UNHCR Asset Disposal Platform (ADP) mobile application privacy notice
UNHCR Asset Disposal Platform (ADP) mobile application privacy notice
Who we are
The Office of the United Nations High Commissioner for Refugees (“UNHCR”) is a global organization dedicated to saving lives, protecting rights, and building a better future for refugees, forcibly displaced communities, and stateless people. Together with partners and communities, UNHCR works to ensure that everybody has the right to seek asylum and find safe refuge in another country. UNHCR also strives to secure lasting solutions.
Legal framework
UNHCR enjoys a special legal status in accordance with the Convention on the Privileges and Immunities of the United Nations of 1946. This convention grants UNHCR the privileges and immunities necessary to perform its functions independently and without interference.
Accordingly, UNHCR has established a comprehensive framework for the collection, use, and sharing of personal data, ensuring the protection of the dignity and fundamental rights of data subjects. This framework consists of the UNHCR General Policy on Data Protection and Privacy (2022).
This privacy notice explains how UNHCR uses the personal data collected from you through its Asset Disposal Platform (ADP) and your rights relating to the use of your personal data.
Why are we processing your personal data?
We process your personal data to:
- authenticate authorized users of the ADP Mobile Application
- enable users to capture and upload photographs of UNHCR assets designated for disposal
- support UNHCR’s internal asset disposal and auction processes
- ensure traceability, accountability, and integrity of records within the Asset Disposal Platform (ADP).
Legal basis
The processing is carried out under UNHCR’s mandate, as it is necessary for operational purposes related to asset management, audit, and accountability.
What personal data do we collect and how long do we keep it?
We process the following types of personal data:
- Photographs of UNHCR assets designated for disposal.
Note: If photographs include identifiable individuals or personal identifiers (e.g., name tags, serial numbers linked to a person), these are considered personal data. - Technical metadata: date, and time, of image capture.
- Limited professional contact information (name, email) for authentication and audit purposes.
- Auction and lot reference identifiers.
Retention
Your personal data will be retained by UNHCR only for as long as necessary in connection with the activities described above. Typically, this means for the duration of the disposal process and up to five years for audit and accountability purposes. UNHCR may retain your personal data for longer only for compatible purposes, such as archiving, statistical or scientific research, or when necessary to demonstrate UNHCR’s accountability. Your personal data will be treated with the utmost confidentiality. Access to your data will be restricted to authorized personnel who need to process it to achieve the purposes described above.
Security and processing tools
The ADP Mobile Application is developed by Accenture for UNHCR and published on iOS and Android platforms.
- Data uploaded through the Application is stored within UNHCR-managed systems.
- Access to the ADP Mobile Application is managed through UNHCR’s existing authentication and authorization systems. The application receives only the basic professional information needed to verify your identity (such as name, email and password) and does not collect or store passwords.
- Access is restricted to authorized personnel based on assigned roles.
- UNHCR applies appropriate technical and organizational safeguards, including encryption of data in transit and at rest, role-based access controls, and multi-factor authentication for authorized users.
For more information on Accenture’s privacy practices, please refer to Accenture’s privacy policy.
Data sharing
Information processed through the ADP Mobile Application is not shared with third parties outside UNHCR. Internal access is limited to operational, audit, and compliance purposes in line with UNHCR policies. Photographs of assets may be used within UNHCR’s asset disposal and auction processes, which are part of UNHCR’s legitimate operational activities. UNHCR does not use or disclose personal data for any purpose unrelated to its mandate or operational requirements.
Your rights as data subjects
You have the right to access your personal data and relevant information concerning how UNHCR uses it. You have the right to correct or update your personal data. Under certain conditions, you have the right to ask that UNHCR deletes your personal data. You have the right to object to the use of your personal data, on grounds relating to your particular situation, at any time.
You can exercise your rights by contacting UNHCR through the channels provided below, and also by approaching UNHCR staff.
Please note that certain personal data, such as authentication details, are necessary for you to access and use the ADP Mobile Application. If you request deletion or object to processing, this may affect your ability to log in or upload photographs of assets designated for disposal.
Contact
UNHCR Global Disposal Services
Email: [email protected]
Website: Visit the UNHCR Global Disposal Services web page
Notification of changes
UNHCR may update this privacy notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes to this privacy notice, we may notify you by:
- posting the updated notice on our website
- sending a notification to all data subjects
- including a notice in our regular communications.
We encourage you to review this privacy notice periodically to stay informed about how we are protecting your personal data.