MSF takes the protection of personal data very seriously. This Privacy Notice explains what personal information we collect from you when you use the reporting system and how we use it. We ensure compliance with the applicable data protection regulations through both technical and organisational measures.
MSF’s EQS Integrity Line is an online third-party platform that anyone can use to report cases of abuse against people, misuse of MSF resources, or conduct that may harm MSF’s reputation.
The MSF entity responsible for processing your personal data depends on who you report to, which may be:
- Médecins Sans Frontières MSF OCG
Route de Ferney 140
Case postale 1224
CH-1211 Genève 1 – Switzerland.
The data protection officer of MSF OCG, can be reached at [email protected].
- Médecins Sans Frontières OCA Artsen Zonder Grenzen
Plantage Middenlaan 14
1018 DD Amsterdam – The Netherlands
The data protection officer of MSF OCA, can be reached at [email protected].
- Médecins Sans Frontières Afrique Occidentale et Centrale MSF WaCA
Zone 4, Rue Pierre et Marie Curie, Abidjan
26 BP 392 Abidjan, Côte d’Ivoire
The data protection officer of MSF WACA, can be reached at Médecins sans Frontières MSF WACA
Zone 4 - Lot 44. Ilot7 Bietry Zone 4B, Abidjan, Côte d’Ivore Or email: [email protected].
- Médicos Sin Fronteras España (MSF OCBA)
Calle de Zamora 54, Barcelona, 08005 (Cataluña), España
The data protection officer of MSF OCBA, can be reached at [email protected].
Médecins Sans Frontières Belgium MSF OCB
Rue de l’Arbre Bénit 46, 1050 Bruxelles, Belgium
The data protection officer of MSF OCB, can be reached at [email protected].
Each entity is a separate data controller. The technical implementation of the reporting system is carried out on our behalf by EQS Group AG ('EQS').
In principle, the reporting system can be used - to the extent permitted by law - without providing personal data. You may, however, voluntarily disclose personal data as part of the case management process, in particular information about your identity, first and last name, country of residence, telephone number or e-mail address.
In principle, we do not request or process special categories of personal data, e.g., information on racial and/or ethnic origin, religious and/or ideological convictions, trade union membership or sexual orientation. You are however free to disclose this information in free text fields in the reporting form if you consider this information relevant and necessary for the management of your case.
The report you provide may contain the personal data of third parties. The individuals concerned will be informed and given the opportunity to comment on the information. Should this be the case, your identity will remain confidential, as the person concerned will not be given any information about your identity - as far as legally possible and unless you decide to disclose it.
The Integrity Line Platform enables you to contact us and report any behaviour cases of abuse on person, on MSF resources and on MSF image. We process your personal data (if provided) in order to investigate the allegations you make through the platform and to investigate suspected breaches of compliance and law.
Should we need to come back to you with queries, we will only communicate with you via the platform. The confidentiality of the information you provide is our top priority.
Your personal data will be processed in line with your consent given when you report via the platform. Furthermore, we process your personal data insofar as this is necessary for the fulfilment of legal obligations. In particular, this includes reports related to criminal, competition and labour law.
Finally, your personal data will be processed if this is necessary to safeguard the legitimate interests of MSF in light of MSF’s Duty of Care obligations to take every effort to ensure that abuse and inappropriate behavior is – prevented as far as possible – which may include reporting abuses to Headquarters.
In addition, we use your personal data in anonymous form for statistical purposes. We do not intend to use your personal data for purposes other than those listed above. Otherwise, we will obtain your prior consent.
The system does not adopt automated decision-making that may significantly affect you. All the decision-making processes are performed with human intervention and for the purposes mentioned above.
EQS Group AG is specialised in the operation of secure and anonymous internal reporting systems. The Integrity Platform is the web-based reporting system of EQS Group AG.
When submitting a complaint, an alert or question, the reporter stays anonymous if they do not want to disclose their identity. Integrity Line guarantees the technical anonymity of the reporter and ensures that their identity cannot be traced by technical means.
The data is stored encrypted and Integrity Line has no access at any point in time to the content of this data.
More information can be found on the EQS Group AG website at:
http://www.eqs.com/
EQS Group AG Stockerstrasse 33 8003 Zurich Switzerland
The Integrity Line Platform includes an option for anonymous communication via an encrypted connection. When you use this platform, your IP address and your current location are not stored at any time. After sending a message, you will receive access data to your secure inbox so that you can continue to communicate with us in a secure manner.
EQS maintains appropriate technical measures to ensure data protection and confidentiality. The data you provide will be stored on a secure EQS database. All data stored on the database is encrypted by EQS using state-of-the-art technology.
Artificial intelligence may be used to assist with translation, transcriptions, anonymization or suggestion of classification of case. EQS uses OpenAI and Microsoft Azure as service providers. Artificial intelligence will not be used without human supervision and will not be used to make decisions about you. Your data is not used to train models.
The stored data can only be inspected by authorised individuals within the respective MSF entity. Insofar as this is necessary to fulfil the aforementioned purpose, authorised individuals from other MSF entities may also be authorised to access the data. All individuals authorised to inspect what you reported are obliged to maintain confidentiality.
In order to fulfil the aforementioned purpose, it may also be necessary for us to transfer your personal data to external bodies such as law firms, or criminal authorities, within or outside the European Union.
If we pass on your personal data within the group or externally, a uniform level of data protection is ensured by means of internal data protection regulations and/or corresponding contractual agreements. In all cases, the responsibility for data processing remains with the entity.
With your consent, your data may be shared with therapeutic services or other agency to provide support to you.
Please note that a common landing/home web page is shared by the different MSF entities to facilitate your reporting of a case. Thereafter, your report is routed directly to the entity you selected where it is handled and processed independently from other MSF entities.
Each MSF entity acts as a separate data controller.
We store personal data only as long as it is necessary for the processing of your report or we have a legitimate interest in the storage of your personal data. In addition, your personal data may be stored if this is required by regional or national law to fulfil legal obligations, such as storage obligations. Subsequently, all personal data will be deleted, blocked or anonymised.
If you have provided personal data, you have the right to information, correction and deletion of the personal data. You may also restrict the processing or request its transfer to another entity.
Furthermore, you have the right to object to the processing of your personal data at any time for reasons arising from your personal situation.
You have the right to withdraw your consent at any time. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of your consent until revoked.
You assert these rights by informing the person responsible or our data protection officers mentioned above.
In addition, you have the right to lodge a complaint with a supervisory authority.