Last updated on: February 24, 2024
Overview
The Inter-American Investment Corporation (“IDB Invest”, “we”, “us” and “our”) is an international organization founded by international treaty in 1986 and is a member of the Inter-American Development Bank Group (“IDB Group”). As such, it is not subject to any national or supranational laws.
This Privacy Notice (“Privacy Notice”) explains how IDB Invest collects, uses, stores, transfers or otherwise processes the personal data of individuals (other than our own personnel and their dependents) (“you”).
If you are either (i) the direct or indirect beneficiary of IDB Invest Products and Services, or (ii) a representative of, or otherwise associated with, businesses and other organizations currently or potentially benefiting from or participating in IDB Invest’s Products or Services (for example, employees, officers, shareholders, directors, beneficial owners, guarantors or key vendors or partners of such businesses or organizations), this Privacy Notice applies to the processing of your personal data.
Personal data processed in the course of IDB Invest’s activities is done so in accordance with the IDB Group Personal Data Privacy Policy (the “Privacy Policy”).
Such processing is necessary to enable IDB Invest to carry out its mission, mandate and purpose as an international organization established by its member countries. In certain cases, processing personal data is also reasonably necessary for the performance of a contract, or to satisfy or comply with a binding obligation, which may require your express consent.
Please ensure that you read this Privacy Notice in its entirety, as amended from time to time.
What does this Privacy Notice cover?
This Privacy Notice relates to the personal data we collect and process from you, and covers the following aspects:
- the contexts in which we process your personal data;
- the types of personal data that we collect about you;
- the sources from which IDB Invest collects your personal data;
- how and why IDB Invest processes your personal data;
- how long we keep your personal data;
- how, why and to whom we transfer your personal data;
- how we protect your personal data;
- changes to this Privacy Notice;
- explains the application of our privileges and immunities; and
- explains how you may contact us with queries or complaints;
The contexts in which we process your personal data
I. Visitors to IDB Invest’s websites
IDB Invest does not automatically process personal information related to the visitors of its website, e.g. idbinvest.org, or official IDB Invest pages on other sites and digital platforms. However, we will process any of your personal information that you submit through any interface of the official websites, e.g. registering for an event, etc. This Privacy Notice does not apply to third party websites. For more information on the processing of technical data and related information, such as that collected using cookies, please refer to the website privacy policy available on each such website.
II. Subscribers of IDB Invest newsletters or publications
If you subscribe to an IDB Invest newsletter or publication, we process your personal data (e.g., name and e-mail address) so we can make sure you receive it.
III. Registered attendees of IDB Invest events
If you have registered to attend an IDB Invest event, your personal data is collected and processed in connection with the event, as further detailed below.
IV. Personal data processed in the course of providing our Products and Services
In the course of providing our Products and Services IDB Invest processes personal data, as further detailed below.
V. Personal data in the context of recruitment
Personal data is required to manage job applications and possible recruitment as further detailed in the privacy notice made available to job applicants during the application process.
VI. Personal data in the context of procurement
In the course of providing our procurement activities, IDB Invest processes personal data as further detailed below.
What personal data do we process in the course of our activities?
We may collect and process the following personal data about you:
- Identification and contact data – name, postal address(es), email address, phone number(s), signature specimen, passport/nationality identity documents, age and date of birth, citizenship status, office location, and biometric information such as fingerprints;
- Operations data – information about your involvement in, and/or the development impact on you of, our investment and advisory operations and activities;
- Financial data – relevant financial information of how you benefit directly or indirectly from our Products and Services;
- Background data – relevant background information used for anti-corruption and anti-fraud assessments in accordance with our applicable policies and procedures;
- Professional data – job title, employer details, photograph, professional history, qualification details, information about your experience, participation in meetings, seminars, and conferences, information about your professional relationship with other individuals or institutions, language abilities, and other professional skills;
- Correspondence – records of any correspondence we may have with you, records of your correspondence preferences (including subscription to our newsletter);
- Consent records – records of any consents you have given, together with the date and time, means of consent, and any related information (e.g., the subject matter of the consent);
- Recruitment data – background checks, data required to manage job applications and possible recruitment as further detailed in the privacy notice made available to job applicants during the application process; publicly available information collected in the context of due diligence;
- Data relating to our websites – cookie data, device type, operating system, browser type, browser settings, IP address, language settings, dates and times of connecting, usage data, and aggregate statistical information, location data, user behavior and other analytics data;
- Diversity and inclusion data – salutations, gender identity, race / ethnicity, disability status.
Where do we obtain your personal data?
We may obtain or receive personal data about you from the following sources:
- Personal data you or your employer provide to us – Any personal data that you provide directly to us (e.g., job applications, correspondence you send us, information you provide to our investment officers, or when you complete an online form or survey), or that is provided to us from a business or an organization that employs you or with which you are associated. We may also obtain your personal data during meetings, during visits from sales or marketing representatives, or at events we attend and in which you participate.
- Personal data we collect by automated means – As noted above, we may obtain certain information by automated means when you visit any of our websites.
- Personal data we collect from third parties – We may collect or obtain personal data from third parties who provide it to us (e.g., other parties to a transaction, law enforcement authorities, relevant business contacts, specialized databases operated by the private sector, specialized external service providers, consultants or vendors).
- Personal data you make public – We collect or obtain personal data that you manifestly choose to make public, including via social media (e.g., we may collect information from your social media profile(s), if you make a public post about us).
Why do we process your personal data?
IDB Invest processes your personal data as reasonably necessary to conduct and manage our activities within the contexts listed above. In particular, this includes processing personal data for any of the following purposes:
- provide access, maintain and improve our websites and services, disseminate information to further IDB Invest’s work to improve lives in Latin America and the Caribbean, provide research information, explore investment opportunities, conduct due diligence, perform internal governance functions, conduct business intelligence operations, conduct accounting and financial management;
- enable you to participate in any interactive features of our websites, communicate with you, provide you with our newsletter and other communications, subject to your preferences;
- fulfil our policy obligations, confirm and verify your identity, and screening against government and/or law enforcement agency sanctions lists and other legal restrictions;
- respond to your queries and feedback (for example, if you’ve asked a question or submitted feedback via the site);
- provide you with information, products or services you have requested or which we feel may interest you, unless you tell us otherwise;
- carry out our obligations, or exercise our rights, under any contracts entered into between you and us; fulfil our obligations, or defend our rights, under applicable legal or regulatory requirements;
- present content in a suitable manner for the device you’re accessing it from;
- undertake data analytics to learn more about how you and others interact with our website and with our online public-facing material;
- manage and ensure the security of our IT systems, detect and prevent misuse or abuse of our websites and services, and for backup and disaster recovery purposes;
- support equality, diversity and inclusion in our projects;
- executing legal instruments related to investment, advisory and asset management activities;
- administering and managing our relationships with counterparties (and potential counterparties) in the context of our investment, advisory and asset management activities (or potential activities that may be of interest);
- understanding and monitoring the development impact of our investment, advisory and asset management activities;
- monitoring and analyzing the use of our products and services for purposes of developing and improving those products and services;
- managing our information technology and ensuring the security of our systems;
- investigating and responding to complaints, and establishing, complying with, exercising and defending IDB Invest's legal rights and obligations, which may arise from our investment, advisory and asset management activities;
- training our staff and maintaining and improving the quality of our internal processes and arrangements;
- coordinating with other IDB Group Institutions in connection with our investment, advisory and asset management activities;
- conducting credit and other risk assessment and control activities, including for the prevention and detection of corruption and fraud;
- maintaining appropriate accounting and other records; and
- carry out any other purpose described to you at the time your data is collected.
We may also collect and process personal data of visitors to our premises, including for the purposes of ensuring safety and security at those premises, as further detailed in the notices available at our premises.
How long we keep your personal data
Your personal data will be kept only as long as necessary for the purposes set out in this Privacy Notice and in accordance with IDB Invest’s applicable records retention and disposition schedules. The specific length of time will depend on the type of personal data, the reasons for which it is processed, and other obligations under IDB Invest’s policies and procedures.
International transfers of personal data
When you submit personal data to us by any means, that personal data may be transferred to a jurisdiction other than the one in which you live. In particular, personal data may be transferred to the United States. The data protection and other privacy laws of the United States may not afford the same level of protection as the laws of other countries.
To whom do we disclose your personal data?
IDB Group Institutions: we may disclose your personal data to other IDB Group institutions, such as the Inter-American Development Bank, as necessary for the purposes set out in this Privacy Notice.
Third parties: unless otherwise noted below, and subject to contractually agreed conditions of confidentiality and security (where applicable) we may disclose your personal data to the categories of parties listed below:
- Service providers and suppliers who perform services to us, such as event vendors and organizers, consulting firms, KYC screening and due diligence providers, among others.
- Legal and other advisors that assist, advice or represent an IDB Group Institution as needed, such as attorneys, in connection with litigation, investigations, advising on contractual obligations, or to enable an IDB Group Institution carryout its mandate.
- Relevant legal, regulatory or administrative authorities, as we believe to be appropriate, for example, public registers in the execution and enforcement of relevant transaction documents, and other relevant authorities to protect and defend our rights and property; to protect the interests of IDB Group or others; and to permit us to pursue available remedies or limit the damages that we may sustain.
- Other selected third parties: legal entities, including financial institutions, custodians, brokers, private companies, intermediaries, donors, partners and other organizations with which you are associated or involved with (if any) in connection with our Products or Services; peer researchers from academia, who carryout impact evaluations, among others for the purposes noted above.
These third parties are not authorized by us to use or disclose your personal information, except as necessary to perform the activities requested by us.
How to Request Information on your Personal Data processed by IDB Invest
As part of its data privacy framework, IDB Invest has established a procedure for individuals to request information regarding their personal data processed by IDB Invest and, when appropriate, to seek redress if they reasonably believe their personal data has not been processed in accordance with the Privacy Policy.
You may submit such a request using the webform available here.
How we protect your personal data
We have appropriate technical (e.g., firewalls, malware scans, anti-virus protection, encryption, physical locks) and organizational (e.g., policies and procedures, privacy assessments, due diligence, awareness, and training) safeguards in place to prevent unauthorized processing and accidental loss, damage, or destruction of personal data. These safeguards take into account the sensitivity of the data, as well as the current state of technology. We also have procedures in place to deal with data breaches and we’ll notify you accordingly when appropriate.
Changes to this Privacy Notice
This Privacy Notice was last updated on the date listed above. If we change it, we will post the new version to this website.
Queries and complaints
If you have any complaints or queries regarding your personal data, please contact privacy@IDBinvest.org.
Privileges and immunities
Nothing contained in this Privacy Notice shall constitute or be considered to be a limitation upon or a waiver of the privileges and immunities of IDB Invest, which are specifically reserved.