August 2022
1. GENERAL
In this policy on the processing of personal data (“Personal Data Protection Policy”), we explain how we, the Caribbean Industrial Research Institute (“CARIRI”, “the Institute”, “us”, “our”, “we”), collect and use your personal data when you communicate with us or visit our website, (the “Website”). This Policy shall be subject to the provisions of the Data Protection Act, Chap. 22:04 of the Laws of the Republic of Trinidad and Tobago or any statutory modification or re-enactment thereof.
Our services are a combination of routine and non-routine offerings which span the science, technological and entrepreneurial realms with a primary focus on innovation and knowledge management. The data we process is, therefore, primarily in respect of the Organization you represent.
Whether your interaction with the Institute is as a private individual, corporate entity, NGO or Government entity, your data will be processed in compliance with this policy.
The Institute’s Personal Data Protection Policy applies to personal data you provide us with via our website, forms, and questionnaires collected from the Website or from other sources.
CARIRI holds confidential your personal data provided to the Institute via the website or other sources. Contact details for CARIRI are provided below for all communication with the Institute.
We use cookies on our Website to optimize your use of the Website. This is described in more detail in our cookie policy.
2. PERSONAL DATA – COLLECTION AND PURPOSE
Website Visits: When you visit our website, we automatically collect data about you and your use of the Website. The data includes your IP address, what type of browser you use, what pages you visit, what links you activate and general information about your navigation and use of the Website.
The purpose is to pursue our legitimate interests in improving user experience and the functionalities of the Website and to be able to register the amount of time visitors spend on the Website, and to show you relevant information.
When you sign up for our:
● Programmes
● Projects
● Training initiatives
● Inquiries
● Requests for Quotation
● Other promotional initiatives
the data we collect will include your name, gender, age, address, e-mail address, telephone number, what organization you represent, what industry you are from, method of payment, information about the services ordered by you, the time and method of delivery, your consent and your interests and preferences if you choose to provide such information. We also collect, where applicable biographical information which is required in relation to a specific proposal or project.
Where the data collection is provided by minors, parents or guardians’ biodata and contact data are also collected.
The purpose is to enable us to:
● Send you information and pursue our legitimate interest in sending you promotional material on the initiatives of the Institute.
● Enable us to deliver the services offered or agreed upon, and otherwise enable us to perform the contract concluded with you or the Organization you represent and to handle your right to communicate with us.
● Enable you to confirm your understanding of the course you have signed up for.
○ Register you for the course and for the subsequent administration of your participation in the course. When you register for a course, the contract concluded
for participation in the course is the legal basis for processing your personal data.
○ Either alone or in partnership, seek funding for research and development projects, fulfil any agreement we have with you or your organization in respect of proposal
preparation, and fulfil the agreement with the funding authority in the event that the project is funded.
○ Reply to the enquiry and be able to communicate with you in order to provide the service you request.
If you are the contact person of
● A client
● A stakeholder organization
● A supplier, or
● A vendor
the data we collect will include your name, e-mail and telephone number, what Organization you represent, as well as any other data that you choose to provide, not including any sensitive data.
The purpose of the data processing is to enable us to communicate with you by mail and telephone and to provide you and the Organization you represent with the best possible service. In addition, we use the information to contact you or the Organization you represent in order to establish your level of satisfaction with the services we provide and/or to send you information about other services that we think may be of interest to you or the Organization you represent.
Specific to suppliers and vendors, our collection and data processing is to enable us to communicate with you and the Organization you represent by e-mail or telephone in
connection with the tasks that you or the Organization you represent performs for the Institute.
3. RECIPIENTS OF PERSONAL DATA, INCLUDING THIRDPARTY TRANSFERS
The Institute will only share your personal data with third parties if we are required to do so by law or in order to be able to provide the services we offer via the Website.
Transfers to data processors. Your data will only be transferred to business stakeholders who process the data on our behalf. Such Organizations are data processors and are
instructed by us to process data in respect of which the Institute is the data controller. Data processors must not use the data for any purpose other than performing their contract with us, and their processing of such data is subject to non-disclosure agreements. We have concluded written data processor agreements with all data processors processing personal data on our behalf.
To the extent that we process personal data outside the Republic of Trinidad and Tobago, such processing will be in compliance with the standard contractual clauses adopted by the data processing platform we engage.
4. REMOVAL OF PERSONAL DATA
Data collected about your use of the Website will be erased at the latest 36 months after you last visited our Website.
Data collected in the course of your interaction with us or in connection with your enquiries and requests for information will be erased when they are no longer needed for the purpose for which they were collected.
As a rule, data will be erased five years after the end of the calendar year in which the
agreement to collect them was concluded. However, the data may be stored for longer periods of time if: i) we have a legitimate interest in storing the data for a longer period of time, ii) it is necessary to establish, submit or defend a legal claim, or iii) such storage is necessary in
order to meet legal requirements.
Data collected when you sign up for our initiatives will be erased when we conclude the initiative. However, data may be stored for a longer period of time if we have a legitimate interest in the prolonged storage of such data.
Data collected in respect of your participation in research and development proposals or projects will normally be archived six years after the formal closure of the project. If a project is not funded or does not materialize, the data will be archived three years after the proposal is formally declared unfunded.
A. Stakeholders’ data access requests
In order to ensure that the manner in which we process your data is transparent, we state your rights in the next section.
B. Right to access
At any time, you have the right to ask us what personal data we have recorded about you, what purpose recording the data serves, what categories of personal data we store and the potential recipients of such data, as well as information about the source of the data.
Under the Freedom of Information Act 26 of 1999, a stakeholder has the right to request data/information held by CARIRI about them and to be given a description of the data together with details of the purposes for which their data is being kept. The stakeholder will make this request in writing, and the data controller will place the request under consideration and respond within the stipulations of the Laws of the Republic of Trinidad and Tobago.
No one Stakeholder can request that data be supplied relating to another Stakeholder unless that third party has consented to the disclosure of their data to the applicant. CARIRI reserves the right to redact data to omit references and, where it is not possible, to redact the data to ensure that the third party’s contract with CARIRI is not compromised.
Where a subsequent or similar request is made soon after a request has just been dealt with, it is at the discretion of CARIRI’s data controller to comply with the second request, with no time limit but a reasonable interval from the date of compliance with the last access request. This will be determined on a case-by-case basis.
You may send an email to mail@cariri.com should you need clarification, and you may be asked to provide documentation that confirms your identity.
C. Right to rectification
You have the right to have your data rectified in case of inaccuracy or incompleteness. If you become aware of errors in the data we have registered about you, please write to us to have the data rectified.
D. Right to erasure
In certain circumstances, you are entitled to have all or some of your personal data erased by us, for instance, if you withdraw your consent and the continued processing has no other legal basis. To the extent that the continued processing of your data is necessary, for instance, in order to enable us to fulfil our legal obligations or in order to establish, submit or defend a legal claim, we are not obliged to erase your personal data.
E. Right to restriction of processing
In certain circumstances, for example, if you believe the information we store about you is incorrect, you have the right to limit the processing of the data.
F. Right to object
At any time, you have the right to object to our processing of your personal data for direct marketing purposes, which includes profiling purposes, to the extent that it is related to such direct marketing.
At any time, you also have the right to object to our processing of data on the grounds of our legitimate interests for reasons with respect to your particular situation.
G. Right to withdraw your consent At any time, you have the right to withdraw your consent to a particular type of processing of your personal data, for instance, in connection with signing up for any of our initiatives.
5. CONTACT DETAILS
If you have any questions about or comments on this Personal Data Protection Policy or wish to exercise one or several of your rights, you can contact us by using the Inquiry form on our Website.
6. CHANGES TO OUR PERSONAL DATA POLICY
If we make changes to our Personal Data Protection Policy, we will notify you of such changes by posting the revised policy on the Website.