The OPCW takes data privacy seriously. Find out how we use and process your personal data, what rights you can exercise in relation to your personal data, and how to report a personal data breach.
What is personal data
“Personal Data” is any information that can be used to identify you as an individual.
“Process” or “Processing” means any operation, automated or not, which is performed on Personal Data. This includes collection, storage, use, transfer, disclosure, or deletion.
Why we process personal data
The OPCW may process your personal data for a number of reasons, such as:
- to carry out its mandate and activities
- to fulfil its contractual obligations to conclude and perform contracts with third parties
- for a legitimate interest of the Organisation
- if it is in the vital or best interests of the data subjects
Personal data retention, storage, and destruction
We only keep your personal data for as long as it is reasonably necessary to fulfil the relevant purposes and to comply with the OPCW’s legal obligations. Throughout this process, we store personal data in accordance with appropriate processes, safeguards, and procedures. We then provide for the destruction of personal data in an efficient and secure manner.
Your personal data rights
Right of information
We provide information about the personal data we process in our General Privacy Notice and our Procurement Privacy Notice.
Right of access
You may request access to the personal data that OPCW processes.
Right to accuracy and rectification
You may request that inaccurate personal data processed by OPCW be corrected.
Right to objection
You may object to the processing of your personal data in certain circumstances.
Right to erasure
You may have your personal data erased from our systems in certain circumstances.
Right to withdraw consent
Where OPCW has used consent to process your personal data, you may withdraw that consent at any time.
Exercising your data protection rights
Complete the Personal Data Subject Request Form to request information, access, accuracy/rectification, objection, erasure, or withdrawal of your personal data.
You may be asked to provide a copy of an identification document to authenticate your identity. If you provide a copy of your ID card, passport, or any other document, personal details such as your name and address should be visible. We will only use the data on your identification document to verify your identity and will not store this data for longer than needed for this purpose.
Report a personal data breach
A personal data breach is a breach leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data processed by the OPCW.
Complete the Personal Data Breach Form to report a personal data breach.