UNHCR online auction sales platform privacy notice
UNHCR online auction sales platform privacy notice
1. Who we are
The Office of the United Nations High Commissioner for Refugees (“UNHCR”) is a global organization dedicated to saving lives, protecting rights, and building a better future for refugees, forcibly displaced communities, and stateless people. Together with partners and communities, UNHCR works to ensure that everybody has the right to seek asylum and find safe refuge in another country. UNHCR also strives to secure lasting solutions.
This Privacy Notice applies to individuals who access or use the UNHCR Online Auction Platform, including online sales, online auctions, and live or broadcast auction events. It should be read together with the Terms of Use governing the Platform.
2. Legal framework
UNHCR enjoys a special legal status in accordance with the Convention on the Privileges and Immunities of the United Nations of 1946. This Convention grants the United Nations, of which UNHCR forms an integral part, the privileges and immunities necessary to perform its functions independently and without interference.
Accordingly, UNHCR has established a comprehensive framework for the collection, use, and sharing of personal data, ensuring the protection of the dignity and fundamental rights of data subjects. This framework consists of the UNHCR General Policy on Data Protection and Privacy (2022) and the Policy on the Protection of Personal Data of Persons of Concern to UNHCR (2015).
This Privacy Notice explains how UNHCR uses the personal data collected from you and your rights relating to the use of your personal data.
3. Why are we processing this information
We process your personal data to administer the UNHCR Online Auction Sales Platform, including:
- User registration and authentication
- Auction participation and execution of sales
- Conducting and administering online sales, online auctions, and live or broadcast auction events
- Identity, payment, and administrative verification and compliance checks
- Fraud prevention and risk mitigation
- Handling inquiries, complaints, or disputes.
4. Legitimate basis
- Processing is carried out under UNHCR’s overriding legitimate interest in ensuring the secure, transparent, and accountable administration of the Online Auction Platform, including the management and disposal of UNHCR assets.
5. Data types and retention
We collect the following categories of personal data:
- identification and contact details (name, address, email, phone)
- identity verification documents where required
- payment-related verification information, where applicable (such as confirmation of payer identity or payment reference details)
- account credentials and authentication data
- communications with UNHCR or authorized service providers
- technical and usage data (IP address, device identifiers, access logs)
- usernames or identifiers displayed during auctions
- bidding activity, bid amounts, and timestamps
- audio or video data, where live or broadcast auctions are conducted.
Retention
Your personal data will be retained by UNHCR only for as long as necessary in connection with the activities described above. UNHCR may retain your personal data for longer periods only when necessary for compatible purposes, including archiving, statistical or scientific research, audit, oversight, and accountability. Where users participate in auctions, certain transaction or bidding records may be retained in anonymized or otherwise restricted form for financial reconciliation, as well as for audit, oversight, and accountability. UNHCR may also retain non‑sensitive payment references and transaction metadata for administrative, audit, compliance, and record‑keeping purposes.
6. Security and processing tools
UNHCR implements technical and organizational safeguards to protect your data. The platform uses secure IT systems managed by UNHCR and authorized service providers.
Your personal data will be treated with the utmost confidentiality. Access to your data will be restricted to authorized personnel who need to process it to achieve the purposes described above.
Payment processing:
For auctions requiring a credit‑card authorization or safety deposit, certain limited payment information may be processed through UNHCR’s authorized payment service provider (e.g. Stripe). This may include the cardholder's name, card type, expiration date, and secure authorization tokens. UNHCR does not store or retain full payment card numbers, CVV codes, or other sensitive authentication data. Such information is processed directly by the payment service provider in accordance with its security practices (e.g. PCI‑DSS compliance).
Processing tool
The Online Auction Platform is hosted on Amazon Web Services (AWS). For more information, please see the provider’s privacy policy.
7. Data sharing
Your data may be shared with:
- authorized service providers (auctioneers, IT providers, payment processing or financial service providers, where applicable)
- other UN entities participating in auction activities
- UN oversight, audit, and investigation bodies.
When UNHCR shares personal data with external entities, this is done on a limited and necessary basis and subject to appropriate safeguards consistent with UNHCR’s data protection framework.
8. Data subject rights
You have the right to:
- access your personal data and relevant information concerning how UNHCR uses it
- correct or update your personal data
- request deletion of your personal data under certain conditions; and
- object to the use of your personal data, on grounds relating to your particular situation, at any time, in accordance with UNHCR’s data protection framework.
You can exercise your rights by contacting UNHCR through the channels provided below, and also by approaching UNHCR staff.
Contact
UNHCR Global Disposal Services
Email: [email protected]
Website: Visit the UNHCR Global Disposal Services web page
Please note that your personal data may be necessary for the administration and operation of the Platform and participation in UNHCR auctions, including participation in online or live auction events. If you decide to object to the use of your personal data by UNHCR, this may impact your ability to use the Platform or participate in UNHCR auctions.
9. Notification of changes
We may update this Privacy Notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
When we make changes to this privacy notice, we may notify you by:
- posting the updated notice on our website
- sending a notification to all data subjects
- including a notice in our regular communications.
We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting your personal data.