Amnesty International is committed to ensuring the privacy of all our users. We have long campaigned for the right to privacy and against government surveillance and intrusion. This policy represents our commitment as an organisation to your right to privacy, giving you a clear explanation about how we use your information and your rights over that information.
This policy applies to all online systems offered by Amnesty International Limited to the public, through our website www.amnesty.org and other websites we operate.
References to ‘we’,‘us’ and ‘our’ are to Amnesty International Limited, the main operating company of the Amnesty International’s International Secretariat, registered as a company limited by guarantee in England and Wales (number 01606776).
Amnesty International Limited is the registered data controller to which the policy refers. Our full details can be found at the end of this policy and please feel free to contact us with any questions related to it. This policy was last updated on  June 2018 and is reviewed every 12 months.
What types of information do we collect and how?
The type and amount of information we receive and store depends on how you use our websites. You can access most of the pages on our websites without telling us who you are and without revealing any personal information.
In some circumstances your information may be shared with us by third parties, but only where you have specifically consented. Examples include registering for a human rights education course with our external provider, or if you register your interest in joining Amnesty International or one of its campaigns through Facebook, Facebook will share information such as your name and email address with us.
We collect personal information in the following ways:
- When you sign up to online actions or express an interest in joining us as an international member
- When you make a donation to us
- When you sign up for our human rights education courses
- When you participate in other online campaigns or activities for example Amnesty Decoders
- When you apply for a job or volunteering opportunity with us
If you choose to provide it, we can collect the following types of personal information from you:
- Email address
- Phone number
- Credit card details
- Information provided for the purpose of applying for a job or volunteering opportunity, including: gender, ethnicity, sexual orientation, disability and criminal convictions
How do we use information collected?
We use your personal information collected via our websites for the following purposes:
- To undertake email actions or compile petitions
- To update you on our campaigns and activities
- To ask you to donate or get involved in our campaigns
- To action your expression of interest in joining Amnesty International
- To administer your membership of Amnesty International
- To process donations that we receive from you
- To administer and progress your applications for employment or volunteering opportunities with us
- To monitor the diversity of applicants for employment or volunteering opportunities
- To share your data with other Amnesty International organisations or with trusted third parties (further details below)
- To improve our websites
- To fulfil any legal obligations
Legal basis of processing
Data protection law requires us to have a legal justification to process your personal information. We use the following depending on the type of data and the type of processing:
We require your consent to send you our communications for example to send you emails to update you on our work and our campaigns and to request donations. We will only process your information in this way if you consent. If you apply for a job with us and provide us with sensitive personal information (including details of your race, ethnicity, gender) we will only process that information with your consent.
We sometimes share your personal information with other parts of the Amnesty International global movement (see below). This is done to fulfil our legitimate interest in promoting our organisation as effectively as possible and enabling our message to reach people who may be interested in human rights.
To fulfil a contractual obligation
If you donate to us or express an interest in joining our movement we will process the personal data you provided to process that donation or action your membership request.
We will process your personal information to fulfil any legal obligations placed upon us, such as the prevention of fraud or money-laundering. We will also process your personal information if lawfully required to do so by a legal authority or a court of law.
For example where you are applying for an employment or volunteering opportunity with us, processing certain information is necessary for employment purposes.
We take appropriate security measures to ensure that we keep your information secure, accurate and up to date. We also take care to ensure that we have secure systems for processing payments through our payment services provider. However the transmission of information over the Internet is never completely secure, so while we do our best to protect personal information, we cannot guarantee the security of information transmitted to our websites.
Third Party Websites
On our website we sometimes have links to third party websites or applications. This policy does not apply to such pages or applications hosted or operated by other organisations. This includes the websites or applications of Amnesty International sections or related organisations or third party sites. These other sites may have their own privacy policies which apply to them.
Sharing of your personal information
We will only share your personal information in the following circumstances:
Sharing with other parts of the Amnesty International global movement
Amnesty International Limited is one part of Amnesty International’s global movement. Our movement is made up of over 60 membership organisations working to end human rights violations globally, including within the UK. Some of these bodies are formally constituted and others not. We may share your information with these entities who may then use your personal information in connection with their activities. For example, if you have expressed an interest in joining Amnesty International or sign a petition, we may share your contact details with your local Amnesty International organisation. To the extent that sharing your information in this way requires us to transfer your personal information outside of the EU, we have contractual arrangements in place to ensure that your data is shared and processed by the recipient organisation to an EU standard.
Hosting and processing arrangements
Our websites are hosted by third party service providers and therefore any personal details you submit through them may be processed by that third party service provider.
We also use other third parties to process your personal details including in the following areas:
- to action all online expressions of interest to join Amnesty International or take actions and manage all related communications
- to process online payments
- to process all information associated with applications for employment or volunteering opportunities and related recruitment processes.
All third party services providers process your personal information only on Amnesty International Limited's behalf and are bound by contractual terms that are compliant with data protection law.
We participate in Facebook’s custom audience and lookalike audience programs, which, depending on your privacy settings with Facebook, enable us to display our content to our existing or potential supporters on Facebook. We provide personal information such as your email address to Facebook which securely encrypts it. That personal information is then deleted by Facebook if it does not match a Facebook account or once they confirm you have an account.
Payment processing and fraud
Where submitted, your card details may be disclosed to banks or relevant financial institutions to arrange payments. In the case of a suspected fraudulent transaction, your details may be further disclosed for the sole purpose of performing further checks (for example, disclosure to a credit checking agency).
We may also share your personal information with your permission, or if we are legally required to disclose your information in circumstances where this cannot be reasonably resisted.
A cookie is a text-only piece of information that a website transfers to your computer's hard disk so that the website can remember who you are. A cookie will normally contain the name of the Internet domain from which the cookie has come, the "lifetime" of the cookie, and a value, usually a randomly generated unique number.
If you wish to restrict or block cookies you can set your internet browser to do so - click on the following link for more information: www.aboutcookies.org.
If you are under 18 years of age and would like to get involved in Amnesty International’s work, please make sure that you have your parent/guardian’s permission before giving us personal information.
Retention Period For Data
We only hold your personal information on our systems for as long as is necessary for the purposes outlined above. We remove personal data from our systems once it is no longer required, in line with our guidelines on how long important information must remain accessible for future use or reference, as well as when and how data can be destroyed when it is no longer needed.
The length of time each category of data will be retained will vary depending on how long we need to process it for, the reason it was collected and in line with any statutory requirements. After this time the data will either be deleted or we may retain a secure anonymised record for research and analytical purposes.
Access to and your rights over your personal information
The personal data we hold about you is yours. You have the following rights over your information:
- To be informed how your data is being processed
- To access your data
- To rectify any data that is inaccurate
- To instruct us to delete your data
- To restrict our processing of your data (which includes contacting you via email) at any time. All our email communications to you will contain an unsubscribe link.
- To object to your data being stored.
- To move your data
Recruitment Privacy Statement
Amnesty International Limited is committed to the responsible handling of personal information collected as part of the recruitment process.
Information provided by you in connection with your application will only be used by Amnesty internally in relation to recruitment and selection processes and will not be disclosed to a third party without your consent, except as required by law and except to our service provider (see our general statement for more details).
Sensitive personal information regarding gender, age, sexual orientation, religion and faith, caring responsibilities, disability, ethnic origin and region of origin will be anonymised and will be used for cultural diversity and equal opportunities monitoring purposes only. Unsuccessful applications will be retained for a period of three years after the conclusion of the selection process. We will also ask that you confirm that you are happy to process in the form of our declaration, printed below:
I confirm that the information provided in my application is true and complete. I agree that any deliberate omission, falsification or misrepresentation in the application form will be grounds for rejecting this application or subsequent dismissal if employed by the organisation. Where applicable, I consent that the organisation can seek clarification regarding professional registration details. I consent to Amnesty International processing my personal information on the privacy terms set out above.
If you wish to exercise any of these rights or have any questions about this policy you may contact us in the following ways:
Amnesty International, International Secretariat
1 Easton Street
By email: firstname.lastname@example.org
By telephone: + 44 (0) 20 7413 5500
If you wish to lodge a complaint about our handling of your personal data please get in touch with us on the details above with the details of your complaint; we aim to respond to all complaints within 14 working days.
If you are dissatisfied with how we have handled your complaint you may lodge a complaint with the Information Commissioner’s Office which is the UK regulator in charge of data protection and privacy enforcement:
Telephone: 0303 123 1113