This Privacy & Data Protection Policy is part of the terms that govern the Indigenous Peoples Grand Council of Peace (hereafter referred to as “the Council”, “we”, “our”, or “us”). It covers how we handle your personal data.
1. Legal framework
This Policy is based on the following laws and regulations:
- Mexico: Ley Federal de Protección de Datos Personales en Posesión de los Particulares (DOF 2025)
- European Union: General Data Protection Regulation (Regulation (EU) 2016/679)
- United States: Applicable state-level privacy laws (CCPA, VCDPA, etc.)
- UN Declaration on the Rights of Indigenous Peoples (UNDRIP), Articles 18, 31, 32 on information and digital sovereignty.
2. Data we collect
We collect personal data that you voluntarily provide:
- Name, email, phone number, country or region
- Language and cultural affiliation (optional)
- Communication preferences
- Device and browser data (cookies, IP, analytics)
- Participation records (events, digital activities)
3. Purpose of data processing
Your data is used to:
- Identify you as a member or supporter of the Council.
- Send updates, newsletters, invitations, and calls for participation.
- Organize community activities and global campaigns.
- Comply with legal and ethical obligations.
- Promote transparency, accountability, and collective decision-making.
4. Legal basis for processing
Data processing is based on:
- Your explicit consent (via checkbox or digital form).
- The Council’s legitimate interest in fulfilling its organizational mission.
- Legal obligations to maintain administrative and communication records.
5. International data transfers
Your data may be stored on secure servers located in Mexico, the United States, or the European Union. We ensure equivalent protection under GDPR’s Standard Contractual Clauses and the Mexican Data Protection Authority (INAI) guidelines.
6. Data retention
Data is retained only for as long as necessary to fulfill its purpose. Once expired, it will be anonymized or securely deleted.
7. Rights of individuals (ARCO / GDPR rights)
You may exercise your rights to:
- Access your personal data.
- Rectify inaccurate information.
- Cancel/Delete your data when appropriate.
- Object to specific uses.
- Withdraw consent at any time.
Requests can be submitted to privacy@grandcouncilofpeace.org.
8. Security measures
We implement administrative, technical, and physical safeguards to protect your data against unauthorized access, loss, alteration, or destruction.
9. Third-party data processors
We may engage third-party providers for communication, analytics, or hosting. All such processors are bound by confidentiality and comply with equivalent privacy standards.
User consent (for checkbox use)
By checking this box, you acknowledge that you have read, understood, and accepted our Terms of Use, Cookie Policy, and Privacy & Data Protection Policy, and you consent to the processing of your personal data in accordance with applicable laws of Mexico, the United States, and the European Union.
Bibliographic and legal references
- Cámara de Diputados del H. Congreso de la Unión. (2025). Ley Federal de Protección de Datos Personales en Posesión de los Particulares. Diario Oficial de la Federación.
- European Parliament and Council. (2016). Regulation (EU) 2016/679 (General Data Protection Regulation).
- California Consumer Privacy Act (CCPA), Cal. Civ. Code § 1798.100 (2020).
- United Nations. (2007). United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP).
- Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). (2024). Guía para el cumplimiento de la Ley Federal de Protección de Datos Personales.
- OneTrust. (2024). GDPR Global Compliance Handbook.
- Hogan Lovells. (2025). Mexico’s New Federal Data Protection Framework: Compliance for Global Entities.