Welcome to the AccessRC platform. This digital platform provides an application (“AccessRC”
and “the app”) by which individuals can create user accounts, learn about services offered by
the Red Cross or Red Crescent society in the country they are in, apply for services, receive
services, and communicate with the Red Cross/Red Crescent society.
Your use of the AccessRC platform and app constitutes your agreement to these terms of use. The IFRC (International Federation of Red Cross and Red Crescent Societies) reserves the right to amend or change these Conditions at any time, at its sole discretion. You should consult them regularly to keep yourself informed of any changes.
Privacy Policy
The Privacy Policy describes what information we collect in the "AccessRC" platform and app and how we make use of this information. It states the set of principles used to ensure that personal data is collected, used, and protected in a way that considers individuals' privacy and any risks that may come to them from not adequately safeguarding their data. Please read this policy fully.
The information presented in this Privacy Policy only applies to the AccessRC platform/app. Information on personal data processing related to specific programs for which you may apply will may be found in separate Privacy Policies accompanying those programs.
2
What is our legitimate basis to process your personal data?
We only process your personal data based on one or more of the following bases:
- Your vital interest - Humanitarian programs are intended to help you in an existential crisis that threatens your physical or mental integrity, health, dignity, or security.
- The public interest - We act under a humanitarian mandate that is recognized to be in the general public interest.
- Our legitimate interest - Certain processing activities are in our legitimate interest for example, they may serve administrative, organizational and for cooperation purposes that are important for us to ensure smooth and efficient processing. Where this is the case, we carefully balance our legitimate interest with your interests and rights to privacy.
- Consent - For the provision of certain non-essential services or to allow for voluntary continuation of, or referral for, services, we may rely on consent as the legal basis.
3
What kinds of information do we collect?
When you use AccessRC, we collect personal and other information:
- Personal Information: We collect personal data for you and for each member in your household. This data includes your name, date of birth, gender, facial image, identity document attributes (including but not limited to numbers, photos, place and country of issuance), physical location, IP address, mobile number, and email address. Where your profile closely matches another profile, additional data may be collected and processed to verify that your profile is unique.
- Device and Log Data: We collect device ID, device type, mobile operating system, crash data, device event information, access dates & time to help us understand how to fix problems and improve the service.
- Geolocation Info We collect IP address, mobile GPS, and other information to help establish what Red Cross and Red Crescent society can provide services to you.
7
Data retention, inactive accounts, and deletion
The IFRC retains user data and transaction data as long as necessary for the purposes described above in order to provide our services and to comply with legal, financial, and reporting obligations regarding the humanitarian services we provide. The length of time that data is retained is based on applicable requirements, for fraud prevention, and safety and security purposes, and for other issues related to the user's account such as an active or unresolved claim or dispute.
A. Inactive Accounts
- If you have not logged into your account for more than 1 year, it will automatically be deactivated and archived (see Section VII(B)(2)).
- If your account has been deactivated and you want to request services, you must register again and verify your identity again.
- If your account is deactivated, your data is still retained and may be used for internal analyses, such as to measure impact, and to comply with relevant obligations.
B. Data Deletion
You may request the deletion of your user account at any time. IFRC will retain certain user data for reasons stated in this policy (for instance, we may retain this data in order to: maintain a record of deletion requests to ensure that no further communications are made; demonstrate compliance with internal policies or contractual commitments; monitor irregular account creation, access or deletion activity.
- You may request the deletion of your user account within the AccessRC at any time by going to the Settings > Login & Security menus in the mobile app.
- When you initiate the deletion of your user account, the IFRC takes the following actions:
- The user account immediately is deactivated,
- Any active applications for assistance are cancelled, and
- Any active financial assistance payments are cancelled.
- The IFRC deletes the data associated with your account in accordance with the following requirements:
- If you created an account but haven’t applied for cash assistance, your data will be deleted in 30 days after you initiate deletion.
- If you have applied and been approved or rejected for cash assistance, your data is retained for up to 1 year after you initiate deletion.
- If your account is associated with fraudulent activity – for example, but not limited to: manipulating data to gain access to a program for which you are not eligible, or misusing another individual’s identity data, your data is retained 3 years after you initiate deletion.
- In all cases, financial transaction data, non-personal (anonymized) program data, GPS data, and metadata are retained for up to 8 years after you initiate deletion for reporting purposes.