Principles for the processing of personal data relate to:
Fair and legitimate processing
Personal data should be processed in a fair and transparent manner and only if there is a legitimate basis for doing so. Legitimate bases include:
- In the vital or best interest of the Data Subject or another person
- To ensure the safety and/or security of individuals
- The public interest
- To enable the Global Fund to carry out its mandate under its Framework Document and Board-approved Strategy (legitimate interest)
- Performance of a contract
- Compliance with a legal obligation
- Defense of legal claims
Limitation to a purpose
Personal data may be processed only for one or more specific and legitimate purposes and may not be further processed in a manner incompatible with such purpose(s). The Global Fund may process personal data for purposes other than those specified at the time of collection if such further processing is compatible with those original purposes and, in particular, where the processing is necessary for historical, statistical or scientific purposes, or accountability of humanitarian action. However, further processing is not permissible if the risks for the data subject outweigh the benefits of further processing.
Data minimization
The processing of personal data should be necessary and proportionate to the purpose(s) for which it is being processed. Therefore, personal data that is being collected and processed should be adequate and relevant to the identified purpose and should not exceed that purpose.
Accuracy
Personal data should be recorded as accurately as possible and, where necessary, updated to ensure it fulfils the purpose(s) for which it is processed. Data subjects should be made aware of the importance of providing accurate and complete information, including updating such information as applicable. Every reasonable precaution and effort must be taken to ensure that inaccurate personal data are corrected or deleted without undue delay (taking into account the purpose(s) for which they are processed, as well as the principles of data minimization and storage limitation).
Storage limitation
Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purpose(s) for which the personal data are processed. Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes. This principle should be read together with the relevant Global Fund rules and regulations.
Maintaining security and confidentiality
Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures. All personal data must be processed, handled, filed and stored in accordance with the Global Fund’s rules and regulations in order to ensure and respect confidentiality.
Transfers to legal authorities
In appropriate circumstances, the Global Fund may transfer Personal Data to a national law enforcement agency, a national court or another legitimate legal authority. Such Data Transfers may be upon request of the legal authority (which may be binding or non-binding on the Global Fund) or on the Global Fund’s own initiative.
Contact the Global Fund
Where the Global Fund is processing your personal data, you may enquire about the following by contacting :
- information about the personal data related to you that is being processed;
- the correction of personal data related to you; and
- the deletion of personal data related to you.
Privileges and immunities
Any transfer of Personal Data is and shall be without prejudice to and shall not be deemed as a waiver, express or implied, of any of the privileges or immunities of the Global Fund under (i) international law, including customary international law, international conventions, treaties or agreements; (ii) any national laws, including, but not limited to, the International Organizations Immunities Act of the United States of America (22 United States Code 288 and 288f–6); or (iii) under the Headquarters Agreement between the Global Fund and the Swiss Federal Council dated 13 December 2004.