NIS Website Privacy Notice

This Privacy Notice particularly explains how we collect, share and use Personal Data when you use our website (www.nis-foundation.org). The Privacy Notice is specifically developed for the purpose of personal data management on the NIS website, and is part of the overall NIS Privacy Policy.

The Privacy Notice also applies to the project website for Hva nå? Endringslaben (www.endringslaben.no).

1.1 Who we are

NIS is a non-profit foundation headquartered in Oslo, Norway, with country offices in Somalia, Mali and Myanmar. The Foundation works to support improved security, environmental health, and stability through the realisation of the principles underpinning the UN Sustainable Development Goals (SDGs). NIS’ work has a global focus, tailoring programmes to fit the needs and circumstances specific to the operating environment, ranging from conflict-affected countries to developed countries, including Norway.

Currently NIS has more than 160 employees, with the majority being highly skilled national and diaspora staff in-country that can effectively navigate the complex political and security landscapes. This allows NIS to work with the political nuances of complex environments to provide the best chances for successful interventions within support of peacebuilding and stabilisation efforts in conflict-affected countries.

NIS is registered in Norway with the Brønnøysund Register Centre and approved by the Norwegian Control Committee for Fundraising.

1.2 Website Visitors

Like most website operators, NIS collects non-personally identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. NIS’ purpose in collecting non-personally-identifying information is to better understand how NIS’ visitors use its website.

NIS does not collect potentially personally identifying information like Internet Protocol (IP) addresses from viewers of this website. NIS does collect personally identifying information if specifically provided by anyone completing a whistle-blower form but personally-identifying information is not required to submit the form. All information registered when submitting a whistle-blower form is strictly protected according to NIS Code of Conduct and Safeguarding policies and guidelines.

1.3 Gathering of Personally-Identifying Information

Certain visitors to NIS’ websites choose to interact with NIS in ways that require NIS to gather personally-identifying information. The amount and type of information that NIS gathers depend on the nature of the interaction. For example, we provide a Whistle-blower form in which name and email fields are provided but not required.

In each case, NIS collects such information only insofar as is necessary or appropriate to fulfil the purpose of the visitor’s interaction with NIS. NIS Foundation does not disclose personally identifying information other than as described below. Visitors can always refuse to supply personally identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.

1.4 Aggregated Statistics

NIS can collect statistics about the behaviour of visitors to its websites. For instance, NIS can monitor the most popular pages on the nis-foundation.org website. NIS can display this information publicly or provide it to others. However, NIS does not disclose personally identifying information other than as described below.

1.5 Protection of Certain Personally-Identifying Information

NIS discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organizations that (i) need to know that information in order to process it on NIS’ behalf or to provide services available at NIS’ websites, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using NIS’ website, you consent to the transfer of such information to them. This being said, NIS does not collect personally identifiable data from regular visitors, but from administrators of the site, logged in users of the interface, and from the whistle-blower form (if not submitted anonymously).

NIS will not rent or sell potentially personally identifying and personally identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, NIS discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when NIS believes in good faith that disclosure is reasonably necessary to protect the property or rights of NIS, third parties or the public at large.

NIS Foundation takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally identifying and personally identifying information.

1.6 Cookies

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. NIS uses cookies to help NIS identify and track visitors, their usage of NIS’ websites, and their website access preferences as well as for security reasons. NIS visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using NIS’ websites, with the drawback that certain features of NIS’ websites may not function properly without the aid of cookies.

1.7 Which types of cookies we use

The NIS website uses 2 plugins to manage GDPR:

  • Cookie notice: Notification bar at the bottom of the site.
  • GDPR framework: Adds a page that allows users to view, and export (for logged in users only) and request their data to be deleted by sending their email address (https://nis-foundation.org/privacy-tools/)

As outlined above, these cookies are used to track logged in users, as well as count regular visitors to the website.

The following cookies are in use for the NIS website:

  • Google Analytics tracking software: This is configured to anonymize all IP addresses, therefore even if the cookies are not revoked, it does not keep track of any individually identifying information.
  • Simple membership plugin cookie: This allows NIS to require login to and keep the Interface section of the website private. It does not collect personal information.
  • Cookie notification bar: This uses a cookie to allow visitors to respond ‘Yes’ or ‘No’.
  • WordPress cookies: WordPress uses cookies to keep track of logged in users (for more information, see: https://wordpress.org/support/article/cookies/). This does not apply to the vast majority of visitors to the website, but only staff administering the website and users logged in at the Interface.
  • Whistle-blower form plugin: The NIS whistle-blower form uses a plugin called Contact Form 7 to provide the functionality for creating and sending the submitted form. It is optional to fill in name and email. NIS protect the confidentiality of all whistle-blowers.
  • WordFence Security Plugin: This plugin is necessary to ensure the security of the website. It collects IP addresses of everyone who logs in, as well as failed logins. It also collects IP addresses of hackers and bots that are trying to add malware or otherwise harm the site. However, the IP addresses are not personally identifiable (for more information, see: https://www.wordfence.com/help/general-data-protection-regulation/).

1.8 How to manage your cookies

Visitors to the NIS website are asked to consent to the use of cookies. By clicking this information, the visitor will receive more information on the cookies, and how to refuse consent. See also section 7.7 for information on the cookies.

1.9 Business Transfers

If NIS, or substantially all of its assets were acquired, or in the unlikely event that NIS goes out of business or enters bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of NIS may continue to use your personal information as set forth in this policy.

1.10 Privacy Policy Changes

Although most changes are likely to be minor, NIS may change its Privacy Policy from time to time, in NIS’ sole discretion. NIS encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

1.11 Request to manage your information

NIS would like to make sure persons we interact with are fully aware of their data protection rights. This includes the following:

  • The right to access: You have the right to request NIS for copies of your personal data.
  • The right to rectification: You have the right to request that NIS correct any information you believe is inaccurate. You also have the right to request NIS to complete information you believe is incomplete.
  • The right to erasure: You have the right to request that NIS erase your personal data, under certain conditions.
  • The right to restrict processing: You have the right to request that NIS restrict the processing of your personal data, under certain conditions.
  • The right to object to processing: You have the right to object to NIS’ processing of your personal data, under certain conditions.
  • The right to data portability: You have the right to request that NIS transfer the data we have collected to another organisation, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact NIS Oslo HQ in one of the following ways:

Email to HQ: post@nis-foundation.org

Telephone to HQ: +47 21 39 60 37

Post to HQ: PO Box 9025 Grønland, 0133 Oslo, Norway

If relevant, through the whistleblowing form on our website (available in several languages): https://nis-foundation.org/whistleblowing/

Or, directly to your NIS contact person at your closest NIS programme/country office.

Updated June 2020