Article 10: Website Preamble
Protecting the privacy of visitors to the Corporate Sustainability Association website is one of the association's top priorities. The association believes that keeping the personal information shared by its website visitors confidential is a legal and ethical obligation.
“Dear visitor, thank you for visiting our website. We pledge to protect the privacy of the data you provide to us through the site.” This introduction gives visitors confidence and reassurance, explains the purpose of the privacy policy, and affirms the Corporate Sustainability Association's commitment to legal and ethical data protection standards.
Article 11: Scope of the Website Data Privacy Policy
Board members, employees, all staff, contractors, experts, consultants and other stakeholders with a relationship to the association, as well as its supply chain and procurement, must comply with this policy. This includes all personnel affiliated with third parties who may have access to any association resource, including cloud services.
Article 12: Website Data
Data here includes any public or private data, such as personal data, email, correspondence, or any other data provided to the association by volunteers, grantors, donors, or beneficiaries of the association's services.
Article 13: Data Processing
The association processes supply chain and procurement data lawfully, fairly and with a high degree of transparency.
Article 14: Purpose Limitation
In its supply chain and procurement operations, the association collects data for specified, explicit and legitimate purpose(s), and any further processing must be compatible with those purpose(s), unless the association obtains the partner's consent and the processing is permitted by law.
Article 15: Data Retention
In its supply chain and procurement operations, the association keeps data in a form that authorized persons can easily identify and access.
Article 16: Data Security
In its supply chain and procurement operations, the association applies appropriate and reasonable technical and organizational measures to protect data against accidental or unlawful destruction, accidental loss, alteration, or unauthorized disclosure, use or access. Appropriate technical and organizational measures are applied to protect the data.
Article 17: Privacy and Confidentiality of Information
The association treats all data of those who deal with it in strict confidence unless they consent to its publication.
The association will not sell or share the data of those who deal with it with any other party without their written permission.
The association publishes its data privacy policy on its website and makes it available on request in print or electronic form.
The association may use data registered on the website and services portal to conduct surveys and gather feedback in order to improve its work.
The association does not share this data with external parties, except as aggregated data used for statistical and research purposes to serve and develop work inside and outside the association.
This privacy policy applies to all services and transactions conducted on the website and services portal, except where services or transactions with specific privacy requirements are stated; those have a separate privacy policy that is not part of this one.
Association staff must safeguard all data and files on their work devices and must not reveal or disclose, without authorization, any information they access while performing their work.
The association must have a dedicated website data policy and a disclaimer template for emails.