Copyrights © 2023 Coalition for Climate Resilient Investment.
Coalition for Climate Resilient Investment – Privacy Notice
Last updated: September 2023
(1) Who we are
The Coalition for Climate Resilient Investment is a collaboration between the Governments of the UK and Jamaica, Willis Towers Watson, the Global Commission on Adaptation, and the World Economic Forum, (“Coalition,” “CCRI,” “we,” “us,” or “our”) and is the owner of this website (the “Website”). We are committed to privacy and to transparency in our information practices.
(2) Scope of this Privacy Notice
This Privacy Notice describes, generally, how the Coalition, handles and processes your personal information when you visit and interact with the Website. The Coalition is a data controller or business under applicable data protection laws. Please refer to the Contact Us section to find out how to exercise any of your rights or if you have any questions about your personal data.
In this Privacy Notice, our use of the term “personal information” includes other similar terms under applicable privacy laws—such as “personal data” and “personally identifiable information.” In general, personal information includes any information that identifies, relates to, describes, or is reasonably capable of being associated, linked or linkable with a particular individual.
(3) Cookies and other technologies
We use cookies and other technologies on this Website. You can find out more about the cookies we use and why by viewing our Cookie Policy. Our Cookie Policy should be read together with this Privacy Notice.
(4) Changes to our Privacy Notice
We may change this Privacy Notice from time to time. Please take a look at the “Last Revised” legend at the top of this page to see when this Privacy Notice was last revised. If we make significant changes to this Privacy Notice, we will notify you of changes when you next visit. We encourage you to review this Privacy Notice whenever you return to our Website.
(5) What information do we collect about you?
Categories of sources of personal information. The precise collection, use, and disclosure of personal information will vary depending upon the circumstances and nature of our interactions or relationship with you, but the following sections provide an overview of our practices in this regard. We do not direct or services toward nor knowingly process personal data belonging to individuals 16 years or younger. We may collect personal information directly from you, as well as automatically related to your use of our Website, as well as from third parties. For example, we collect personal information:
Categories of personal information we collect. We may collect the following categories of personal information (subject to applicable legal requirements and restrictions):
Legal bases for processing your personal information
We must have a legal basis to process your personal information. In most cases the legal basis will be one of the following:
(6) How we use your personal information
We use your personal information to:
(7) How we share your personal information
The Coalition’s purpose is to transform infrastructure investment by integrating climate risks into decision-making, driving a shift toward a more climate resilient economy for all countries, including the most vulnerable. Because of the membership of the Coalition your personal information may be shared within our members, which may include subsidiaries and affiliates of corporate organisations.
(8) Categories of personal information disclosed for a business purpose, purposes for which we disclose your personal information, categories of personal information we sell and categories of third parties to whom we disclose personal Information
Categories of personal information disclosed
Please review the descriptions of the categories of personal information under the Personal Information Collected section above, for further descriptions of each category of personal information.
Categories of personal information disclosed for a business purpose.
In general, we may disclose the following categories of personal information in support of our business purposes identified below:
We have disclosed the categories of personal information listed above to the following categories of third parties in the preceding twelve months: Members of the Coalition and their affiliates, subsidiaries, and successors in interest and our service providers.
Categories of personal information we sell or share
The CCPA defines a “sale” as disclosing or making available to a third-party personal information in exchange for monetary or other valuable consideration, and it defines “share” in pertinent part as disclosing personal information to a third party for cross-context behavioral advertising. We do not “sell” or “share” personal information as defined by the CCPA.
Purposes for which we disclose personal information and disclosure to third parties
The Coalition may disclose your personal information to any of its members for the uses and purposes set out above. We may also disclose your personal information for the following reasons:
(9) Opt-Out Preference Signals and “Do-Not-Track” Signals
If your browser enables the Global Privacy Control (GPC) when visiting our Website, our Website will automatically opt you out of any tracking cookies that constitute a “sale” where required by applicable privacy law. For more information about the GPC and to learn how to implement it on your browser, please click here. Please note, our Website does not recognize or respond to any signal which your browser might transmit through its so-called “Do Not Track” (DNT) feature. If you wish to disable cookies on our Websites, you should not rely on DNT browser settings.
(10) Security and retention
CCRI stores personal information as needed to accomplish the purposes identified in this Notice and to meet legal requirements, including legal and compliance requirements regarding records retention, resolving disputes, and enforcing our agreements. This means that we may be required to maintain your information, for example, to: (1) comply with our legal or regulatory compliance needs (e.g., maintaining records of transactions you have made with us); (2) to exercise, establish or defend legal claims; and/or (3) to protect against fraudulent or abusive activity on our services and systems. For these and possibly other reasons, we may be unable to delete personal information upon request of an individual in certain cases.
We may retain different categories of information for different periods of time for the instances stated above. However, it our policy as an organization that when personal information is no longer needed or after legal authority to retain it has expired, personal information will be destroyed in accordance with applicable law and pursuant to procedures established in relation to the relevant services, systems, or processes. Retention periods for records maintained by CCRI, including those containing personal data are established based upon business need, statutory and regulatory record keeping requirements in the geographies where we do business, and legal obligations. If you have any further questions about our handling of personal information, please contact us at privacy@resilientinvestment.org.
(11) Overseas transfers of personal information
The Coalition is a global initiative and the personal information that we collect from you may be transferred to, accessed, processed or stored in, and subject to requests from law enforcement agencies, in jurisdictions outside of your home jurisdiction, including the Bermuda, the European Union, India, Quebec, the United States, and other jurisdictions, in which we or our service providers operate.. Some of these jurisdictions, including the United States, may not provide equivalent levels of data protection as your home jurisdiction. We have established safeguards to protect personal information that is transferred to other countries, including appropriate contractual protections. For more information on the appropriate safeguards in place, please contact us using the details below.
(12) Your rights
Access, amendment and deletion.
You may request to review, make amendments, have deleted or otherwise exercise your rights, under applicable privacy laws, over your personal information that we hold, subject to certain limitations under applicable law. Except for California residents who should use the contact means described below in the “California Residents” section, you may submit a request to us related to your personal information:
We take steps in accordance with applicable legislation to keep your personal information accurate, complete and up-to-date. If you would like to review, correct, update, suppress, or restrict the processing of your personal information or request a copy of personal information about you, you may contact us by sending us an email at privacy@resilientinvestment.org or sending your request by postal mail to the address provided in the “Contact & Comments” section below.
In your request, please make clear what personal information you would like to have changed, whether you would like to have your personal information suppressed from our database or otherwise let us know what limitations you would like to put on our use of your personal information. For your protection, we may only implement requests with respect to the personal information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.
Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.
To exercise your rights please use any of the details set out above or in the Contact and Comments section below. Subject to legal and other permissible considerations, we will make reasonable efforts to honour your request promptly or inform you if we require further information in order to fulfil your request.
We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
(13) Contacts & Comments
If you have any questions or comments regarding this Privacy Notice, please contact us by email at privacy@resilientinvestment.org, or write to us at 51 Lime Street, London, EC3M 7DQ, United Kingdom. If you reside in Canada, you may contact us by mail using the following information: Willis Towers Watson Canada, Inc., Privacy Officer, 130 King Street W, Exchange Tower, Suite 1500, P.O. Box 424, Toronto, ON M5X 1E3, or by email at privacy@willistowerswatson.com or telephone at +1.416.960.2700.
(14) Additional Information for Residents in Certain Jurisdictions
The Coalition is committed to respecting the privacy rights of individuals under all privacy laws applicable to us. Some privacy laws require that we provide specific information about individual rights to applicable consumers, which we have set forth at the end of this Notice:
A.California Residents
In this section, we provide information for California residents, as required under California privacy laws, including the California Consumer Privacy Act (“CCPA”), which requires that we provide California residents certain specific information about how handle their personal information, whether collected online or offline. This section does not address or apply to our handling of publicly available information made lawfully available by state or federal governments.
This section does not address or apply to our handling of:
Rights of California residents. California law grants California residents, certain rights and imposes restrictions on particular business practices as set forth below.
Do-Not-Sell/Do Not Share: California residents have the right to opt-out of the “sale” and the “sharing” of their personal information. The CCPA defines a “sale” as disclosing or making available to a third-party personal information in exchange for monetary or other valuable consideration, and it defines “share” in pertinent part as disclosing personal information to a third party for cross-context behavioral advertising. We do not “sell” or “share” personal information about California residents California residents have the right to opt-out of our sale of their personal information. The Website does not sell any personal information and therefore is not required to provide means to exercise an these opt-out rights.
Limit the Use of Sensitive Personal Information: California residents have the right in certain instances to request that we limit the use and sharing of their sensitive personal information. The CCPA defines “sensitive personal information” to include, among other things, your: social security, driver’s license, state identification card, or passport numbers; account log-in, financial account, debit card, or credit card numbers in combination with any required security or access code, password, or credentials allowing access to an account; racial or ethnic origin, religious or philosophical beliefs, or union membership; genetic data; and biometric information (including physiological, biological, or behavioural characteristics). We do not collect Sensitive Personal Information under the CCPA and therefore are not required to provide a means to exercise this right.
California residents may make a Request to Know up to twice every 12 months. We will respond to verifiable requests received from California residents as required by law. The instructions for submitting a verifiable Request to Know are described in the “Submitting Requests” section below.
Submitting Requests. Requests to Know, and Requests to Delete may be submitted:
We will use the following process to verify Requests to Know and Requests to Delete: We will acknowledge receipt of you Consumer Request, verify it using processes required by law, then process and respond to your request as required by law. To verify such requests, we may ask you to provide the following information:
We will respond to verifiable requests received from California residents as required by law. For more information about our privacy practices, you may contact us as set forth in the Contact and Comments section above.
Consumer Requests Received in 2022. In calendar year 2022, we received and responded to consumer requests under the CCPA as set forth in the table below:
Request Type | Number of Requests Received | Number of Requests With Which We Complied (in whole or in part) | Number of Requests Denied* | Average Response Time (Number of Days) |
Requests to Know | 0 | 0 | 0 | N/A |
Requests to Delete | 0 | 0 | 0 | N/A |
Requests to Opt-Out of the Sale of Personal Information | 0 | 0 | 0 | N/A |
B. European Union / European Economic Area and the United Kingdom
Residents of the European Union (EU) and the European Economic Area (EEA) and the United Kingdom (UK) have the following rights, under the GDPR, regarding their personal information:
We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for:
We can continue to use your personal information following a request for restriction, where:
C. Brazil
The following information applies to personal data which we process from any individuals that is related to Brazil’s territory under the National Data Protection Law (LGPD):