Privacy notice

MiCRO recognizes the importance of protecting personal information and data. This notice describes how and why we collect, process and handle personal information. This notice also informs individuals (“you”, “your” or “your”) about their rights in relation to this data. It applies to personal data that has been provided to us, both by the individuals themselves and by others. Our policy is to be transparent about why and how we process personal data. For more information about our specific processing activities, please refer to the relevant sections of this statement. 

MiCRO maintains a presence in four countries in Latin America and we adhere to the regulations and requirements of each jurisdiction as applicable, so Micro may store and process your personal data in any country in which it has facilities. Personal data is information in any format that relates to an individual who can be identified or identifiable by that information, either by itself or when combined with other information held by us.

Data Controller

Microinsurance Catastrophe Risk Organisation SCC, incorporated under the laws of Barbados and located at 1st Floor, Limegrove Centre, Holetown, St James, BB24016, Barbados, is responsible for the processing of your personal data.

Collection of personal information

We will only collect personal information where the data is reasonably necessary for a genuine business-related purpose. This data is typically collected directly from you for the agreed purposes of employment, consideration of employment, potentially receiving services from you or keeping you informed about MiCRO’s work.

The types of personal information we may collect include, but are not limited to:

• Name and gender
• Date of birth
• Address
• Personal contact details (e.g. telephone or email)
• Occupation, references and previous employment history, qualifications and skills
• Marital status
• Federal Taxpayers Registry and Unique Population Registry Number
• Information provided by you through our website.

MiCRO collects personal information in a lawful and fair manner and will only collect it from you if it is considered reasonable and practicable. We collect this information in a variety of ways, including, but not limited to:

• Applications or responses you submit to job postings;
• Inquiries made by you through our website and comments you make through our website or social media accounts;
• When you follow our social media accounts and sign up or subscribe to our mailing list;
• Through government agencies or third party information services, as required by law;
• Through direct communication between you and MiCRO staff, such as email, telephone and direct meetings.

MiCRO relies primarily on the consent of individuals to obtain, use, disclose or store your personal data. You may choose not to consent or not to provide certain requested personal information; however, doing so may result in MiCRO not being able to keep you updated on our activity or hire you. MiCRO strives to keep the personal data we hold relevant, up to date and correct. If there is a change to your personal data, please inform us so that we can update your information as appropriate.

Use of personal data

We use personal data for the following purposes

• Assessing your suitability for a potential contractual engagement;
• Recruiting you;
• Receiving your services;
• Keeping you informed about MiCRO’s work;
• To respond to your requests or queries;
• Comply with relevant laws or other legal requirements.

Disclosure of personal information

MiCRO will only share your personal information with others when we are legally authorized to do so. MiCRO includes contractual language with third parties regarding data protection, confidentiality and security guidelines.

We may disclose your personal information to other outside entities in the following instances:

• When disclosure is necessary to fulfill your request and involves a third party organization with whom we have a business relationship;
• when explicitly requested by you, the site visitor;
• when sharing a limited data set (name, title, company name only) with other participants of an event in the form of participant lists;
• as required by a court order or any other legal or regulatory requirement;

Personal data and information held by MiCRO may be transferred to the following types of organizations:

• Third-party organizations that provide support services (e.g., payroll, information technology, travel);
• Professional advisors, such as lawyers, auditors and accountants;
• Law enforcement, government or other regulatory agencies, as required by law.

Retention of Personal Information

It is our intention not to retain personal information for longer than is reasonably necessary. The length of time depends on the nature of the personal data and the purposes for which it was received. We maintain a data retention policy informed by:

• The termination of a contract or engagement for employment or services;
• If your personal data is retained for reasons other than legal requirements or contractual commitment (i.e. newsletter, recruitment database), we will retain that data until you request deletion or correction.

Rights of an individual with respect to his or her personal data:

Right of Access – You have the right to have access to your personal data. You may contact MICRO to request a copy of your personal data held by us.

Right of Rectification – You may challenge the accuracy or completeness of your personal data and have it corrected or supplemented, as appropriate. You have a responsibility to help us keep your personal data accurate and up to date.

Right of Cancellation – You have the right to have your personal data erased, under certain conditions (for example, when your personal data is no longer necessary for the purposes for which it was collected). MiCRO may retain your data exclusively for the purposes of liabilities arising from the processing. The blocking period will be equivalent to the statute of limitations period for actions arising from the legal relationship underlying the processing under the terms of the applicable law on the matter.

Right of Opposition – You have the right to oppose or ask us to restrict the processing of your personal data.

To act on any of the above rights, MiCRO may need to request additional information about the details of the request, as well as confirm your identity. Requests relating to these rights can be submitted to MiCRO by following the instructions below:

1. Request the appropriate form by emailing info@microrisk.org.
2. Carefully read the requirements and indications described in the form.
3. Send the completed application to info@microrisk.org.
   We will respond to these requests in accordance with regulatory requirements once we confirm the validity of the request.
   You may file a complaint to this same email.

If after having exercised your Data Protection Rights through the mechanisms established in this Privacy Notice, you consider that your right to protection of personal data has been injured by any conduct or omission on our part; or you have evidence that in the processing of your personal data there is any violation of the provisions provided by law, we invite you to contact us again to exhaust all internal procedures in order to fully satisfy your request.

Information collected by the MiCRO website

The website uses third-party HTTP cookies to improve its performance. All data retained is anonymous-no personally identifiable information is collected, stored or placed in cookies that can be accessed by third parties.

Images used by MiCRO

MiCRO uses images collected by our staff to demonstrate the nature and impact of our work. MiCRO seeks the consent, to the extent possible, of the individuals depicted in these images. If your image is reproduced in any of the images hosted on our website and you wish to have these images removed, please contact the administrator and the images will be removed promptly.

Changes to Privacy Notice

MiCRO may change this Privacy Policy from time to time. In the event that any changes are made you will be made aware of them through the website https://www.microrisk.org/. By providing your personal data, receiving information about MiCRO’s work or visiting its website after these changes, you signify your acceptance of the updated Privacy Notice.