1. About Business at OECD

Established in 1962, Business at OECD (BIAC) is the officially recognized institutional business stakeholder at the OECD. Business at OECD stands for policies that enable businesses of all sizes to contribute to economic growth, sustainable development, and societal prosperity. Through Business at OECD national business and employers’ federations representing over 10 million companies provide perspectives to the OECD's cutting-edge policy debates that shape market-based economies and impact global governance. Business at OECD's expertise is enriched by the contributions of a wide range of international sector organisations.

2. Business at OECD Privacy Statement

The purpose of this Privacy Policy is to inform you of the procedures regarding the collection, use and disclosure of information and personal data by Business at OECD's, including through Business at OECD's communications channels (including their website accessible on https://www.businessatoecd.org/, their newsletter, and their other channels).

The Business at OECD (BIAC) communication channels are provided by Business at OECD. By visiting and using their communications channels and providing information to Business at OECD, you acknowledge that you have been informed and you consent to the Privacy Policy, including with regard to use and disclosure of personal information which may be collected when you contact Business at OECD, subscribe to Business at OECD's email alerts and newsletters, when you register for events or on a platform, or when you request any other products and services provided by Business at OECD in accordance with the purposes detailed in section 4. If you do not wish your personal information to be used by Business at OECD in the manner set out in this Privacy Policy, please do not provide us this information.

3. Nature of information collected

3.1. Personal data that you provide voluntarily or that we receive through referrals

In order to receive Business at OECD's communications or information about Business at OECD's products and services, to contact Business at OECD for any questions or comments, to request Business at OECD's products and services, or to register for Business at OECD's events, you may choose to provide some personal information. The categories of personal information that Business at OECD may collect for the processing purposes described hereto are:

• Identification data such as family name, first name;
• Demographic data such as country of residence;
• Professional data such as organization, job title, activity, main area of interest;
• Contact data such as, email address and mobile phone number.

Business at OECD will ensure that personal data collected from you is strictly necessary for the purposes described in section 4 below.

3.2. Personal data that we collect automatically

When you visit Business at OECD's website or open their news alerts or newsletters, we may collect certain information automatically from your device. In some countries, including countries in the European Economic Area (“EEA”), this information may be considered Personal Data under Applicable Data Protection Laws.

Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with Business at OECD's website, including the pages accessed and links clicked.

Collecting this information enables us to better understand the visitors who come to Business at OECD's website, where they come from, and what content on Business at OECD's website is of interest to them. Business at OECD uses this information for internal analytics purposes and to improve the quality and relevance of the website to its visitors.

Some of this information may be collected using cookies and similar tracking technology, as explained in section 9 below.

4. Purposes of Data Processing

Business at OECD will only use your personal data where permitted to do so by applicable law. Under GDPR, the processing is lawful only if and to the extent that one of the following legal basis applies:

• Consent: you have given consent to Business at OECD's use of your information, and you may withdraw your consent through unsubscribe links.
• Contract performance: your information is necessary to enter into or perform a contract with you.
• Legal obligation: your information is necessary to comply with Business at OECD's legal obligations
• Legitimate interests: your information is necessary to pursue a legitimate interest

Business at OECD's legal basis for collecting and using your information described below will depend on the personal data concerned and the specific context in which Business at OECD collects it. Business at OECD, or processors on Business at OECD's behalf, may use the collected personal information:

• To manage your membership within Business at OECD's Global Network, including as national member, observer, associate expert group, or company affiliate thereof.
• The legal basis is legitimate interests, consent or contract performance.
• To engage with you in Business at OECD's projects and activities conducted in the framework of our mission to promote private sector priorities and foster engagement with the OECD.
• The legal basis is legitimate interests, consent or contract performance.
• For communication or marketing purposes – Business at OECD can send news alerts, newsletters, emails, or other communications relating to products and services that may be of interest. Business at OECD will provide an option to unsubscribe or opt out of further communications.
• The legal basis is legitimate interests or consent.
• To facilitate use of websites or platforms.
• The legal basis is legitimate interests, consent or contract performance.
• To process and respond to individual questions and/or inquiries.
• The legal basis is legitimate interests.
• For evaluation and development of Business at OECD's activities, Business at OECD may perform analysis in order to improve our services and offers. Business at OECD, or third parties on its behalf, may also use information provided in an aggregate and anonymous form for internal business and planning purposes, including to analyse trends and statistics.
• The legal basis is legitimate interests.

5. Data retention

Business at OECD will retain your personal data only for as long as it is necessary to complete the operations for which data has been collected or until you request to no longer to receive communications from us, in accordance with applicable laws and regulations.

When you submit an enquiry to Business at OECD via the “Contact us” form, an email is sent directly to Business at OECD's secure email server. The details of your enquiry may be stored by Business at OECD in their email archives.

6. Transfer of data

For the purposes mentioned in section 4, as a global organization, and as the institutional stakeholder to the OECD, Business at OECD may need to transfer and process your personal information in a country other than your country of residence, and/or outside of the European Union, and/or to/in countries which may have different data protection laws. In this case, Business at OECD will put in place appropriate and adequate operational, organisational, procedural, and technical measures in order to ensure the security and confidentiality of your personal data.

7. Security

Protecting your privacy and your personal information is a priority for Business at OECD. Business at OECD has taken reasonable measures to protect your personal information from loss, misuse and alteration. However, please be aware that no data transmission over the Internet or storage technology can be guaranteed to be 100% secure. Business at OECD can only take steps to help reduce the risks of unauthorised access to information/data. Each individual using the Internet user can also take steps to help protect his/her personal information and is encouraged to do so to further minimise the likelihood that a security incident may occur.

8. Your rights

The collected information is necessary for your registration and, more generally, for the purposes described in section 4. It is subject to data processing at Business at OECD. In application of the French law on data protection and the European Regulation on the protection of natural persons with regard to the processing of personal data and of the free movement of such data (General Data Protection Regulation “GDPR”) you will benefit from the right to access, rectification, erasure, restriction processing, object to the processing, portability. If you wish to exercise these rights and obtain all relevant information, please contact us at contact@biac.org.

9. Cookies policy

The wesbite uses “cookies” (i.e., small text files which are downloaded to a user’s device when visiting the website) in order to improve navigation around the website for the user and improve the quality of the website. Cookies which are not necessary are disabled by default. If you do not accept optional cookies, your experience may be affected but that does not prevent you from navigating in the website. By authorising optional cookies, you agree to the deposit and reading of cookies and the use of tracking technologies necessary for their proper functioning.

When you consent to be contacted by Business at OECD to receive news alerts or email events, be informed that they contain trackers to ensure their good reception in order to update the list of recipients, to automatically register your unsubscribing and to measure the overall interest in the subjects discussed.

10. Third party sites

The https://www.businessatoecd.org/ site may contain links to or from a number of third party websites (hereinafter referred to as “Third Party Sites”). Business at OECD does not, in any way, control or operate the Third Party Sites. Business at OECD is not responsible for the privacy practices, content, policies or actions of the Third Party Sites. This Privacy Policy is only applicable to general information processed by Business at OECD's Sites, pursuant to information collected on Business at OECD's Sites. The use of any information you may provide to third parties on Third Party Sites, or which such parties may otherwise collect on other websites, is not governed by this Privacy Policy.

11. Social networks

Social media plug-ins of social networks such as X and LinkedIn or services with user-generated content features are integrated into Business at OECD's Sites. Where Business at OECD's Sites contain a plug-in to a social network site, these are clearly marked (e.g. with an X button). If you choose to click on one of these buttons or links, your browser connects directly to the servers of the relevant social network. The other website’s privacy policy applies to any personal information you provide to that website. If you do not want the social network to collect the information about you, please review the privacy policy of the relevant social network and/or log out of the relevant social network before you visit Business at OECD's Site.

12. Intellectual Property (IP) / Content

All content displayed on Business at OECD's Sites, including but not limited to, text, graphics, logos, buttons, icons, images, sounds, audio clips, digital downloads, data compilations and software, is the property of Business at OECD or its content suppliers and is protected by the French and/or foreign applicable laws. You are prohibited from using, without permission, any of the marks, trademarks, trade names, service names, logos or other proprietary graphic appearing throughout Business at OECD's Sites. 

13. Updates to Privacy Policy

To the extent permitted by applicable law in your jurisdiction, Business at OECD may, from time to time, revise or update this Privacy Policy. You agree to be bound by such modifications or updates. If Business at OECD makes material revisions to the way we collect or use your personal information such that Business at OECD are using it for purposes that you have not consented to, Business at OECD will notify you of the changes and, as the case may be, ask for your explicit consent. Any changes to this Privacy Policy will become effective upon posting of the revised Privacy Policy on the Internet, accessible through Business at OECD's Sites. By continuing to use Business at OECD's Sites following such changes, you will be deemed to have agreed to such changes.