Privacy Policy
Privacy Policy
NDI takes seriously the privacy of its website visitors, program participants, donors, employees and others who provide personal data to the Institute.
These individuals have the right to know the type of information the Institute collects, why it is collected, how it is protected and used and the circumstances under which it may be deleted or disclosed, as well as the right to consent to the use of this data. This Privacy Policy is posted on NDI’s homepage, all internal website pages and at every point where personal data may be requested or collected.
The Information We Collect and
How it is Gathered and Used
Personal Information
This notice applies to all personal data collected or submitted on NDI websites, as well as information submitted to the Institute through participation in NDI programs, applying for or holding employment with the Institute, doing business with the Institute as a vendor, or providing financial support to NDI and its programs. Personal data is data that can be used to identify a living individual. Identification can be from the information alone or in conjunction with any other data in an entity’s possession. NDI seeks to ensure that the personal data processed or controlled by the Institute is treated securely and in a manner that complies with all applicable laws and regulations including, the General Data Protection Regulation (GDPR).
NDI collects only the personally identifiable data that is voluntarily provided to the Institute and is necessary for specific business purposes. NDI does not share or provide mobile or information with third parties or affiliates for marketing and/or promotional purposes. Sharing of mobile information or similar may be done with third parties to allow individuals to participate in NDI programs and/or events with opt-in data and consent. This information will not be shared with any third parties except to facilitate participation in the event or program. This data is kept up to date, stored securely, and protected from loss, misuse and unauthorized disclosure through the use of appropriate technical measures. User personal data is retained only for the length of time necessary to fulfill the purposes for which it was obtained and in accordance with NDI’s data retention policy. When data is no longer required, NDI will irrevocably destroy all personal data submitted to it.
Sharing Personal Data
NDI treats personal data in a confidential manner and only shares it within the Institute with those individuals necessary for the delivery of services or activities to the person who provided the information. NDI does not voluntarily share personal data provided to the Institute with any third party institution without the specific consent of the data subject unless obligated to do so by U.S. or other applicable law or federal regulation.
Information collected on NDI websites is never used for commercial purposes.
An Individual’s Rights to Personal Data
NDI ensures that all persons who provide personal data to the Institute have the right to request and receive a copy of all data NDI holds on that individual and to request that any inaccurate or out of date information be corrected. Individuals who have provided personal data to NDI further have the right to erase any data that is no longer required by NDI for specific, enumerated business purposes or to have that data directly and securely transmitted to another data controller.
If NDI wishes to use personal data provided to the Institute for a new purpose other than that for which the data was originally provided or for purposes not covered under this Data Privacy Policy, NDI will provide individuals with a new notice explaining the new use and setting forth the relevant processing conditions. Individuals have the right to withdraw consent to NDI’s processing of their personal data at any time.
Contact Details
To exercise all relevant rights, make queries or lodge complaints related to this policy please reach out through the ndi.org contact us form.
Updated on May 24, 2018