플랫폼 개인정보 처리 고지
How the Global Centre for Risk and Innovation (GCRI Canada) handles personal information on the 보고서 sites: what is collected and why, the legal bases, who receives it, how long it is kept, the rights you have under Canadian, Quebec, EU, UK and US law where they apply, and how to exercise them.
- 버전1.0
- 시행일2026년 10월 20일
- 최종 업데이트2026년 10월 20일
- 발행자글로벌 리스크 혁신 센터(Global Centre for Risk and Innovation, GCRI Canada)
- 문의문의 양식
Reports · GCRI Canada, publisher of record
문서 개요.
- Adds the platform processing to the Privacy Policy of GCRI Canada.
- Only what is needed is collected; nothing is sold or used for advertising or profiling.
- Rights under Canadian, Quebec, Swiss, EU, UK and US state law are honoured where they apply.
- Requests go to 문의 양식.
버전 1.0, 2026년 10월 20일 시행.
| 기록 | 값 |
|---|---|
| 문서 | 플랫폼 개인정보 처리 고지 |
| 버전 | 1.0 |
| 시행일 | 2026년 10월 20일 |
| 최종 업데이트 | 2026년 10월 20일 |
| 발행자 | 글로벌 리스크 혁신 센터(Global Centre for Risk and Innovation, GCRI Canada) |
| 문의 | 문의 양식 |
책임자.
| 항목 | 세부 사항 |
|---|---|
| Controller | The Global Centre for Risk and Innovation (GCRI Canada), a Canadian not-for-profit organisation with its registered office in Ontario |
| Registered address | 411 Duplex Ave, Toronto, ON M4R 1V2, Canada |
| 개인정보 보호책임자 | Saeed Valadbaygi, Interim Privacy Officer, GCRI Canada, 문의 양식 |
| Representatives in the European Union and the United Kingdom | None appointed yet under Article 27 of the GDPR or the UK GDPR; one is being appointed. Until then, write to the Privacy Officer at 문의 양식 |
| Representative in Switzerland | A representative in Switzerland, reachable through the privacy request address above |
- 1.1 This notice supplements the main Privacy Policy of GCRI Canada, which governs the handling of personal information across all websites of GCRI Canada. It describes what the Reports sites process in addition, and the rights below apply to both. For a matter both documents address, the main Privacy Policy governs, unless this notice gives you more protection.
- 1.2 The Privacy Officer is an accountability designation under Canadian law; no data protection officer under Article 37 GDPR is designated.
- 1.3 GCRI Canada is the controller of the personal information described in this Policy: it decides why and how the information is handled. Hosting, email and similar providers are processors acting on its instructions. No joint controllership is established with any other institution for the Site.
- 1.4 GCRI Canada (The Global Centre for Risk and Innovation) is the lead contracting organisation for the Nexus Consortium and its Foundry. It is the contracting party for the Nexus Consortium’s Foundry accounts, services and consortium participation in every country and region, and runs the service under a strict not-for-profit mandate. Another organisation, such as a national consortium host or a commercial licensor, is a party only where a separately executed agreement names it.
- 1.5 GCRI Canada leads the public-good Nexus Consortium as Lead Institution, Consortium Secretariat and lead contracting organisation. The Global Risks Forum (GRF) and the Global Risks Alliance (GRA) retain independent institutional mandates as consortium stewards. Technology, infrastructure and service providers act at arm’s length and have no control over institutional governance, research, publications, national priorities or customer, sovereign and community data.
- 1.6 The Reports sites appear under the addresses of several institutions. GCRI Canada is the publisher of record and controller for every Reports site; the rest of each institution’s site has its own publisher and its own notice.
What is collected and why.
| 정보 | 목적 | Legal basis where the GDPR or UK GDPR applies |
|---|---|---|
| What you write to an address of the Site: name, email address, organisation, role, country and your message | Answering you and keeping a record of the exchange | Steps you ask for before an agreement, or the legitimate interest in answering correspondence and keeping an accurate record |
| Contributions you send: the material, the name you give for credit and, if you choose, your ORCID iD | Reviewing the contribution and, if it is accepted, publishing it with credit | Your consent to publication with credit, which you give when you contribute |
| Comments, consultation responses and nominations: the text, the name or organisation you choose and, for a nomination, the nominee’s details given with the nominee’s knowledge | Considering the response or nomination, publishing it where you agree, and recording the decision | Your consent to publication; for the assessment of a nomination, the legitimate interest in running a fair and recorded process |
| Registration for working groups, meetings and events: name, organisation, role, country, contact address and any access need you choose to share; images and voice in sessions announced as recorded | Organising the activity, meeting access needs, recording declared conflicts of interest and publishing recordings announced in advance | Steps you ask for, the legitimate interest in running the activity, and your consent for access needs and for appearing in recordings |
| Correction, complaint, conduct or security reports | Handling the report and recording the outcome | Legitimate interest, or a legal obligation where one applies |
| Technical data the web server processes, such as IP address, browser type, page requested and time | Delivering pages and protecting the Site against abuse | Legitimate interest in a secure, working site |
| Choices stored in your browser, such as the colour theme | Remembering a setting you asked for | Strictly necessary for a service you request; see the Cookie Policy |
Please do not send health, security-sensitive or other special-category information, or personal information about other people, in a first message. The pages of the Site have no user accounts and ask for no password; a feature that needs an account has its own notice. The Site does not use personal information for advertising, profiling or automated decisions.
Sources of information.
- 3.1 Personal information comes from you, when you write to the Site or contribute, and from your browser, when it requests a page. The Site does not buy personal information or combine it with data from other sources.
Consent and choices.
- 4.1 Where Canadian law applies, personal information is collected with your knowledge and consent for the purposes stated when it is collected, and is used only for those purposes unless you agree otherwise or the law permits or requires it.
- 4.2 You choose what to send. A contribution can be credited by name, with an ORCID iD if you wish, and no account is needed. You may withdraw consent at any time; the consequences, such as an enquiry that can no longer be answered, are explained when you do.
Who receives it.
- 5.1 GCRI Canada does not sell personal information or share it for advertising.
- 5.2 Providers that host the Site and its mailboxes process personal information on GCRI Canada’s instructions under contract, for no purpose of their own. The providers and their locations are given on request to 문의 양식.
- 5.3 Services that maps and tools call from your browser, such as satellite imagery and open data services, receive your IP address and browser details directly from your browser and handle them under their own terms. They are listed in the 쿠키 정책.
- 5.4 Personal information is otherwise disclosed only where the law requires it, or to protect the rights, safety or security of people or the Site.
- 5.5 A contribution accepted for publication becomes public with the credit you chose. Material you send is never published with your contact details.
Where it is processed and international transfers.
- 6.1 Personal information may be processed outside the country where you live, including in Canada, the United States and the other countries in which the publisher’s providers operate.
- 6.2 Where the GDPR, the UK GDPR or the Swiss Act applies, a transfer to a country without an adequacy decision uses a safeguard the law recognises, such as standard contractual clauses. Information processed in another country is subject to its laws, including lawful access by its authorities.
How long it is kept.
- 7.1 Personal information is kept only as long as needed for the purpose for which it was collected and as the law requires, then deleted or anonymised.
- 7.2 Server and security logs are kept for a short operational period and longer only while a security incident is investigated. Correspondence is kept for as long as needed to answer it and to keep an accurate record of the exchange, and then deleted or anonymised. Records of rights requests, complaints and legal notices are kept for the period in which a claim could arise.
- 7.3 Event registrations are kept until the activity and its follow-up are complete; recordings are kept for the period stated in the notice of each recorded event.
- 7.4 Published contributions and the credit attached to them stay on the public record, because open publication is permanent; a correction or a withdrawal notice is added where needed.
Security.
- 8.1 GCRI Canada applies administrative, technical and physical safeguards appropriate to the sensitivity of the information: encrypted connections, restricted access to the 시스템 that publish the Site, and processors bound by contract. No system is free of risk.
- 8.2 Where a breach creates a real risk of significant harm, or a risk to rights and freedoms, affected people and the competent authorities are notified as the applicable law requires, and the breach is recorded.
Your rights.
| Where you are | What you can ask |
|---|---|
| Canada (PIPEDA and provincial law) | You may ask for access to the personal information GCRI Canada holds about you, ask for it to be corrected, challenge its accuracy, and withdraw consent, subject to legal and contractual limits. You may complain to the Office of the Privacy Commissioner of Canada where PIPEDA applies, and the provincial privacy authority where substantially similar provincial law applies (the Commission d’accès à l’information du Québec, and the Information and Privacy Commissioners of Alberta and British Columbia). |
| Quebec (Law 25) | Residents of Quebec may also ask for their personal information in a structured, commonly used technological format, ask that dissemination of their information cease or that a hyperlink be de-indexed where the law allows, and complain to the Commission d’accès à l’information du Québec. The Privacy Officer named above handles these requests. |
| European Union and United Kingdom (GDPR, UK GDPR) | Where the GDPR or the UK GDPR applies to the processing, you may ask for access, rectification, erasure, restriction, objection and portability, withdraw consent at any time without affecting earlier processing, and complain to the data protection authority where you live or work. No representative under Article 27 of the GDPR or the UK GDPR has been appointed yet; one is being appointed. Until then, write to GCRI Canada directly at 문의 양식, and you may complain to your supervisory authority at any time. |
| California and other US states | GCRI Canada does not sell or share personal information as those terms are used in the California Consumer Privacy Act, and does not use it for targeted advertising or profiling. Where the CCPA or another US state privacy law applies, GCRI Canada honours the rights it provides, such as to know, correct, delete and appeal a refusal, and treats a Global Privacy Control signal as a request to opt out of any sale or sharing. |
Send a request to 문의 양식 and say which request you are making. Your identity may be verified before a request is acted on, and you are told of any legal reason a request cannot be met. The acknowledgement gives a reference and names the next step.
Complaints.
- 10.1 Please raise a concern with the publisher first, at 문의 양식; it will answer in writing and say what it has done.
- 10.2 You may always complain to a data protection authority. You may complain to the Office of the Privacy Commissioner of Canada where PIPEDA applies, and the provincial privacy authority where substantially similar provincial law applies (the Commission d’accès à l’information du Québec, and the Information and Privacy Commissioners of Alberta and British Columbia). Residents of the European Union and the United Kingdom may complain to the authority where they live or work, and residents of other places to the authority that applies the law there.
Children.
- 11.1 The Site is not directed to children under 16 and does not knowingly collect their personal information. Information found to have been sent by a child is deleted. A parent or guardian who believes a child has written to the Site may ask for its deletion at 문의 양식.
Signals, cookies and changes.
- 12.1 The Site does not track you across other sites, so a Do Not Track signal changes nothing about how it operates. A Global Privacy Control signal is treated as described above.
- 12.2 Cookies and browser storage are explained in the 쿠키 정책.
- 12.3 Changes to this Policy are published on this page with a new version and effective date.
이 문서의 상태.
채택 전에 법률 자문의 검토를 거치도록 준비되어 있습니다.
질문과 답변.
Will my enquiry be added to a mailing list?
Can I contribute without giving my name?
이 페이지에서 증거를 기여하십시오.
Reports is the Consortium’s quarterly publication, written by six desks. This page sits with the GCRI 시스템 증거 담당 부서에 속합니다. 이 주제에 대해 아시는 내용은 다음 판에서 증거, 사례 또는 정정이 될 수 있으며, 귀하의 이름으로 표기되고 직접 작성한 저작물인 경우 CC BY 4.0으로 발행됩니다. 잘못된 부서에 보내더라도 거절되지 않고 전달됩니다.
- 이메일게이트웨이 GW-GCRI이 페이지에서 보내기증거, 정정, 사례, 방법, 검토, 번역 또는 프로필 입력 자료. 이 페이지의 태그가 붙어 도착하므로, 이를 담당하는 편집자가 받게 됩니다.
- Zenodo개방형 예치기탁하고 커뮤니티에 제출하기ORCID iD로 Zenodo에 직접 기록을 게시한 뒤, 그곳의 Reports 커뮤니티에 제출하십시오. 큐레이터가 검토하며, DOI는 귀하의 것으로 남습니다.
- 보고서GCRI어느 담당 부서가 귀하의 내용을 받는지 확인하기안내표를 열면 기여 페이지로 연결되며, 무엇을 가지고 있는지, 어느 담당 부서가 받는지, 각 기여를 어떻게 검토하고 표기하는지, 그리고 라이선스를 확인할 수 있습니다.
개인정보, 민감한 인프라 세부 정보, 공유할 권리가 없는 자료는 절대 보내지 마십시오. 기여물은 사용 전에 검토됩니다. 기여물을 보낸다고 해서 저작자 지위나 편집 권한이 부여되지 않으며, 후원으로 조사 결과를 얻을 수 없습니다.
Legal documents of Reports.
법률 문서.
이 사이트의 지도, 데이터와 그림은 맥락과 일반 정보로 제시됩니다. 조언, 예보 또는 경보가 아니며, 정보의 한계는 면책 고지와 데이터 고지에 나와 있습니다.
CC BY 4.0 Free to read. Text and figures: CC BY 4.0. Data: CC0 1.0. Authors keep copyright. Published by GCRI Canada.
