The purpose of this policy is to clarify for users, partners and others who wish to learn about or engage with the institution the privacy practices and rights guaranteed to data subjects, as adopted by IDESAM.
1. This Terms of Use and Privacy Policy sets out the access guidelines and describes the practices of the Institute for Conservation and Sustainable Development of the Amazon – IDESAM (“we”, “our” or “the Institute”) regarding the processing and security of information; copyright; responsibility for the use of and information available on the domain https://idesam.org/; and information collected from users who access our website, or who otherwise share personal information and interact with us (collectively: “Users”).
IDESAM’s Privacy Policy is based on the following principles:
Controller or Processor
In situations where IDESAM collects data for its own purposes, it acts as a Controller. In situations where data collection takes place in connection with a service to be developed and defined by the parties involved, IDESAM acts as a Processor.
When acting as a Processor, IDESAM is responsible for its share of data protection, as agreed with the respective Controller; however, it has no decision-making power or authority to process data in a manner that does not comply with the processes and workflows agreed with the Controller.
The processing of your personal information (i.e. all information that could potentially identify you by reasonable means; hereinafter referred to as “Personal Information”) is necessary to enable safe browsing and a better experience on our website, to fulfil our contractual obligations to you (where there is an option to enter into a contract), and to comply with the legal obligations to which we are subject.
We encourage our Users to read the Privacy Policy and use it to make informed decisions.
We collect two types of data and information from Users.
The first type of information is non-identifying and non-identifiable information relating to a User, which may be made available or collected through the use of the Website (“Non-Personal Information”). We do not know the identity of a User from whom Non-Personal Information has been collected. Non-Personal Information that is collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time, etc.) in order to improve the functionality of our Website. We may also collect information about your activity on the site (e.g. pages viewed, online browsing, clicks, actions, etc.).
The second type of information is Personal Information, which is individually identifiable information, i.e. information that identifies an individual or could, with reasonable effort, identify an individual. Such information includes:
Device information: we collect personal information from your device. Such information includes geolocation data, IP address, unique identifiers (e.g. MAC address and UUID) and other information relating to your activity via the Website.
We may receive your Personal Information from a number of sources:
We may also disclose information if we believe in good faith that the disclosure of such information would be useful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or government request; (ii) enforce our policies, including investigations into potential breaches thereof; (iii) investigate, detect, prevent or take action regarding illegal activities or other offences, suspected fraud or security issues; (iv) establish or exercise our rights to defend ourselves against legal claims; (v) prevent harm to our rights, property or safety, or that of our users, your own safety or that of third parties; or (vi) for the purpose of cooperating with law enforcement authorities and/or where we deem it necessary to enforce intellectual property or other legal rights.
As a data subject, you may request:
We will retain your Personal Information for as long as necessary to carry out our activities and as required to comply with our legal obligations, resolve disputes and enforce our policies. Retention periods will be determined taking into account the type of information collected and the purpose of such collection, bearing in mind the requirements applicable to the situation and the need to destroy information that is out of date and has not been used within a reasonable period of time. In accordance with applicable regulations, we will retain records containing users’ personal data, communications and any other information in compliance with laws and regulations.
If you leave a comment, the comment and its metadata are retained indefinitely. We do this so that we can automatically recognise and approve any subsequent comments rather than holding them back for moderation.
For users who register on our site, we also store the personal information they provide in their user profile. All users can view, edit or delete their personal information at any time (although you cannot change your username). Site administrators can also view and edit this information.
We may correct, update or remove incomplete or incorrect information at any time and at our own discretion.
We use cookies and other technologies in our related services, including when you visit our Website.
A cookie is a small piece of information that a website assigns to your device whilst you are viewing a website. Cookies are very useful and can be used for a wide variety of purposes. These purposes include enabling you to navigate between pages efficiently, enabling certain features to be activated automatically, remembering your preferences, and making interaction between you and our services quicker and easier. Cookies are also used to help ensure that the adverts you see are relevant to you and your interests, and to compile statistical data on your use of our services.
The Website uses the following types of cookies:
If you edit or publish something, an additional cookie will be saved in your browser. This cookie does not contain any personal data and simply indicates the post ID of the post you have just edited. It expires after 1 day.
When you log in to your account on the site, we set cookies to save your account details and your screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me”, your login will last for two weeks. If you log out of your account, the login cookies will be removed.
The cookies do not contain information that personally identifies you, but personal information that we store about you may be linked by us to information stored in and obtained from the cookies. You can remove cookies by following the instructions in your device settings; however, if you choose to disable cookies, some features of our Website may not function properly and your online experience may be limited.
Our policy addresses only the use and disclosure of information we collect from you. To the extent that you disclose your information to other parties or websites across the internet, different rules may apply to their use or disclosure of the information you provide to them. In this regard, we encourage you to read the terms and conditions and privacy policy of each party to whom you choose to disclose information.
This Privacy Policy does not apply to the practices of companies that we do not own or control, nor to individuals whom we do not employ or manage, including third parties to whom we may disclose information as set out below in this Terms of Use and Privacy Policy.
The third-party services we use are:
We take great care in implementing and maintaining the security of the Website, our systems and your information. We employ current standard procedures and policies to ensure the security of the information we collect and retain, prevent the unauthorised use of any information, and require any third parties to comply with similar security requirements, in accordance with this Privacy Policy.
We have adopted data protection measures, which include, but are not limited to, an environment with physical and logical access controls, encryption, password protection, tokens, a code of conduct, policies and confidentiality clauses, amongst others.
Although we take reasonable measures to protect the information, we cannot be held responsible for the actions of those who gain unauthorised access or misuse our Website through attacks and intrusions resulting from criminal techniques that are beyond IDESAM’s ability to prevent or stop, even when adopting preventive technical and organisational measures, and we give no guarantee, explicit or implicit, that we will prevent such access.
However, in our capacity as a potential controller and/or processor of personal data, we are committed to privacy and data protection regulations, as well as to adopting the necessary practices to ensure data governance and the rights and freedoms of our users/customers. To this end, we also have action plans in place to mitigate and address any incidents should they occur, always seeking to preserve our users’ data and information in an ethical and responsible manner.
We would like to point out that some data recipients may be located outside the national territory. In such cases, your data will only be transferred to countries approved by the National Data Protection Agency – ANPD and/or the European Commission (where applicable under the GDPR), ensuring an adequate level of data protection, or we will enter into legal agreements (including audit processes, certification assessments and other due diligence practices) that ensure an adequate level of data protection.
We may use your Personal Information, such as your name, email address, telephone number, etc., either ourselves or through our third-party subcontractors, for the purpose of providing you with materials about our activities which we believe may be of interest to you.
Out of respect for your right to privacy, we will provide you, within such communication materials, with the means to opt out of receiving communications, campaigns and engagement initiatives promoted by us. If you unsubscribe, we will remove your email address or telephone number from our mailing lists.
We understand the importance of protecting children’s privacy, especially in an online environment. The Website is not designed for or directed at children. Under no circumstances shall we permit the use of our services by minors without the prior consent or authorisation of a parent or legal guardian. We do not intentionally collect Personal Information from minors. If a parent or guardian becomes aware that their child has provided us with Personal Information without their consent, they should contact us by email.
IDESAM authorises the total or partial reproduction, for non-profit purposes, of the content, provided that its integrity is maintained. Restricted, confidential or third-party information may only be accessed and/or reproduced by authorised persons.
In all cases, the source must be clearly and visibly cited, including the date and time of extraction. The use of the trademark or name
The inclusion of links to the IDESAM website on other websites is only permitted provided the source is cited. In specific cases, seek express authorisation from a legal representative of IDESAM.
Contact person:
Email:
Address:
Diego Rangel de Souza Leão
Rua Barão de Solimões, 12, Cj. Parque das Laranjeiras, Flores, Postcode: 69.058-250 Manaus – AM.
