Already an IBA member? Sign in for a better website experience
The IBA’s response to the situation in Ukraine
This Privacy Notice sets out the data processing practices carried out by the International Bar Association.
If you have any requests concerning your personal information or any queries with regard to these practices, please contact dataprotection@int-bar.org
The International Bar Association (IBA), established in 1947, is the world's leading organisation of international legal practitioners, bar associations and law societies. The IBA influences the development of international law reform and shapes the future of the legal profession throughout the world. It has a membership of more than 80,000 individual lawyers and more than 190 bar associations and law societies spanning over 170 countries. It has considerable expertise in providing assistance to the global legal community.
IBA is incorporated as a Not-for-Profit Corporation under the laws of the State of New York in the United States of America and is registered with the Department of State of the State of New York with registration number 071114000655 - and the liability of its members is limited. Its registered address in New York is c/o Capitol Services Inc, 1218 Central Avenue, Suite 100, Albany, New York 12205.
The London office of IBA is registered in England and Wales as a branch with registration number FC028342. The IBA’s office in the EU is Nassaulaan 19, 2514 JT The Hague, The Netherlands.
The International Bar Associations Human Rights Institute (IBAHRI) has been created to advance education in the law throughout the world for the benefit of the public; to promote research into commonly encountered legal problems and to disseminate the useful results of such research for the benefit of the public; to promote human rights throughout the world; to promote the relief of financial hardship or distress of lawyers, their widows, widowers and other dependants and employees.
The IBA and the IBAHRI are data controllers under the data protection rules.
3.1 Ways we collect data
We collect information in the following ways:
Information you give us. For example, when you engage with us by registering for an event, complete a survey, contribute articles for publication, becoming a member or otherwise provide us with personal information.
IBA Member - we’ll ask for the following personal information to store with your account:
Name
Date of birth (optional)
Gender
Firm name and address
Email address
Lawyer type and position
Delegates to an IBA event: when you register for an event, we will ask you for the following personal information to store with your account:
NameFor in-person events, we will also ask if you have any dietary requirements or allergies. See 3.2 Sensitive Personal information.
We also collect your communication preferences from time-to-time.
3.2 Sensitive Personal information
Data Protection law recognises that certain categories of personal information are more sensitive. This is known as sensitive personal information and covers health information, race, religious beliefs and political opinions. We do not usually collect sensitive personal information about you unless there is a clear reason for doing so, such as any dietary requirements when attending a conference (which may infer religious beliefs or medical conditions) or where we need this information to ensure that we provide appropriate facilities or support to enable you to participate in an event.
We process personal information collected for the purposes of:
The International Bar Association uses SAP Commerce Cloud as its content and membership experience system. This software is a Cloud Platform product provided by SAP as a Software As A Service. The hosting and security are provided under this licence using Microsoft Azure. These include; monitoring, hosting, patching and security frameworks as part of the provisioning.
All IBA websites use cookies to help our websites work well and to track information about how people are using them. Where permitted, we may use your personal information to personalise our communications to you, and to provide you with targeted advertising both on and off the site. For more information about the techniques we use for this purpose and your rights in relation to this, please refer to section 11 of this policy. More information on cookies can be found in section 5.1 - see Cookies.
In addition, if you register on our websites then the following will also apply:
Parts of the IBA website are restricted to IBA members only.
5.1 IBA Cookies
To provide the best experience to our users the IBA makes use of cookies. Our cookies do not store sensitive personal information. They only store the browser association that loads the data and provides a dynamic experience for the site user.
The full policy can be found at What are cookies and how are they used?
Domain | Cookie | What it is used for |
www.ibanet.org | __utma, __utmb, __utmc, __utmt, __utmv, __utmz, _ga |
These cookies provide general analytics information tracking user experience. |
www.ibanet.org |
glt_3_, gltexp |
These cookies provide a permanent logged-in experience for the IBA Website. The cookie lasts 14 months and is validated and extended each time a user accesses the IBA site. Pressing signout on the IBA website ends the cookie. |
www.ibanet.org | ASP.NET_SessionId, TS015eaf6b |
General storage about,the site user to enhance the site experience. When logged in this stores,server side information that further enhances the site experience. For, example pre-populating forms and details. |
www.int-bar.org | CFID, CFTOKEN, TS011224ec |
General storage about, the site user to enhance the site experience. When logged in this stores server side information that further enhances the site experience. For, example pre-populating forms and details. |
5.2 Third Party cookies
When on the International Bar Association Web site, you may notice some cookies are not related to our domain. Third party plug in technology helps to make a better and more dynamic experience when using the IBA web site. The third party cookies these companies use are listed overleaf.
Company | Domain | Cookie | What it is used for |
Cloudflare | .cloudflare.com | __cfduid | Cloudflare is used for fonts on the IBA website. Tracking information to assist in this is used in the cookie. |
cdn.syndication.twimg.com | lang | Cookie to store local language to assist content loading. | |
.twitter.com | _ga, eu_cn, guest_id, mobile_metrics_token, netpu, personalization_id, syndication_guest_id, tfw_exp, twitter_ads_id |
Used to assist in the dynamic experience of twitter alongside general analytics information tracking user experience. | |
Vimeo | .vimeo.com | __qca, _ga, continuous_play_v3, has_logged_in, is_logged_in, player, vuid |
These cookies help Vimeo player run and work from inside the IBA Web site. |
Vimeo | .player.vimeo.com | __utma, __utmb, __utmc, __utmt_player, __utmv, __utmz |
These cookies provide general analytics information tracking user experience. |
5.3 Third Party cookies from sites containing IBA advertising.
We utilise the technology of third parties on a regular basis to ensure that we are using up to date systems that are managed by the best companies to provide us with the information that we need. This in turn means that there will be a number of third party cookies from our trusted suppliers used on our websites. Each company is responsible for the cookies that they place onto your device and have separate policy documents to highlight their use.
Our list of trusted third parties who may deploy a cookie to your device, with a link to their cookie details is below.
If you click on links through to their sites, you are then covered by their Privacy Policy and not ours.
5.4 Inappropriate website content
If you post or send any content that we believe to be inappropriate, offensive or in breach of any laws, such as defamatory content on our forums or social media pages, we may use your personal information to inform relevant third parties such as your internet provider or law enforcement agencies.
If you use your credit or debit card to join us, buy something or pay for a registration online or over the phone, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard. You can find our more information about PCI DSS here -
www.pcisecuritystandards.org/security_standards
We do not store your credit or debit card details at all as all transactions are made through Optile - https://www.optile.io/
If we receive an email containing any credit or debit card details, it will be immediately deleted, no payment will be taken and you will be notified about this. All purchases should be completed through the IBA website, by phone, cheque or by sending payment via bank transfer.
We rely on the following legal bases when processing your personal information:
8.1 Member communications
We want to ensure our members receive the level of information about the IBA that is right for them. It is always your choice as to whether you want to receive information about our work and the ways you can get involved.
If you want to change how you receive these member communications, you can do so by indicating your preferences on the form on which we collect your data; by logging into the My IBA section of the website and selecting Marketing Preferences or by clicking the ‘Opt-out/unsubscribe’ link in at the end of emails sent to non-members. If you do opt out of any communications, we will retain your details on a suppression list to help ensure that we do not continue to send you the relevant communications you have opted-out of.
8.2 Email Marketing
If you actively provide your consent to us along with your email address, we may contact you for marketing purposes by email. You can withdraw your consent by logging into the My IBA section of the website and selecting Marketing Preferences or or by clicking the ‘Opt-out/unsubscribe’ link in at the end of emails sent to non-members. If you do opt out, we will retain your details on a suppression list to help ensure that we do not continue to contact you.
8.3 Post/telephone marketing
If you have provided us with your postal address or telephone number, we may send you direct mail or telephone you about our work unless you have told us that you would prefer not to receive such information. You can withdraw your consent by logging into the My IBA section of the website and selecting Marketing Preferences or or by clicking the ‘Opt-out/unsubscribe’ link in at the end of emails sent to non-members If you do opt out, we will retain your details on a suppression list to help ensure that we do not continue to contact you.
8.4 IBA Members’ Directory
One of the benefits of membership is that you can be listed in the IBA Members’ Directory. If you would like to opt-out of appearing, choose ‘Personal Details’ from the side menu, scroll to the bottom of the page, and tick ‘Hide profile from Members Directory’. Note that only current Members, Group Members, and Corporate Members have access to the Members’ Directory.
8.5 Photography and Filming
Certain sessions and/or social functions at our virtual and in-person events may be recorded, photographed and/or filmed and some of this content may be used for future IBA marketing materials, member communications, products, or services. Should you have any concerns regarding this, or do not wish to be featured in any of these materials please contact the IBA Marketing Department at ibamarketing@int-bar.org.
Your personal information is kept for as long as it is necessary for the purposes for which it was collected. Therefore, after this period data is erased or anonymised.
In order to comply with accounting regulations, we keep records for all transactions (e.g., conference registration, IBA membership) for 7 years, and will continue to send you marketing information about related conferences or about IBA membership for 4 years unless you withdraw your consent in the Manage Preferences section of the website.
If you register your interest for a conference, but have not yet attended one, we retain your contact details for up to 4 years and will, where permitted, send you marketing information about related conferences or about IBA membership.
If you applied for membership but never completed your application, we will leave the invoice available to you until the end of the calendar year. We would then suspend your [application for?] membership and keep your record for up to 3 years after that; where permitted we will continue to send you marketing information about related conferences or about IBA membership.
You can opt out at any time by emailing member@int-bar.org, clicking ‘unsubscribe’ in any of our emails, or logging into your My IBA and going to Manage Preferences.
Depending on the circumstances, you may have the following rights under data protection law:
The right of access - you have the right to obtain confirmation that your data is being processed and access to your personal information. This is so that you are aware of and can verify the lawfulness of the processing. Where requests are manifestly unfounded or excessive, in particular because they are repetitive, we may charge a reasonable fee taking into account the administrative costs of providing the information; or refuse to respond. Where we refuse to respond to a request, we will explain why to you, informing you of your right to complain to the supervisory authority and to a judicial remedy without undue delay and at the latest within one month.
Should you wish to exercise these rights, we may require you to prove your identity. Please address requests to the Operations Director at dataprotection@int-bar.org, or by post to International Bar Association, 5 Chancery Lane, London, WC2A 1LG, or via our social media channels and we will respond within 30 days, of receipt of your written request and confirmed ID. Please provide as much information as possible about the nature of your contact with us to help us locate your records.]
Further information can be found in our Data Subject Access Request policy . You may prefer to use our Data Subject Access Request form to make your request.
11.1 Profiling
We may collect, and our third party providers of advertisements and content may collect, information about where you are on the internet (e.g. the URL you came from, IP address, domain types like .co.uk and .com), your browser type, the country and telephone area code where your computer is located, purchase history, the pages of our website that were viewed during your visit, the advertisements you clicked on, and any search terms that you entered on our website ("User Information"). We may collect this information even if you do not register with us.
You should be aware that this site is being monitored and may capture information about your visit that will help us improve the quality of our service or be used to present you with IBA products and services which are relevant to your browsing history when you visit other websites.
11.2 Remarketing
The IBA uses remarketing on other websites to present you with products and services we think may be of interest to you, based on your browsing history. Third-party vendors, including Google, Facebook, LinkedIn and Twitter, may show IBA adverts on sites across the Internet.
We do have relationships with carefully selected and monitored suppliers who may also set cookies during your visit to be used for remarketing purposes, to show you different products and services based on what you appear to be interested in. These companies also use automated technologies to collect information when you click on our ads, which helps track and manage the effectiveness of our marketing efforts. If you'd like to opt out , please go to the Network Advertising Initiative website (opens in a new window - please note that we're not responsible for the content of external websites).
The IBA may disclose your personal information in the following circumstances:
As the IBA is a global association, we have regional offices in Sao Paulo, Seoul, The Hague and Washington. They transfer, process and store the data hosted in the UK in order to provide IBA services at a more local level. We have data sharing agreements in place with each office.
We use suppliers (such as conference venues) outside the UK and the EEA. This means that the personal information of individuals from the UK and the EEA may be transferred, processed and stored outside the UK or the EEA (as applicable). This includes countries that the UK or European Union authorities do not consider provides and adequate level of protection for personal information. However, we take steps to put in place suitable safeguards to protect your personal information when processed by the supplier such as entering into the European Commission approved standard contractual clauses. If you would like to receive further information about our safeguards, please contact dataprotection@int-bar.org.
We may update the terms of this policy at any time, so please do check it from time to time.
If you are unhappy with our work or something that we have done or failed to do, we want to know about it. We also welcome your views on what we do well. Your comments enable us as an organisation to learn and continuously improve our services. Email us at dataprotection@int-bar.org or our Operations Director, at joe.bell@int-bar.org
If you are still not satisfied after you have spoken to us, you can contact the Information Commissioner’s Office - www.ico.org.uk