CIFOR-ICRAF are committed to protect your personal data and respect your privacy. CIFOR-ICRAF collect and further process personal data based on our Personal Data Protection Policy and pursuant to the respective national laws or regulations on the protection of natural persons with regard to the processing of personal data, as applicable.
This privacy notice explains the reason for the processing of your personal data, the way we collect, handle, and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible data controller with whom you may exercise your rights and of the Data Protection Officer.
This privacy notice applies to all online services managed by Communications, Outreach and Engagement (COE) of CIFOR-ICRAF, irrespective of the domains, systems, platforms or devices (e.g., desktop computers or mobile phones) used to process their services.
Concepts such as “personal data”, “personally identifiable information” or “processing” are used in accordance with the definitions in the ISO/IEC 29184 standard or the EU General Data Protection Regulation (GDPR Article 4), respectively.
The CIFOR-ICRAF Personal Data Protection Policy provides the corporate framework for processing personal data in compliance with any relevant national law or regulation and good practice with regard to personal data protection, where available.
If you would like to exercise your data subject rights, or if you have comments, questions or concerns, or if you would like to submit a complaint regarding the collection and use of your personal data, please feel free to contact the Data Controller of CIFOR-ICRAF:
You may contact the Data Protection Officer of CIFOR-ICRAF (cifor-icraf-dpo@cifor-icraf.org) with regard to issues relating to the processing of your personal data.
In order for CIFOR-ICRAF to ensure an excellent website user experience, we collect the following data on our website, among others:
CIFOR-ICRAF collect and process data from website visits to:
CIFOR-ICRAF shall only collect the personal data for the purposes stated in this privacy notice. We do not collect special categories of personal data.
Your personal data will NOT be used for any automated decision-making, including profiling.
The CIFOR-ICRAF website uses cookies for the pseudonymized measurement of the reach of our website, which are either transferred from our server and third-party servers to the Web browser of a user. A cookie is a small text file that is downloaded onto a “terminal equipment” (e.g., a computer or smartphone) when a user accesses a website. We use session cookies, which are temporary and expire once the Web browser is closed or the session ends, and persistent cookies, which are cookies that remain on the user’s hard drive until they are erased, e.g., through the Web browser settings. The corresponding cookie ID allows the website to recognize the device of the user and store some information about the user’s preferences or past actions between website visits.
CIFOR-ICRAF use cookies on our website for the following purposes:
CIFOR-ICRAF collect two main types of cookies:
(1) Technical necessary cookies:
Name of cookie | Description |
Cookie Manager | Manage the cookies |
(2) Third-party cookies:
Name of cookie | Description |
Google analytics | Web analytics |
Hotjar | Web analytics |
After closing the Web browser, the cookie settings will be automatically removed.
CIFOR-ICRAF use a third-party provide, that is, MailChimp, to manage internal and external newsletters as well as other bulk e-mail messages. We gather statistics around e-mail opening and clicks using industry standard technologies to help us monitor and guide the performance-related improvements.
CIFOR-ICRAF also use additional social media outlets to inform about our work, engage in a dialogue with the general public, and receive feedback:
(1) Facebook:
The Facebook site is managed by CIFOR-ICRAF COE, and available at:
Facebook is used to raise awareness of our research work and initiatives. Active Facebook elements, that is, social plug-ins, are employed on our website.
(2) Twitter:
The Twitter account is managed by CIFOR-ICRAF COE , and available at:
Twitter is used to share information and interact with our stakeholders. Active Twitter elements, that is, social plug-ins, are employed on our website.
(3) Instagram:
The Instagram account is managed by CIFOR-ICRAF COE , and available at:
Instagram is used to communicate our research work to the public. Active Instagram elements, that is, social plug-ins, are employed on our website.
(4) YouTube / Google Maps:
The YouTube channel is managed by CIFOR-ICRAF COE, and available at:
YouTube is used to show video content about our research work and initiatives; Google Maps is used to help showcase the locations of our research work across the globe. Active YouTube and Google (Google Maps) elements, that is, social plug-ins, are employed on our website.
(5) LinkedIn:
The LinkedIn account is managed by CIFOR-ICRAF COE, and available at:
LinkedIn is used to share information and connect with our stakeholders.
(6) SlideShare:
The SlideShare account is managed by CIFOR-ICRAF COE, and available at:
SlideShare is used to share presentations about our research work and initiatives.
(7) Flickr:
The Flickr account is managed by CIFOR-ICRAF COE, and available at:
Flickr is used to share photos of those related to our activities.
CIFOR-ICRAF do not receive your personal data indirectly from these other sources.
Access to your personal data is given to the following persons, without prejudice to a possible transmission to the bodies in charge of a monitoring, inspection or audit task in accordance with relevant laws and regulations:
CIFOR-ICRAF only disclose your personal data to third parties if:
Any third-party service provider contracted to CIFOR-ICRAF that we may share your personal data with are obliged to keep your details securely, and to use them only to fulfill the service they provide you on our behalf.
The processing operations on personal data carried out in this context are necessary and lawful because the processing is necessary for:
Where data are in an electronic form, CIFOR-ICRAF securely stores them on corporate servers. Security requirements ensure that only designated persons have the possibility to access the data kept for the purpose of undertaking the processing operations.
Where data are kept in a paper format, they are stored in the premises of the competent business unit of CIFOR-ICRAF. Access to and within these premises is controlled.
CIFOR-ICRAF will keep your personal data only as long as they were collected for the intended purpose and if they are no legal obligations to maintain them for certain periods of time. In case the personal data cannot be deleted due to certain legal obligations, the processing will be restricted and not used for any other than the initial purpose.
IP numbers stored in server logfiles are collected during website visits, anonymized, and maintained for a maximum of seven (7) days before being destroyed.
CIFOR-ICRAF would like to ensure that you are fully aware of all of your data subject rights. Every user is entitled to the following:
The right to access: You have the right to request CIFOR-ICRAF for copies of your personal data. Depending on the scope of your request, we may charge you a small fee for this service.
The right to rectification: You have the right to request that CIFOR-ICRAF correct any information you believe is incorrect. You also have the right to request CIFOR-ICRAF to complete information you believe is incomplete.
The right to erasure: You have the right to request that CIFOR-ICRAF erase your personal data under certain conditions.
The right to restrict processing: You have the right to request that CIFOR-ICRAF restrict the processing of your personal data, under certain conditions.
The right to object to processing: You have the right to object to CIFOR-ICRAF processing your personal data, under certain conditions.
The right to data portability: You have the right to request that CIFOR-ICRAF transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you exercise any of your data subject rights and make a request, CIFOR-ICRAF have one (1) month to respond to you.
CIFOR-ICRAF keep their privacy notice under regular review and reserve the right to modify it. This also includes modifications based on changes in our online services as well as the technologies utilized. Any modifications are placed on this Web page. We recommend consulting this Web page on a regular basis. This privacy notices was last updated on 11 July 2023.
Should you wish to report a complaint or if you feel that CIFOR-ICRAF have not addressed your concern in a satisfactory manner, you may contact the competent supervisory authority.