THE WOMEN EXPERTS' NETWORK

This data privacy policy helps you to understand how we collect and use personal data that we obtain from you through our website. It applies to our website www.woxnetwork.org and all subpages.

The protection of your personal data is regulated by the EU General Data Protection Regulation (GDPR). We respect data privacy and believe in data minimisation, which means that we only collect personal data from you that is absolutely necessary for the services we provide.

PRINCIPLES OF DATA PROCESSING

Personal data is, according to the GDPR, any information relating to an identified or identifiable natural person. This person is referred to as the data subject. Personal data include information such as name, address, email or IP address. The processing of personal data (e.g. collecting, storing, using) requires a legal basis, such as your consent.

The data controller is, according to the GDPR, the natural or legal person which determines the purposes and means of the processing of personal data.

DATA CONTROLLER AND DATA PROTECTION OFFICER

The Centre For Feminist Foreign Policy is the data controller of the personal data you provide us with.

Centre for Feminist Foreign Policy
Sparrstraße 3a
13353 Berlin
Germany
nina@centreforffp.org

If you have any question concerning the privacy policy of this website, please contact the representative of the data controller, Nina Bernarding at nina@centreforffp.org, or our support team at support@woxnetwork.org.

Our data protection officer is:

Nina Bernarding
Sparrstraße 3a
13353 Berlin
Germany
nina@centreforffp.org

WHAT DATA DO WE COLLECT?

By filling in and submitting forms on our website you voluntarily provide us with information about you and allow us to publish this data on our website, agree to be contacted by registered and non-registered users of the website, and allow us to forward your information to users of the website. The information you provide us with, includes:

• data about your person (name, email address, picture of yourself, position and affiliation, sector you work in, work experience, language skills, countries of residence, links to websites, social media accounts or publications, skills, short biography),
• data about your expertise (countries, subregions and areas of expertise) as well as
• messages you send to experts registered on our website.

Most of the data mentioned above are personal data.

In addition, we analyse the traffic on our website in order to improve it. For this purpose, we collect information about your visit on our website, such as the time you spend on our website or the number of actions you perform. For the purpose of traffic analysis,

• we do not collect any personal data and
• none of the information that we collect can be assigned back to your person.

Further information is provided in the section 'Traffic Analysis Tools'.

HOW DO WE COLLECT YOUR DATA?

You directly provide us with all the personal data that we collect from you. This happens when you

1. Register as an expert on our website or
2. Send a message to an expert via the expert's profile page.

In these two cases, you fill in and submit a form on our website. Each of these forms will ask you to give your consent for us for processing your data by agreeing to this privacy policy. Your consent is the legal basis for us processing your personal data. Once given, you can withdraw your consent at any time by informing us or by deleting your expert profile. If you do not give us your consent, we will not process your personal data, meaning you will not be able to register as an expert and we will not forward your message.

For the traffic analysis, we collect only non-personal data from you when you

3. Visit our website.

Further information is provided in the section 'Traffic Analysis Tools'.

HOW WILL WE USE YOUR DATA?

The information you provide us with when registering as an expert will be used to connect you with policy makers and people that are looking for an expert of your field. For this purpose,

• We publish all your data (excluding your email address and your password) on your profile page on our website. Any visitor, registered or not, is able to view your profile page.
• We will provide any user, registered or not, who performs a search request on this website with a link to your profile if your data matches the user's search criteria.
• We will use your email address to forward messages to you that a visitor of your profile page, registered or not, sends you. We will not share your email address with the visitor during this process.
• Apart from forwarding messages by other users to you, we will only use your email address to contact you in case you request an additional service from us, such as resetting your password, or if we think it is absolutely necessary to contact you in order to resolve an ongoing issue related to your profile.

When you send a message to an expert through our website, you provide us with the message you want to send and also your email address. We will

• forward your message and your email address to the expert you want to contact.

For our traffic analysis we evaluate information that we collect when you visit our website. As mentioned before, this does not include any personal data.

HOW DO WE STORE YOUR DATA?

We store your data securely on a server which is hosted by Uberspace and located in Germany. We receive all data from you in a secure way using an encrypted communication protocol. In addition, we use pseudonymisation when storing your personal data. That means that all personal data are only stored in an encrypted way in databases on our server. We will not transfer or share your data with anyone else.

The personal data you provide us with by registering as an expert on our website are stored as long as you want to be registered as an expert on our website. If you do not wish to be registered as an expert any longer, you can delete your expert profile via the 'delete your profile' option that you see on your profile page after signing in. If you delete your expert profile, all personal data from you will be deleted from our server.

The personal data that you provide us with by sending a message to an expert through our website (email address and message) is only stored on our server until the process of forwarding the message to the expert has been completed.

COOKIES

Cookies are small text files. A website can ask your browser to store these cookies on your computer or mobile device.

On the public parts of our website we do not use any cookies. The public parts are the sections of the website that any visitor of our website can access, without registering or signing in.

However, when you register or sign in, we set one cookie. This cookie carries a session ID and is technically absolutely mandatory to maintain your sign-in status. Therefore, this cookie requires no separate consent. It is deleted when the browser window is closed.

TRAFFIC ANALYSIS TOOLS

While we do not use any external analysis tools, we use an open-source software called Matomo to analyse the traffic on this website. This helps us to understand how our website is used and how we can improve it.

The data collected by the Matomo software is processed and stored exclusively by us. We have configured Matomo so that

• It does not set any cookies and
• Does not process or store any personal data.

In particular, we anonymize your IP address by IP masking, which means that we do not store your full IP address. Therefore, it is not possible to assign your IP address to your person or device. We will not share any of the data collected with third parties.

In addition, we configured Matomo to honour the Do-Not-Track setting of your browser. If you do not want your visits of our website to be analysed, you can activate the Do-Not-Track setting of your browser.

LINKS

You find links to other websites on our website, for example on the profile pages of the registered experts. Activating these links will bring you to the website of another operator. We do not have any responsibility for how those websites handle your personal data and do not guarantee that they comply with the GDPR.

DATA SUBJECT RIGHTS

If you provided us with personal data that we process, you are a data subject and as such a person you have the following rights:

• Right of access (article 15, GDPR). You have the right to obtain information from us whether personal data of you is being processed by us or not. If we do so, you have the right to obtain access to the personal data. If you make use of that right, we will provide you with a copy of your personal data that is processed by us. In addition, you may request from us information about the purpose of processing, the categories of your personal data, the recipients to whom the personal data have been or will be disclosed, the planned period for which the data will be stored, the source of the stored information, the existence and details of automated decision making, about its transfer to third countries or international organizations .
• Right to rectification (article 16, GDPR). You can request a correction or the completion of your personal data stored by us.
• Right to erasure (article 17, GDPR). You have the right to request the deletion of your personal data stored by us.
• Right to restriction of processing (article 18, GDPR). You may demand the restriction of the processing of your personal data from us if the accuracy of the personal data is disputed by you, the processing is unlawful, we do not require the personal data any longer but you need them for the establishment, exercise or defence of legal claims or if you have objected to the processing.
• Right to data portability (article 20, GDPR). You have the right to receive your personal data that you have submitted to us and you can request that we transmit your personal data directly to another data controller.
• Right to object (article 21, GDPR). You may object to the processing of your personal data which is based on a task carried out in the public interest or the legitimate interests of the data controller or by a third party. You also have the right to object to the processing of your personal where the processing is done for direct marketing purposes.
• Right to withdraw consent (article 7, GDPR).
You have the right to withdraw your consent to the processing of your personal data by us at any time.
• Right to lodge a complaint (article 77, GDPR).
You may lodge a complaint with a supervisory authority if you suspect that the processing of your personal data by us is not in accordance with the GDPR.

CHANGES TO OUR PRIVACY POLICY

We might update our privacy policy in future and will place any updates on this webpage. This privacy policy was last updated in February, 2020.