Privacy Policy
Effective Date: July 1, 2025
Global Humanitarian Disaster Consulting Institute (GHDCI)
(formerly Centre de Recherche JURISCONSULTE – CRJ)
🌐 www.ghdci.org
1. Introduction
The Global Humanitarian Disaster Consulting Institute (GHDCI), formerly the Centre de Recherche JURISCONSULTE (CRJ), is committed to safeguarding the privacy, dignity, and personal data of all persons with whom we interact — including visitors, beneficiaries, trainees, partners, donors, researchers, consultants, and institutional counterparts.
This Privacy Policy explains how GHDCI collects, uses, stores, and protects personal information in accordance with the EU General Data Protection Regulation (GDPR), the U.S. and D.R. Congo data-protection frameworks, and international humanitarian accountability standards.
Because our work often occurs in disaster, emergency, or post-conflict environments, GHDCI applies “do-no-harm” and data-protection-in-crisis principles to ensure that the collection and use of information never expose individuals or communities to heightened risk.
2. Who We Are
GHDCI is a research, legal, and capacity-building institute headquartered in Kinshasa, with operational presence in Kinshasa, DRC, and activities throughout Sub-Saharan Africa and other crisis-affected regions.
Our statutory objectives include —
Strengthening disaster-risk governance and emergency-response systems;
Providing technical, legal, and policy support on humanitarian coordination, accountability, and resilience;
Conducting research on International Humanitarian Law (IHL), International Human Rights Law (IHRL), and Disaster Law;
Delivering training and advisory services on Sphere Standards, CHS compliance, and PSEAH; and
Promoting evidence-based, rights-driven recovery and sustainable development.
📍 Data Protection Officer – GHDCI/
Avenue des Coteaux No. 5255, Kinshasa-Gombe, DRC
📧 Email: contact@ghdci.org
3. What Personal Data We Collect
We collect only the data necessary for lawful, humanitarian, and programmatic purposes, including:
Identification data: name, title, gender, nationality, organization;
Contact information: email, phone, postal address;
Professional data: role, institutional affiliation, area of expertise;
Program and project data: training records, participant lists, beneficiary feedback, consent forms;
Legal or research documentation: when essential to provide legal or advisory services;
Digital usage data: IP address, browser type, cookies, analytics logs.
Sensitive or protected data — such as health, protection, or displacement information — is collected only when strictly required for humanitarian assistance and under heightened safeguards.
4. How We Collect Your Data
Data may be collected when you:
Visit our website and accept cookies;
-
Complete online or physical registration forms;
-
Subscribe to mailing lists or training platforms;
-
Participate in GHDCI or partner programs, research, or field missions;
-
Communicate via email, phone, or social media;
-
Sign partnership, service, or consulting agreements with GHDCI.
-
In disaster or field operations, information may also be obtained through humanitarian assessments, surveys, or coordination meetings, always following consent and confidentiality principles.
5. Why We Collect and Use Personal Data
We process personal data for legitimate humanitarian, legal, and administrative reasons, including to:
-
Deliver consulting, legal, and training services;
-
Register and manage participation in capacity-building programs;
-
Conduct needs assessments, monitoring, evaluation, and research;
-
Manage contracts, partnerships, and donor reporting;
-
Communicate during preparedness, response, and recovery activities;
-
Ensure accountability to affected populations and compliance with PSEAH obligations;
-
Fulfill legal, regulatory, and auditing requirements.
-
6. Legal Basis for Processing
Processing relies on one or more lawful bases:
-
Consent (for newsletters, voluntary data sharing, surveys);
-
Contractual necessity (for service or partnership agreements);
-
Legitimate interest (to ensure operational efficiency, safety, and fraud prevention);
-
Legal obligation (compliance with humanitarian, labor, or financial laws);
-
Vital interests (to protect life or physical integrity during emergencies or disasters).
7. Data Sharing and Disclosure
GHDCI does not sell or rent personal data. We may share data only with:
-
Authorized GHDCI staff, consultants, or board members;
-
Donors, auditors, or partners bound by confidentiality agreements;
-
Legal authorities when required by law or court order;
-
Verified third-party service providers (e.g., secure IT or cloud hosting).
All recipients must handle data in accordance with GDPR, ISO 27001, and humanitarian data-protection standards (ICRC/ICVA guidelines).
8. International Data Transfers
Because GHDCI works across multiple jurisdictions and crisis contexts, certain data may be transferred internationally.
Whenever data leave the country of origin, GHDCI applies appropriate safeguards — including EU-approved Standard Contractual Clauses, encryption, and partner-level Data Sharing Agreements consistent with GDPR Articles 44–49.
9. Data Security
We apply robust technical and organizational controls, such as:
-
Encryption, multi-factor authentication, and firewalls;
-
Secure servers with restricted role-based access;
-
Staff training on data protection and humanitarian confidentiality;
-
Periodic audits and risk assessments in line with ISO 31000 and 22320 standards;
-
Incident-response and breach-notification protocols.
10. Data Retention
Personal data are retained only as long as necessary for the purposes stated or as required by law, donor, or audit obligations.
When data are no longer needed, they are securely deleted, anonymized, or archived in encrypted form for research or compliance record-keeping.
11. Your Rights
-
Individuals have the right to:
-
Access and receive a copy of their personal data;
-
Rectify inaccurate or incomplete information;
-
Withdraw consent at any time without affecting lawfulness of prior processing;
-
Request erasure (“right to be forgotten”);
-
Restrict or object to processing under legitimate-interest grounds;
-
Lodge a complaint with a national data-protection authority.
Requests should be directed to the Data Protection Officer (DPO) via contact@crjurisconsulte.org
.
12. Cookies and Analytics
Our website uses cookies solely to enhance functionality and analyze aggregate usage.
Users may manage cookie preferences through browser settings.
Where third-party analytics tools (e.g., Google Analytics) are used, data are anonymized and processed under standard contractual safeguards.
13. Changes to This Policy
GHDCI may revise this Privacy Policy periodically to reflect updates in law, technology, or humanitarian operations.
Any modification will be posted on our website with a revised effective date and, where substantial, notified to stakeholders directly.
14. Contact Us
For questions, concerns, or to exercise your data-protection rights:
Global Humanitarian Disaster Consulting Institute (GHDCI)
Avenue des Coteaux No. 5255, Kinshasa-Gombe, DRC
📧 Email: contact@ghdci.org
🌐 Website: www.ghdci.org