Innova Labs

Privacy Policy

Effective Date: June 01, 2025

Introduction

Welcome to Innova! We are committed to unlocking the digital potential of youth with limited opportunities. Your privacy is paramount to us. This Privacy Policy explains how Innova ("Innova," "we," "us," or "our") collects, uses, shares, and protects your personal information when you interact with our website, participate in our programs, or engage with us in any other way. We are dedicated to maintaining the trust and confidence of our website visitors, program beneficiaries, donors, and partners, and we adhere to global best practices for data protection, including principles derived from the General Data Protection Regulation (GDPR).

About Innova

Innova is an organization committed to empowering young people by equipping them with essential digital skills, tools, connections, and resources. Our core values include digital equity, youth-led innovation, community-rooted design, ethical tech, radical inclusion, agility, and transparency. We operate with a human rights-based approach, focusing on economic empowerment and reaching marginalized youth through our digital-first model.

Scope of this Privacy Policy

This Privacy Policy applies to all personal information collected or processed by Innova. This includes information collected through our website, during your participation in our programs (such as the Digital Preparedness Program, Youth Digital Participation & Entrepreneurship, and Research & Solution Design initiatives), when you apply for positions with us, make donations, or otherwise communicate or engage with Innova. It covers the personal data of website visitors, program beneficiaries, job applicants, donors, volunteers, partners, and any other individuals whose data we process in connection with our mission.

Information We Collect

We collect various types of information to support our mission and deliver our programs effectively. We are committed to the principle of data minimization, collecting only the data necessary for the stated purposes.

Information You Provide Directly to Us:

Contact Information: Such as your name, email address, phone number, and mailing address when you inquire about our programs, subscribe to our newsletter, or fill out our contact forms.
Program Application and Participation Data: If you apply for or participate in any of Innova's programs (including the SocialTech Exchange Initiative, Capacity Development, Youth Economic Participation, Youth Civic Participation, Youth Digital Entrepreneurship, Research, and Solution Design Labs), we may collect information necessary for your eligibility and participation. This may include your age (typically 15-35 years for youth), gender, location (e.g., for marginalized groups such as internally displaced youth or rural youth), educational background, skills, work experience, and information related to your specific needs (e.g., for the SocialTech Exchange Initiative, details about your need for digital assets, linked to livelihood improvement or educational goals).
Job Application Data: When you apply for a position with Innova, such as via Talents@innova-labs.org, we collect information necessary for the recruitment process, including your name, contact details, resume/CV, cover letter, work history, educational qualifications, and any other information you choose to provide.
Donation Information: When you make a donation, we collect your name, contact details, and donation amount. Donations may be processed directly by Innova or through secure third-party payment processors. Innova does not store sensitive payment card details or other sensitive financial information; such data is handled directly by the payment processor.
Sensitive Data: In specific instances, particularly for needs assessments related to program eligibility or during "Youth Wellbeing in the Digital Era" support sessions, we may collect minimal sensitive personal data (e.g., related to health, disability, or socio-economic status). Such collection will only occur with your explicit awareness and informed consent.
Correspondence and Feedback: Any information you provide when you communicate with us, including messages submitted through our website contact forms, emails, or feedback provided through surveys.

Information We Collect Automatically:

Usage Data: When you visit our website, we may automatically collect certain information about your device and how you interact with our site. This includes your IP address, browser type, operating system, pages viewed, time spent on pages, referring URLs, and clickstream data.
Cookies and Similar Technologies: We use cookies and similar tracking technologies to understand website usage and enhance your experience. These technologies are only applied with your informed approval beforehand. For more details, please refer to our dedicated Cookies and Other Tracking Technologies section.

Information We Collect from Other Sources (Third Parties):

We may receive information about you from our trusted program partners and stakeholders, such as local NGOs or educational institutions, who may refer you to our programs based on your needs and eligibility. We ensure that any data received from third parties has been collected and shared with us in accordance with applicable privacy laws and with appropriate safeguards.

How We Use Your Information (Purpose of Data Collection)

We use the information we collect for various purposes essential to our mission and operations, always ensuring that the use is relevant and limited to what is necessary.

To Deliver and Manage Our Programs: To assess eligibility for and facilitate participation in the SocialTech Exchange Initiative, including verifying needs for digital assets and coordinating their transfer.
To enroll you in and manage your participation in Capacity Development training workshops, including project-based training, digital toolboxes, and digital awareness initiatives.
To connect youth with economic participation opportunities such as paid jobs, internships, traineeships, and structured volunteering, managing the matching process, and providing mentoring and on-the-job feedback.
To facilitate Youth Civic Participation through civic-tech labs, data-driven campaigns, and policy hackathons.
To support Youth Digital Entrepreneurship, including testing early-stage concepts, providing mentorship, and offering "Finance for Entrepreneurs" workshops.
To involve youth in Research and Solution Design as knowledge creators and solution shapers.
To Process Applications: To evaluate and process your applications for our programs or for job vacancies within Innova.
To Communicate with You: To respond to your inquiries, provide updates on our programs, send newsletters, and deliver relevant information that you have requested or consented to receive.
To Process Donations and Manage Donor Relationships: To process your contributions, issue receipts, and manage our relationship with you as a donor.
To Personalize and Improve Your Website Experience: To understand how our website is used, identify areas for improvement, and tailor content to your preferences.
For Internal Operations: For data analysis, research, auditing, and to enhance our services, programs, and internal processes.
For Monitoring and Evaluating Program Impact: To track the effectiveness of our initiatives, measure progress towards our goals (e.g., number of assets distributed, youth completing training), and report on outcomes to partners and stakeholders.
For Fundraising and Outreach: With your explicit consent, to share success stories and engage in outreach activities to secure resources and partnerships.
To Ensure Security and Prevent Fraud: To protect our website, systems, and the personal information we hold from unauthorized access, misuse, and fraud.
To Comply with Legal Obligations: To meet any legal or regulatory requirements applicable to our operations, including reporting obligations to authorities or fulfilling requests from law enforcement.

Legal Basis for Processing Your Information

We rely on the following legal bases for processing your personal information, depending on the context of the collection and the type of data:

Consent: Where you have given explicit, informed, and unambiguous consent for specific processing activities, especially for sensitive personal data (e.g., related to health or socio-economic status) or for sharing your success stories. You have the right to withdraw your consent at any time.
Performance of a Contract or Pre-Contractual Steps: Where processing is necessary for the performance of a contract with you (e.g., for program participation) or to take steps at your request before entering into such a contract (e.g., processing a job application).
Legitimate Interests: Where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that these interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include:
- Operating and improving our website and services.
- Administering our programs and ensuring their effective delivery.
- Communicating with you about our mission and impact.
- Protecting our organization, our users, and the public from harm or fraud.
- Analyzing website usage to enhance user experience and functionality.
Legal Obligation: Where processing is necessary for compliance with a legal obligation to which Innova is subject (e.g., accounting, reporting, or other regulatory requirements).
Vital Interests: In rare circumstances, where processing is necessary to protect your vital interests or the vital interests of another person (e.g., in an emergency situation).

How We Share Your Information

We understand the importance of your privacy and are committed to transparently explaining when and how your information may be shared. We only share information when necessary, with appropriate safeguards in place.

With Our Program Partners and Stakeholders: We collaborate with a diverse range of partners and stakeholders to deliver our programs and maximize impact. Your information may be shared with:
- Local NGOs and Community-Based Organizations: For outreach, beneficiary identification and verification, understanding local contexts, co-delivering training, or providing complementary support services.
- Educational Institutions & Training Centers: For curriculum alignment, hosting training sessions, or referring youth.
- International NGOs (INGOs) and UN Agencies: For resource sharing, technical expertise exchange, referrals, strategic alignment, and participation in coordination mechanisms.
- Tech Refurbishment Companies: For sourcing, repairing, or ensuring the quality of devices for the SocialTech Exchange.
- Corporate Partners: For offering financial support, donating hardware, providing technical expertise, or potentially offering internships/job opportunities for program graduates.
Any such sharing will be governed by appropriate data processing agreements or joint controller agreements to ensure your data is protected.
With Service Providers: We engage third-party service providers to perform functions on our behalf, such as website hosting, data analytics, email delivery, payment processing, customer relationship management (CRM) systems, and form builders. These providers are granted access to personal information only to the extent necessary to perform their functions and are contractually obligated to protect it.
For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency request), or to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or other individuals.
With Your Explicit Consent: We may share your information for any other purpose disclosed to you at the time of collection, provided we have obtained your explicit consent (e.g., sharing your "success story" to demonstrate impact and encourage further donations).
Business Transfers: In the unlikely event of a reorganization, merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such transfer and any changes to the privacy policy.

Data Security

Innova is committed to protecting your personal information. We implement robust technical and organizational security measures designed to safeguard the data we collect against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to, encryption, access controls, secure networks, and regular security assessments. We continuously review and update our security practices to adapt to evolving threats and technologies.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods depend on the type of data and the purpose of its processing. For example, program participation data will be retained for the duration of the program and for a reasonable period thereafter for impact assessment and reporting. Job application data will be retained for the duration of the recruitment process and for a limited period thereafter unless you consent to longer retention for future opportunities. Once data is no longer required, we will securely delete or anonymize it.

Your Data Protection Rights

As an individual whose personal data we process, you have certain rights concerning your information, consistent with global best practices for data protection (such as GDPR principles). To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond to your request in accordance with applicable laws.

Right to Access: You have the right to request a copy of the personal information we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal information under certain circumstances (e.g., when the data is no longer necessary for the purposes for which it was collected).
Right to Restrict Processing: You have the right to request that we limit the way we use your personal information in certain situations (e.g., if you contest the accuracy of the data).
Right to Object to Processing: You have the right to object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
Right to Data Portability: You have the right to request that we transfer your personal information to another organization, or directly to you, in a structured, commonly used, and machine-readable format, where technically feasible.
Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Children's Privacy (Youth Data)

Innova’s programs primarily target youth, generally defined as individuals between 15 and 35 years of age. We recognize the need for additional safeguards when processing the personal data of minors (individuals under 18 years old). We are committed to protecting the privacy of all youth who interact with our programs and website.

Where required by applicable laws, and particularly for sensitive data or certain types of program participation, we will seek verifiable parental or guardian consent for the processing of personal information of individuals under the age of 18.

We strive to ensure that our data collection and processing methods for youth are transparent, age-appropriate, and prioritize their best interests.

International Data Transfers

Given Innova's worldwide and international operational scope, and our "fully digital model", your personal information may be transferred to, stored, and processed in countries other than your own, including countries outside of Syria or the European Economic Area (EEA), where data protection laws may differ.

When we transfer personal data internationally, we implement appropriate safeguards to ensure your data receives a similar level of protection. These safeguards may include:

Transferring data to countries deemed by relevant authorities (e.g., the European Commission) to provide an adequate level of data protection.
Using specific contracts approved by relevant authorities (e.g., Standard Contractual Clauses for transfers out of the EEA) which give personal data the same protection it has in the EEA.
Relying on other lawful mechanisms for international data transfers under applicable data protection laws.

Cookies and Other Tracking Technologies

Our website uses "cookies" and similar tracking technologies (like web beacons and pixels) to enhance your Browse experience, analyze site usage, and support our operational functions.

What are cookies?

Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

Your Consent

We will only apply cookies and other non-essential tracking technologies with your informed approval beforehand, typically through a consent banner or pop-up when you first visit our website. You will have the option to accept or decline certain types of cookies.

Types of Cookies We May Use

Strictly Necessary Cookies: Essential for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences.
Analytics/Performance Cookies: Allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
Functionality Cookies: Enable the website to provide enhanced functionality and personalization (e.g., remembering choices you make).
Targeting/Advertising Cookies: May be set through our site by our advertising partners to build a profile of your interests and show you relevant adverts on other sites.

Managing Your Cookie Preferences

Most web browsers allow some control of most cookies through the browser settings. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

Links to Other Websites

Our website may contain links to other websites that are not operated by us. This Privacy Policy applies only to Innova’s website and operations. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you by posting the updated policy on our website and updating the "Effective Date" at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, or if you wish to exercise any of your data protection rights, please do not hesitate to contact us:

Email: info@innova-labs.org