, and users are requested to regularly check this Policy for any amendments.

For any other questions or concerns about IOC privacy policies and practices, users can send an e-mail at dataprotection@internationaloliveoil.org.