Effective Date: July 1, 2018
Version: 1.0
Optimist International obtains clear, informed, and affirmative consent before collecting, using, or disclosing personal data. Individuals have the right to withdraw consent at any time. Consent is obtained separately for different purposes, including marketing communications and analytics tracking.
We inform individuals at the time of data collection about the categories of personal data we collect, the purposes of collection, and the third parties with whom the data may be shared. Individuals have the right to access, correct, delete, and receive a copy of their personal data in a portable format.
Before processing sensitive personal data or undertaking projects involving new technologies, Optimist International conducts Privacy Impact Assessments (PIAs) to identify and mitigate risks to individuals' privacy.
A Privacy Officer has been designated to ensure compliance with privacy laws, including Law 25. You may contact our Privacy Officer at privacy@optimist.org for any concerns or requests related to your personal data.
Where applicable, individuals will be informed of the use of automated decision-making systems. They have the right to request human intervention and to contest the decision.
We maintain a registry of all security incidents and will notify the relevant authorities and affected individuals of any data breach that poses a risk of serious harm, in accordance with applicable laws such as Law 25 and GDPR.
Before transferring personal data outside of Canada or the EU, we assess whether the foreign jurisdiction offers equivalent protection. We implement appropriate safeguards, including standard contractual clauses, to ensure your data is protected.
We may update this policy to reflect changes in legal requirements or our practices. Updates will be posted on our website and, where appropriate, notified to you directly.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Once the data is no longer needed, we securely delete or anonymize it.