1. Introduction and Overview

The Humaine Foundation (“we,” “our,” or “the Foundation”) is committed to protecting the privacy and security of all individuals who engage with our organization and platform. This privacy policy explains how we collect, use, share, and protect your personal information when you interact with the Foundation and our Global South Synergies & Resilience Platform (GSSRP).

As an organization born from and led by the Global South, we understand the importance of responsible data handling and the need to protect the privacy rights of individuals across diverse cultural contexts. Our approach to privacy reflects our commitment to fostering technological innovation while preserving human dignity and cultural heritage.

This policy applies to all personal information collected through our website, the GSSRP platform, our contact forms, surveys, and any other interactions you may have with the Foundation. By engaging with our services, you acknowledge that you have read and understood this policy.

Our Foundation complies with Mexico’s Federal Law for the Protection of Personal Data in the Possession of Individuals (LFPDPPP). However, as we may process data from people residing in the European Union, we also comply with the principles of the General Data Protection Regulation (GDPR), particularly with regard to the rights of data subjects and the protection of personal data.

About Us

The Humaine Foundation is an international non-profit organization dedicated to harnessing the power of technology for social good throughout the Global South. We operate the Global South Synergies & Resilience Platform (GSSRP), which connects individuals, communities, and organizations to foster collaboration and innovation.

Our data controller details are:

The Humaine Foundation

Avenida México 135

06100, Ciudad de México, CDMX

Mexico

For all privacy-related matters, including questions about this policy or requests to exercise your rights, you can contact our Data Protection Officer at:

[email protected]

2. Information We Collect

We collect and process personal information that is necessary to operate our platform, fulfill our mission, and provide our services effectively. The information we collect varies depending on how you interact with us.

Foundation Website and General Contact

When you interact with our main website or use our general contact form, we collect:

• Full name and email address
• Any message content you provide
• Contact form submissions and correspondence

GSSRP Platform Participation

For individuals participating in our GSSRP platform, we collect more detailed information through our questionnaire to better understand our community and provide appropriate services. This includes:

Personal Information:

• Full name and email address
• Country of residence
• Community type (urban, semi-urban, rural, or remote/isolated)
• Professional affiliation and role
• Gender (with option not to disclose)

Platform Engagement Information:

• How you learned about the platform
• Your intended role and level of engagement
• Areas of interest and expertise
• Current projects and initiatives
• Digital technology comfort level
• Interest in events, workshops, and partnerships

We recognize that some of this information may be considered sensitive personal data under applicable privacy laws, particularly information about gender identity, LGBTQI+ community membership, and other demographic information. We collect this information only with your explicit consent and use it solely to fulfill our mission of creating an inclusive platform that serves all communities within the Global South.

Automatically Collected Information

When you visit our website or use our platform, we may automatically collect certain technical information:

• IP address and general location
• Browser type and version
• Device information
• Pages visited and interaction patterns
• Access times and dates

We use this information to improve our services, ensure platform security, and enhance your experience. We process this data in accordance with legitimate interests and with appropriate safeguards in place.

All personal information is collected and processed in accordance with applicable data protection laws, including but not limited to the LFPDPPP and the GDPR, where applicable.

3. How We Use Your Information

The Humaine Foundation processes personal information for specific, documented purposes aligned with our mission of fostering Global South collaboration and technological innovation.

Primary Purposes

We use your personal information to:

• Create and manage your platform participation, including authentication and account security.
• Match you with relevant opportunities, collaborators, and resources based on your indicated interests and expertise.
• Facilitate connections between participants, while respecting privacy preferences and consent settings.
• Generate anonymized insights about platform engagement and impact to improve our services and report to stakeholders.
• Send you important updates about the platform, including security notices and changes to our terms or policies.

Additional Uses with Your Consent

With your explicit consent, we also use your information to:

• Connect you with mentorship opportunities, workshops, and training programs.
• Share your profile with potential collaborators or funding partners when you express interest in such opportunities.
• Include you in research initiatives aimed at understanding and improving Global South technological innovation.
• Send you newsletters and updates about events, opportunities, and developments relevant to your indicated interests.

Legal Basis for Processing

Under data protection law, we process your personal information based on one or more of the following legal grounds:

• Consent: When you have given explicit permission for specific uses of your information.
• Contract: When processing is necessary to fulfill our commitments to you as a platform participant.
• Legitimate Interests: When processing is necessary for our legitimate interests or those of third parties, always balanced against your rights and interests.
• Legal Obligation: When processing is necessary to comply with legal requirements.

4. Data Sharing and International Transfers

Information Sharing

We share personal information only in specific circumstances and with appropriate safeguards:

• Platform Functionality: Information sharing necessary for core platform features, such as connecting participants with similar interests or complementary expertise.
• Service Providers: Carefully selected third-party service providers who help operate our platform, process data, or provide technical support. These providers are bound by strict confidentiality and data protection agreements.
• Research and Impact Assessment: Anonymized or aggregated data for research purposes and impact evaluation, with no personally identifiable information.
• Legal Requirements: When required by law, court order, or governmental regulation.

International Data Transfers

As a Global South-led organization operating internationally, we transfer and store data across borders. Our website is currently hosted in the United States through our service provider Hostinger. For participants from the European Economic Area (EEA), this means your data will be transferred to and stored in a country outside the EEA.

For such transfers, we rely on appropriate safeguards and transfer mechanisms:

For our hosting provider and other service providers based in the United States, we ensure appropriate safeguards are in place through Data Processing Agreements and supplementary measures including:

• Strong encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments
• Contractual commitments regarding data protection and confidentiality

We continuously monitor changes in international data transfer requirements and update our practices accordingly. For detailed information about our specific data transfer mechanisms, you can contact our Data Protection Officer.

Safeguards and Security

For all data sharing and transfers, we maintain strict security protocols:

• Data minimization principles to share only necessary information.
• Encryption of data in transit and at rest.
• Regular security assessments of our service providers and partners.
• Clear procedures for data incident response and notification.

We never sell personal information to third parties or use it for purposes other than those specified in this policy.

5. Your Rights and Choices

We respect and uphold your rights regarding your personal information. As a participant in our platform, you have several fundamental rights that we are committed to protecting.

Your Privacy Rights

• Right to Access: You can request information about what personal data we hold about you and how we use it.
• Right to Rectification: If you believe any information we hold about you is inaccurate or incomplete, you can request that we correct or update it.
• Right to Erasure: You can request that we delete your personal information in certain circumstances, such as when it’s no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: You can ask us to temporarily or permanently stop processing some or all of your personal data.
• Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You can object to our processing of your personal data in certain circumstances, particularly regarding direct communications or processing based on legitimate interests.
• Right to Withdraw Consent: Where we process data based on your consent, you can withdraw this consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. To protect your privacy, we may need to verify your identity before fulfilling your request.

We will respond to all legitimate requests within one month. If your request is particularly complex or if you have made multiple requests, it may take us longer. In this case, we will notify you and keep you updated.

There is no charge for exercising your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

6. Data Security and Retention

Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

Technical Measures:

• Encryption of data during transmission and storage
• Secure access controls and authentication systems
• Regular security updates and patch management
• Robust backup systems and disaster recovery procedures
• Firewalls and intrusion detection systems
• Regular security testing and vulnerability assessments

Organizational Measures:

• Staff training on data protection and security
• Access to personal data limited to authorized personnel
• Documented security procedures and policies
• Incident response and breach notification procedures
• Regular audits of security measures
• Vendor assessment and management procedures

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable laws. Specific retention periods vary based on:

• The type of information
• The purpose of collection and processing
• Legal and regulatory requirements
• Platform participation status

For active platform participants, we retain account information and activity data for the duration of your participation plus a reasonable period afterward to comply with legal obligations and handle any post-participation matters.

For inactive accounts:

• Basic account information is retained for 24 months after the last activity
• Detailed profile information is archived after 12 months of inactivity
• Communications and correspondence are retained for 36 months
• Technical logs are retained for 6 months

You can request deletion of your account and associated personal information at any time. Some information may be retained for legal compliance or legitimate business purposes, such as platform security and fraud prevention.

Data Breach Response

In the event of a personal data breach that risks impacting your rights and freedoms, we will:

• Notify relevant supervisory authorities within 72 hours
• Inform affected participants without undue delay
• Provide clear information about the breach and our response
• Take measures to mitigate any potential adverse effects

7. Additional Information

Changes to This Privacy Policy

We regularly review and update this privacy policy to reflect changes in our practices, technology, legal requirements, and participant feedback. When we make changes:

• Material Changes: If we make significant changes that affect your rights or how we use your personal information, we will notify you directly through the platform or via email at least 30 days before the changes take effect. We will obtain your consent where required by applicable law.
• Minor Updates: For minor changes that don’t significantly affect your rights, we will post the updated policy on our website with a new “Last Updated” date.

Previous versions of this policy will be archived and available upon request.

Supervisory Authority and Complaints

While we hope to resolve any concerns you may have about our privacy practices directly, you have the right to file a complaint with your local data protection authority.

Third-Party Links and Services

Our platform may contain links to third-party websites or services. This privacy policy applies only to the Humaine Foundation and GSSRP platform. We encourage you to read the privacy policies of any third-party services you access through our platform.

Children’s Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information about a child, please contact us immediately.

Language and Accessibility

This privacy policy is available in English. We are working to make it available in additional languages to better serve our Global South community. If you need this policy in a different format for accessibility reasons, please contact us.

Questions and Contact Information

For any questions about this privacy policy or our privacy practices:

• Email: [email protected]
• Address: The Humaine Foundation, Avenida México 135, 06100, Ciudad de México, CDMX, Mexico

When contacting us about privacy matters, please help us respond effectively by:

• Clearly stating the nature of your query or concern
• Providing relevant details about your platform participation if applicable
• Including any specific privacy rights you wish to exercise

We are committed to addressing your privacy concerns promptly and transparently, in alignment with our mission of fostering trust and collaboration across the Global South.

Last Updated: February the 4^th, 2025