Privacy Notice

1.Who we are and what is the purpose of this privacy notice?

The GSMA group (specifically GSM Association & GSMA Mobile for Development Foundation Inc.) (“GSMA”, “we”, “us” or “our”) with registered office at 1 Angel Lane, London, EC4R 3AB, England.

This Privacy Notice explains how GSMA collects and processes personal data of individuals who visit and interact with this website, submit enquiries or pledges, or otherwise engage with GSMA services, initiatives, and programmes, including the Change the Face initiative.

GSMA acts as the controller of your personal information. For certain processing activities related to GSMA programmes, GSMA Mobile for Development Foundation Inc. acts as a joint controller with GSM Association.

2. Personal information we collect about you

The types of information we collect about you when you visit and interact with this site are:

• Your contact details such as name and email address where you have contacted us through this site; or
• Your name, email address, company name and business sector when you submit a pledge or register interest in Change the Face; or
• If you have agreed to cookies, data such as your site preferences or language settings. We can also use this information in an aggregated manner to understand how visitors navigate this site so we can improve it.

3. When we collect your personal information

We collect your personal information when you:

• Browse and interact with the Change the Face website; or
• Submit a pledge or register your interest; or
• Use our contact forms to get in touch with us; or
• Subscribe to updates or communications related to Change the Face.

4. How we use your personal information

We will process your personal data for the following purposes:

• Maintaining this website and providing services requested through it –
  For example, when you contact us through this site, we use your information to respond to your enquiry and provide the relevant support or information.

• Personalising and improving this website and its services –
  This may include analysing how visitors use the site, improving functionality, and understanding how users navigate the site so we can make it better. This may involve cookies or similar technologies where consent is provided.

• Communications and engagement –
  Including responding to enquiries and sending updates about Change the Face where you have given consent or where otherwise permitted by law.

We process personal data on the basis of:

1. Our legitimate business interests, including improving services and responding to enquiries (balanced against your rights and freedoms)
2. Consent, where required and where no other lawful basis applies (which may be withdrawn at any time)
3. Legal or regulatory obligations where applicable

5. How we share your personal information

We may share your personal data with:

• Service providers acting on our behalf, such as hosting providers, IT providers, analytics providers, and communications platforms;
• Other organisations involved in delivering or supporting Change the Face activities, where necessary;
• External advisers such as legal counsel where required;
• Authorities where required by law.
• We will only share personal data where it is necessary to operate this website and deliver Change the Face activities effectively.

This list is not exhaustive, and we may share personal data where necessary to deliver GSMA services effectively.

6. International data transfers

As a global organisation, GSMA operates through international offices and service providers. As a result, personal data may be transferred outside the UK or European Economic Area (EEA).

Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent legal mechanisms, to ensure your data remains protected in accordance with applicable data protection laws.

7. How long we keep your personal information

We only keep your personal data for as long as necessary to fulfil the purposes set out in this notice or to comply with legal obligations.

Retention periods may vary depending on the type of data and purpose, for example:

• Contact form data is kept only as long as needed to respond to your enquiry;
• Marketing or communications data is typically retained for up to two years after your last interaction;
• Pledge or registration data is retained only for as long as necessary to administer Change the Face and meet any reporting or legal obligations.

8. Keeping your personal information secure

We have appropriate technical and organisational security measures in place to protect your personal data from unauthorised access, accidental loss, disclosure, or destruction.

However, communications over the internet are not completely secure, and you are responsible for keeping your personal credentials safe and not sharing them with others.

9. Your rights

Under data protection law, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (in certain circumstances)
• Right to restrict processing
• Right to object to processing (including where based on legitimate interests)
• Right to data portability (where applicable)
• Right to withdraw consent at any time (where processing is based on consent)

You also have the right to lodge a complaint with the relevant supervisory authority, including the UK Information Commissioner’s Office (ICO). However, we encourage you to contact us first so we can address your concerns directly.

10. Contact us

You can contact us with any enquiry relating to your personal data by filling out this form, sending an email to [email protected] or writing to:

Data Privacy – Legal

GSM Association, 1 Angel Lane,
London, EC4R 3AB
United Kingdom