document: {"document":{"title":"privacy and cookies","text":"## Who we are\n\nChatham House, the Royal Institute of International Affairs, is an independent policy institute based in London. Our mission is to help build a sustainably secure, prosperous and just world.\n\nChatham House is comprised of both a charity and a trading company. In this policy wherever you see the words ‘we’, ‘us’ or ‘our’, it refers to both our charity and/or our trading company.\n\nOur trading company is wholly owned and controlled by our charity. Any information we collect may be used by both our entities. Our trading company exists as a separate legal entity so that we can hold our conferences and provide some limited consulting services.\n\n  * Chatham House (The Royal Institute of International Affairs), registered charity no. 208223. Our main trading address is 10 St James’s Square, London SW1Y 4LE. Our VAT number is 653 2181 53.\n  * Chatham House Enterprises Limited, registered company no. 2979061. Our main trading address is 10 St James’s Square, London SW1Y 4LE. Our VAT number is 653 2181 53.\n\n\n\nBoth our charity and our trading company are registered as data controllers with the Information Commissioners’ Office under the Data Protection Act 1998:\n\n  * Chatham House (The Royal Institute of International Affairs): registration number Z1808639.\n  * Chatham House Enterprises Limited: registration number Z1808673.\n\n\n\nWe take great care to comply with the requirements of the UK Data Protection Act 1998 (“The Act”), the Privacy and Electronic Communications Regulation 2003 and the General Data Protection Regulation 2018, all relating to the personal information you supply to us.\n\n## Information we may collect\n\nWe may collect and process the following data about you:\n\nPersonal Data:\n\nInformation that you provide by filling in forms on our Site. This includes information provided at the time of registering to use our Site, subscribing to our service, posting material or requesting further services and might include the following:\n\n  * First name\n  * Last name\n  * Gender\n  * Date of birth\n  * Email (for login)\n  * Address\n  * Postcode\n  * Telephone number\n\n\n\nWe may also ask you for information when you report a problem with our Site.\n\nIf you contact us, we may keep a record of that correspondence.\n\nInformation relating to your area of expertise as a result of communicating with us.\n\nWe may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.\n\nInformation that we obtain from you when taking part in an event or making a donation may, in addition to the above, include credit card, debit card or bank account details, but such information will be stored only by our payment provider, Worldpay and will not be held by us.\n\nSensitive Personal Data:\n\nInformation that we obtain from you when you apply for a role at Chatham House or have taken up employment with us. This may include, subject to your prior written consent, sensitive information such as:\n\n  * Racial or ethnic origin\n  * Religious beliefs\n  * Physical and mental health details\n  * Trade union membership\n  * Sexual orientation\n  * Commission of criminal offences and/or involvement in criminal proceedings\n\n\n\nInformation we get from your use of our Site and services:\n\nIn addition to cookies (for which see the section below entitled What Cookies We Use), we may also collect details about your usage of the Site. Those may include, but are not limited to:\n\n  * Traffic data\n  * Location data\n  * Weblogs and other communication data (whether this is required for our own purposes or otherwise)\n  * The resources that you access, such as text journals, newspaper articles or our library catalog\n\n\n\nInformation from third parties:\n\nWe may also receive information about you from third party event co-organizers or project funders. This can include information such as:\n\n  * Your name\n  * Postal address\n  * Email address\n  * Emergency contact details\n  * Dietary requirements\n  * Telephone number\n  * Whether you are a tax payer so that we can claim Gift Aid\n  * What browser you are using\n  * Your IP address\n  * The computer operating system you are using\n\n\n\nFrom the public domain:\n\nWe may obtain some information from publicly available sources such as news articles or open postings on social media such as Facebook and LinkedIn.\n\n## How your personal information may be used\n\nWhere you have consented or a rule of law applies whereby your consent is not required, your Data will be automatically collected when you sign up to our Services.\n\nWe may use information held about you in the following ways:\n\n  * to ensure that content from our Site is presented in the most effective manner for you and for your computer\n  * to provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes\n  * to carry out our obligations arising from any contracts entered into between you and us, for example if you take up employment with us. If you unsuccessfully apply for a job at Chatham House, your personal information will be held for 12 months after the recruitment exercise has been completed and will then be destroyed or deleted\n  * to allow you to participate in interactive features of our service, when you choose to do so\n  * to invite you to events ran by us or our co-partners\n  * to administer your donations or support your fundraising, including processing Gift Aid (we do not store credit card details)\n  * to notify you about changes to our service\n  * to fulfil orders for goods and services\n  * to administer your membership\n  * to carry out in-house research and analysis, for example data mining, marketing statistics or equal opportunities monitoring\n  * to approach you for charitable funding where you have consented to be contacted for such purposes\n  * to monitor customer traffic patterns, Site usage and related Site information in order to optimize your use of our Site; data collected in this way will be aggregated and anonymized and passed to a reputable third-party, but these statistics will include no information personally identifying you\n  * to evaluate your net worth and potential level of donation, subject to prior consent.\n\n\n\nYou can opt out of your data being used for any of the Purposes of Use by accessing our Preference Centre.\n\nThe Purposes(s) of Use in relation to:\n\n  * your Personal Data is lawful because it is necessary for us to hold and use your Personal Data so that we can perform our obligations under the contract we have entered into with you\n  * your Sensitive Personal Data is lawful because you have given us your explicit consent to process your data in this way when applying for a role at Chatham House or if you have taken up employment with us\n  * usage Data and Third Party Data is lawful because it is necessary for the purposes of legitimate interests pursued by us and/or our web developers in order to keep the Site up to date, organize events and functions and provide additional services to our users from time to time\n\n\n\n## Cookies we use\n\nCookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of our Site. The table below explains the cookies we use and why. We do not do this to track individual users or to identify them, but to gain useful knowledge about how the Site is used so that we can keep improving it for our users.\n\nThe law states that we can store cookies on your machine if they are essential to the operation of the Site but that for all others, we need your permission to do so.\n\nYou can set your browser not to accept cookies and the above website tells you how to remove cookies from your browser. However, in a few cases some of our Site features may not function as a result.\n\nIf you do not wish to receive cookies from us or any other website, you can turn cookies off on your web browser: please follow your browser provider’s instructions in order to do so. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org, www.allaboutcookies.org or www.civicuk.com/cookie-control/browser-settings\n\nDomain| Cookie Name| Purpose| Validity Length  \n---|---|---|---  \n  \n.chathamhouse.org\n\n| \n\n_ga\n\n| \n\nThis cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.\n\n| \n\n1 Year  \n  \n| \n\n_gid\n\n| \n\nThis cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited.\n\n| \n\n1 Day  \n  \n| \n\n_gat\n\n| \n\nThis cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.\n\n| \n\n0 Days  \n  \n| \n\n_gat_UA-9108403-1\n\n| \n\nThis is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.\n\n| \n\n0 Days  \n  \n| \n\n__unam\n\n| \n\nThis cookie is usually associated with the ShareThis social sharing widget placed in a site to enable sharing of content across various social networks. It counts clicks and shares of a page.\n\n| \n\n9 Months  \n  \n.facebook.com\n\n| \n\nfr\n\n| \n\nEncrypted Facebook ID and Browser ID, this is used by Facebook for the purpose of advertisement.\n\n| \n\n3 Months  \n  \n| \n\ndatr\n\n| \n\nThis cookie identifies the browser connecting to Facebook. It is not directly tied to individual Facebook the user. Facebook reports that it is used to help with security and suspicious login activity, especially around detection of bots trying to access the service. Facebook also say the behavioural profile associated with each datr cookie is deleted after 10 days. This cookie is also read via Like and other Facebook buttons and tags placed on many different websites.\n\n| \n\n2.5 Years  \n  \n| \n\nlocale\n\n| \n\nRemembers display locale when user logs out, for returning language and location preferences\n\n| \n\n6 Months  \n  \n| \n\nlu\n\n| \n\nUsed to manage the login process, remembers user on return visit if they choose to stay logged in.\n\n| \n\n2.5 Years  \n  \n| \n\nx-src\n\n| \n\nTargeting/advertising\n\n| \n\n6 Months  \n  \n.sharethis.com\n\n| | \n\nThis domain is owned by Share This. The main business activity is: ShareThis provides web widgets that site owners embed into their pages or other content, to enable visitors to create and share links to the content across social networks. They also make use of the data collected to provide advertisers and marketers with profile information for targeted, behavioural advertising.\n\n|   \n| \n\n__stid\n\n| \n\nThis cookie is used by Share This to provide social sharing capabilities.\n\n| \n\n1 Year  \n  \n| \n\n__uset\n\n| \n\nUsed to determine if a user has received other cookies from ShareThis, to prevent repetition within 8 hours\n\n| \n\n1 Day  \n  \n| \n\npxcelPage_c010\n\n| \n\nThere is not yet any general information about this cookie based on its name only.\n\n| \n\n1 Week  \n  \n| \n\npxcelBcnLcy\n\n| \n\ncdn.syndication.twimg.com | This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third party host, it collects data through a range of plug-ins and integrations, that is primarily used for tracking and targeting. Twitter does not currently provide information on the use of specific cookies.\n\n| \n\n0 Days  \n  \n.twitter.com\n\n| \n\n__utma\n\n| \n\nThis is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie lasts for 2 years by default and distinguishes between users and sessions. It it used to calculate new and returning visitor statistics. The cookie is updated every time data is sent to Google Analytics. The lifespan of the cookie can be customised by website owners\n\n| \n\n3.5 Years  \n  \n| \n\n__utmb\n\n| \n\nThis is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie determines new sessions and visits and expires after 30 minutes. The cookie is updated every time data is sent to Google Analytics. Any activity by a user within the 30 minute life span will count as a single visit, even if the user leaves and then returns to the site. A return after 30 minutes will count as a new visit, but a returning visitor.\n\n| \n\n1.5 Years  \n  \n| \n\n__utmz\n\n| \n\nThis is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour measure of site performance. This cookie identifies the source of traffic to the site - so Google Analytics can tell site owners where visitors came from when arriving on the site. The cookie has a life span of 6 months and is updated every time data is sent to Google Analytics.\n\n| \n\n2 Years  \n  \n| \n\nauth_token\n\n| \n\nTwitter does not currently provide information on the use of specific cookies.\n\n| \n\n17 Years  \n  \n| \n\nguest_id\n\n| \n\nTwitter does not currently provide information on the use of specific cookies.\n\n| \n\n3.5 Years  \n  \n| \n\nremember_checked\n\n| \n\nTwitter does not currently provide information on the use of specific cookies.\n\n| \n\n7 Years  \n  \n| \n\nremember_checked_on\n\n| \n\nTargeting/advertising\n\n| \n\n7 Years  \n  \n| \n\nsecure_session\n\n| \n\nTwitter does not currently provide information on the use of specific cookies.\n\n| \n\n17 Years  \n  \n| \n\ntwll\n\n| \n\nTwitter does not currently provide information on the use of specific cookies.\n\n| \n\n7 Years  \n  \ncdn.syndication.twimg.com\n\n| | \n\n This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third party host, it collects data through a range of plug-ins and integrations that is primarily used for tracking and targeting. Twitter does not currently provide information on the use of specific cookies.\n\n|   \n| \n\nlang\n\n| \n\nUsed to store Twitter language preferences, potentially to serve up content in the stored language.\n\n| \n\n0 Days  \n  \nglobal.ib-ibi.com\n\n| | \n\nIts purpose is unknown, but the cookies used and sites found on indicate a purpose of user tracking across domains.\n\n|   \n| \n\nASP.NET_SessionId\n\n| \n\nGeneral purpose platform session cookie, used by sites written with Microsoft .NET based technologies. Usually used to maintain an anonymised user session by the server.\n\n|   \n  \n.crwdcntrl.net\n\n| | \n\nThis domain is owned by Lotame. The main business activity is: Data Management Platform - Targeting /Advertising\n\n|   \n| \n\n_cc_cc\n\n| \n\nTargeting/advertising\n\n| \n\n9 Months  \n  \n| \n\n_cc_aud\n\n| \n\nTargeting/advertising\n\n| \n\n9 Months  \n  \n| \n\n_cc_id\n\n| \n\nTargeting/advertising\n\n| \n\n9 Months  \n  \n| \n\n_cc_dc\n\n| \n\nTargeting/advertising\n\n| \n\n9 Months  \n  \n.rfihub.com\n\n| | \n\nThis domain is owned by Rocketfuel. The main business activity is: Advertising\n\n|   \n| \n\neuds\n\n| \n\nTargeting/advertising\n\n| \n\n0 Days  \n  \n| \n\nsmd\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year 26 Days  \n  \n| \n\nrud\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year 26 Days  \n  \n| \n\neuds\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year 26 Days  \n  \n.ctnsnet.com\n\n| | \n\nThis is a tracking domain.\n\n|   \n| \n\nopt\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n| \n\ncid\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n.adsrvr.org\n\n| | \n\nThis domain is owned by TheTradeDesk. The main business activity is: Ad Serving Platform\n\n|   \n| \n\nTDID\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n| \n\nTDCPM\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n.exelator.com\n\n| | \n\nThe main business activity is: Advertising Data Aggregation\n\n|   \n| \n\nEE\n\n| \n\nTargeting/advertising\n\n| \n\n4 Months  \n  \n| \n\nud\n\n| \n\nTargeting/advertising\n\n| \n\n4 Months  \n  \n| \n\nhsk_350\n\n| \n\nTargeting/advertising\n\n| \n\n4 Months  \n  \n.weborama.com\n\n| | \n\nWeborama is an online marketing technology company that offers ad analytics and behavioral targeting services.\n\n|   \n| \n\nwui\n\n| \n\nTargeting/advertising\n\n| \n\n3 Months  \n  \n| \n\nwam-sync\n\n| \n\nTargeting/advertising\n\n| \n\n1 Week  \n  \n.weborama.fr\n\n| | \n\nTargeting/advertising\n\n|   \n| \n\nAFFICHE_W\n\n| \n\nTargeting/advertising\n\n| \n\n3 Months  \n  \n.agkn.com\n\n| | \n\nThis domain is owned by Aggregate Knowledge, which has been acquired by Neustar Inc. Aggregate Knowledge provides a data management platform which enables real time targeting and consumer profiling functionality.\n\n|   \n| \n\nu\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n| \n\nuuid\n\n| \n\nTargeting/advertising\n\n| \n\n5 Years  \n  \n| \n\nab\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n.s.thebrighttag.com\n\n| | \n\nThis domain is owned by Signal Inc. a US based marketing technology company.\n\n|   \n| \n\nbt3\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n| \n\nbtv3.gcms\n\n| \n\nTargeting/advertising\n\n| \n\n6 Months  \n  \n| \n\nbtv3.X7aCaxG\n\n| \n\nTargeting/advertising\n\n| \n\n1 Month  \n  \n.semasio.net\n\n| | \n\nThis domain is owned by Semasio, a German business specialising in profiling and behavioural targeting of consumers.\n\n|   \n| \n\nSEUNCY\n\n| \n\nTargeting/advertising\n\n| \n\n6 Months  \n  \nibeu2.mookie1.com\n\n| | \n\nThis domain is owned by Media Innovation Group, as US based digital marketing business. The main business focus is providing targeted online marketing services.\n\n|   \n| \n\nASP.NET_SessionId\n\n| \n\nGeneral purpose platform session cookie, used by sites written with Miscrosoft .NET based technologies. Usually used to maintain an anonymised user session by the server.\n\n| \n\n432 Years  \n  \n| \n\nibkukiuno\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n| \n\nibkukinet\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n.doubleclick.net\n\n| | \n\nDoubleclick is a business owned by Google that makes it money from online advertisers and publishers.\n\n|   \n| \n\ntest_cookie\n\n| \n\nTargeting/advertising\n\n| \n\n0 Days  \n  \n| \n\nid\n\n| \n\nTargeting/advertising\n\n| \n\n2 years  \n  \n| \n\nIDE\n\n| \n\nTargeting/advertising\n\n| \n\n2 Years  \n  \n.tidaltv.com\n\n| | \n\nThis domain is owned by Videology. The main business activity is: Advertising\n\n|   \n| \n\nsync-his\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n.go.affec.tv\n\n| | \n\nThis domain is owned by Affectv. The main business activity is: Advertising/Behavioural Targeting Technology\n\n|   \n| \n\nck\n\n| \n\nTargeting/advertising\n\n| \n\n5 Years  \n  \n| \n\noo\n\n| \n\nTargeting/advertising\n\n| \n\n5 Years  \n  \n| \n\npt\n\n| \n\nTargeting/advertising\n\n| \n\n5 Years  \n  \nwww.entitytag.co.uk\n\n| | \n\nThere is not yet any general information about this host domain.\n\n|   \n| \n\njson\n\n| \n\nThere is not yet any general information about this cookie based on its name.\n\n| \n\n2 Years  \n  \n.adnxs.com\n\n| | \n\nAdnxs.com is run by AppNexus, a company that provides technology, data and analytics to help companies buy and sell online display advertising.\n\n|   \n| \n\nsess\n\n| \n\nTargeting/advertising\n\n| \n\n1 Day  \n  \n| \n\nuuid2\n\n| \n\nTargeting/advertising\n\n| \n\n3 Months  \n  \n.dsp.io\n\n| | \n\nThere is not yet any general information about this host domain.\n\n|   \n| \n\neicm\n\n| \n\nThere is not yet any general information about this cookie based on its name.\n\n| \n\n1 Year  \n  \n| \n\nEXID\n\n| \n\nThere is not yet any general information about this cookie based on its name.\n\n| \n\n1 Year  \n  \n| \n\nIOID\n\n| \n\nThere is not yet any general information about this cookie based on its name.\n\n| \n\n1 Year  \n  \n.tapad.com\n\n| | \n\nThis domain is owned by Tapad Inc. a US based company that provides technology to track users across devices to enhance targeting capabilities.\n\n|   \n| \n\nTapAd_TS\n\n| \n\nTargeting/advertising\n\n| \n\n1 Month  \n  \n| \n\nTapAd_DID\n\n| \n\nTargeting/advertising\n\n| \n\n1 Month  \n  \n.eyeota.net\n\n| | \n\nThis domain is owned by Eyeota, a global company specialising in audience data to enable targeting of advertising based on visitor profiling.\n\n|   \n| \n\nmako_uid\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n.ml314.com\n\n| | \n\nThis domain appears to be connected to a company called Bombora, a USA based audience targeting and intelligence business.\n\n|   \n| \n\nu\n\n| \n\nTargeting/advertising\n\n| \n\n0 Days  \n  \n| \n\npi\n\n| \n\nTargeting/advertising\n\n| \n\n1 Year  \n  \n| \n\ntp\n\n| \n\nTargeting/advertising\n\n| \n\n2 Weeks  \n  \n| \n\nAWSELB\n\n| \n\nTargeting/advertising\n\n| \n\n0 Days  \n  \nmatch.rundsp.com\n\n| | \n\nThis domain is owned by RUN, a USA based company providing programmatic advertising technology focussed on mobile platforms.\n\n|   \n| \n\nRUN_ID\n\n| \n\nTargeting/advertising\n\n| \n\n3 Months  \n  \n.crsspxl.com\n\n| | \n\nThe ownership of this domain is hidden behind a privacy registration service. We therefore assume that the purpose of the cookies set by it is in the most privacy intrusive category.\n\n|   \n| \n\nuuid\n\n| \n\nTargeting/advertising\n\n| \n\n2 Months  \n  \ntag.crsspxl.com\n\n| | \n\nTargeting/advertising\n\n|   \n| \n\nAWSELB\n\n| \n\nTargeting/advertising\n\n| \n\n0 Days  \n  \n.bluekai.com\n\n| | \n\nThis domain is owned by Blue Kai.\n\n|   \n| \n\nbkdc\n\n| \n\nTargeting/Advertising\n\n| \n\n6 Months  \n  \n| \n\nbku\n\n| \n\nTargeting/Advertising\n\n| \n\n6 Months  \n  \n.rlcdn.com\n\n| | \n\nThis domain is owned by Live Ramp Inc, providers of a platform for targeted marketing and profiling.\n\n|   \n| \n\nck1\n\n| \n\nTargeting/Advertising\n\n| \n\n6 Months  \n  \n| \n\nrlas3\n\n| \n\nTargeting/Advertising\n\n| \n\n6 Months  \n  \n| \n\nrtn1-z\n\n| \n\nTargeting/Advertising\n\n| \n\n6 Months  \n  \n.rfihub.com\n\n| | \n\nThis domain is owned by Rocketfuel. The main business activity is: Advertising\n\n|   \n| \n\neuds\n\n| \n\nTargeting/Advertising\n\n| \n\n0 Days  \n  \n| \n\nruds\n\n| \n\nTargeting/Advertising\n\n| \n\n0 Days  \n  \n| \n\nrud\n\n| \n\nTargeting/Advertising\n\n| \n\n13 Months  \n  \n| \n\neud\n\n| \n\nTargeting/Advertising\n\n| \n\n13 Months  \n  \n.nexac.com\n\n| | \n\nThis domain is owned by Datalogix. The main business activity is: Advertising\n\n|   \n| \n\nna_tc\n\n| \n\nTargeting/Advertising\n\n| \n\n2 Years  \n  \n## Where we store your personal data/Transferring your data outside the EEA\n\nWe aim to ensure that there are appropriate physical, technical and managerial controls in place to protect your Data. Within our offices, all of our staff receive training on handling data security.\n\nWhere we use external companies to collect or process data on our behalf, your Data may be transferred to, and stored at, a destination outside the European Economic Area (\"EEA\"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the provision of support services.\n\nThe purpose for such transfers can be a combination of a number of things: the costs of data storage may be lower in countries based outside the EEA; our support teams may be based there (again, usually for reasons of cost; or one of our subsidiary companies which deal with your Data may be based outside of the EEA.\n\nHowever, we will meet our obligations under the legislation by ensuring that the information has the same protection as if it were being held within the EEA because our hosting company either benefits from the Privacy Shield or has entered into model EU clauses with any sub-processor it uses and based outside the EEA or has established a set of binding corporate rules with its foreign subsidiaries who are based outside the EEA or the Information Commissioner has made a positive finding of adequacy in relation to the territory in which the sub-processor is based and to which your Data may be transferred .\n\nWe will take all steps reasonably necessary to ensure that your Data is treated securely as we do and in accordance with this privacy policy.\n\nWhere we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.\n\nUnfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk.\n\nOnce we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.\n\n## Sharing your personal information with third parties\n\nWe may share your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985.\n\nWe may also share your Personal Information with third parties in the following circumstances:\n\n  * In the event that we sell or buy any business or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such business or assets. In that event, we will attempt to notify you prior to the event and offer you the chance to cease use of the Services and remove your information from our database where we are able to contact you and you require its deletion. In any event, we will endeavour to ensure that your rights and freedoms in respect of the processing of your personal data are adequately and appropriately protected\n  * If we or substantially all of our assets are acquired by a third party, in which case Personal Data held by us about you will be one of the transferred assets\n  * If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Chatham House (The Royal Institute of International Affairs), our customers, or others. This includes exchanging information with other companies and organisations for the purposes of terrorism, fraud protection and credit risk reduction\n  * When acting as agents and data processors carrying out work on our behalf such as fulfilment companies, event partners or program funders. Where we enter into a relationship with an external party, any such arrangements will be subject to a formal agreement between Chatham House and that organization to protect the security of your data\n  * Hotels, airlines and travel agencies should Chatham House arrange your travel and accommodation, for example if you are an invited guest speaker for one of our events\n  * Subject to prior consent, we may use third party wealth screening and insight companies to provide information about your net worth and your potential level of donation.\n\n\n\nThe Purposes of transfer of your Data (save in the case of Sensitive Data, where we will have obtained your specific consent to do so for one or more of the Purposes) are lawful because it is necessary for us to hold and use your Personal Data so that we can perform our obligations under the contract we have entered into with you for the Purpose(s).\n\nIn the event of any of the above scenarios occurring, we will endeavour to ensure that your rights and freedoms in respect of the processing of your personal data are adequately and appropriately protected.\n\nWe will not sell your data to any third party.\n\n## Your rights\n\nWithdrawing your consent\n\nYou have the right to ask us not to process your personal data for marketing and donation request purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes.\n\nYou can exercise your right to prevent such processing by accessing our Preference Centre.\n\nOur Site may, from time to time, contain links to and from external websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.\n\nAccessing and managing your personal information\n\nYou have the right to request a copy of your Personal Data by making a ‘subject access request’ under The Act and to have any inaccuracies corrected.\n\nYou also have the following rights:\n\n  * to request us to erase your Personal Data\n  * to request us to restrict our processing of your Personal Data\n  * to object to the way in which we are dealing with and processing your Personal Information.\n\n\n\nShould you wish to exercise these rights, we will require you to prove your identity with two pieces of approved identification. Please address requests to the Data Protection Officer, Chatham House, 10 St James’s Square, London SW1Y 4LE and we will respond within thirty days of receipt of your written request and confirmed ID.\n\nPlease provide as much information as possible about the nature of your contact with us to help us locate your records.\n\nTo exercise any of these rights, you should contact our Data Protection Officer at the above address.\n\nIf you are not happy about the way in which we have processed or dealt with your information, you can complain to the Information Commissioner’s Office (ICO).\n\nHere, you can find more details on how to complain.\n\nComplaining to the ICO\n\nYou have the right to complain to the Information Commissioner’s Office if you think there is a problem with the way we handle your data.\n\n## How long we store your data for\n\nWe will hold your personal information on our systems for as long as is necessary to operate the service in accordance with legal requirements and tax accounting rules.\n\nWhere your information is no longer required, we will ensure it is disposed of in a secure manner.\n\n## Changes to our Privacy Policy\n\nWe keep our privacy notice under regular review. This privacy notice was last updated on 17 November 2017.\n\nAny changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email.\n\nBy continuing to use our Site, you shall be deemed to have accepted such changes.\n\n## Contact Us\n\nIf you have any questions, comments and requests regarding this privacy policy you can email us or write to:\n\nData Protection Officer,  \nThe Royal Institute of International Affairs  \nChatham House  \n10 St James’s Square  \nLondon SW1Y 4LE\n","paragraphs":null,"sentences":null,"language":null},"classifications":[{"level":"document","labels":["is_policy"],"label_definitions":null}]}