GDPR Rights

1. Introduction

The International Health Research Institute (IHRI) is dedicated to protecting the personal data of individuals involved in our research, partnerships, and activities.¹ This policy outlines your rights under the General Data Protection Regulation (GDPR) and how IHRI ensures their protection.

2. Scope

This policy applies to all personal data processed by IHRI, including data collected from:

• Research participants
• Collaborators and partners
• Donors and supporters
• Website users
• Employees and volunteers
• Applicants

3. Your Rights as a Data Subject

3.1. Right to Confirmation

• You have the right to obtain confirmation from IHRI as to whether or not your personal data is being processed.

3.2. Right of Access (Article 15)

• You have the right to obtain free information about your stored personal data, including:
  
  • The purposes of processing.
  • The categories of personal data concerned.
  • The recipients or categories of recipients to whom the data has been disclosed.
  • The² envisaged period for which the data will be stored.
  • The existence of the right to rectification, erasure, or restriction of processing.
  • The right to lodge a complaint with a supervisory authority.
  • Information regarding data transfers to third countries and appropriate safeguards.
  • A copy of the personal data.

3.3. Right to Rectification (Article 16)

• You have the right to obtain the rectification of inaccurate personal data concerning³ you without undue delay.⁴

3.4. Right to Erasure (“Right to be Forgotten”) (Article 17)

• You have the right to request the erasure of your personal data without undue delay when:
  
  • The data is no longer necessary for the purposes for which it was collected.
  • You withdraw your consent.
  • You object to the processing, and there are no overriding legitimate grounds.⁵
  • The data has been unlawfully processed.
  • The data must be erased to comply with a legal obligation.
  • The data was collected in relation to information society services offered to a child.

3.5. Right to Restriction of Processing (Article 18)

• You have the right to restrict processing when:
  
  • You contest the accuracy of the data.
  • The processing is unlawful, and you oppose erasure.
  • IHRI no longer needs the data, but you require it for legal claims.
  • You have objected to processing, pending verification of legitimate grounds.

3.6. Right to Data Portability (Article 20)

• You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller,⁶ where processing is based on consent or contract.⁷

3.7. Right to Object (Article 21)

• You have the right to object to the processing of your personal data based on legitimate interests or direct marketing.⁸
• You have the right to object to processing for scientific, historical research, or statistical purposes, unless necessary for a public interest task.⁹

3.8. Automated Individual Decision-Making, Including Profiling (Article 22)

• You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you, except when:
  
  • Necessary for a contract.
  • Authorized by law with suitable safeguards.
  • Based on your explicit consent.
• When automated decisions are made based on consent or a contract, you have the right to human intervention, to express your view and to contest the decision.

3.9. Right to Withdraw Consent

• You have the right to withdraw your consent to data processing at any time.¹⁰

4. Data Protection for Applications and Application Procedures

• IHRI collects and processes applicant data for the purpose of the application process, including electronic processing.

5. Exercising Your Rights

• To exercise any of these rights, please contact us at:
  
  • Email: [Insert IHRI Data Protection Email Address]
  • Postal Address: [Insert IHRI Postal Address]
• Please provide clear identification and details of your request.

6. Data Security and Retention

• IHRI implements appropriate technical and organizational measures to protect your data.
• Data is retained only as long as necessary for its intended purpose or as required by law.

7. Complaints

• You have the right to lodge a complaint with your local supervisory authority.

8. Policy Updates

• IHRI may update this policy periodically. Changes will be posted on our website.