Privacy Policy & Terms of Service
1. Who we are
These terms and conditions (“Terms”) govern your access to and use of the climate-resilience-platform.org and app.climate-resilience-platform.org websites (together, the “Site”), a Site operated by the Alliance of Bioversity International and the International Center for Tropical Agriculture (CIAT), a research-for-development organization with headquarters in Via di San Domenico, 1, 00153, Rome, Italy, and a member of CGIAR. The International Plant Genetic Resources Institute, which operates under the name Bioversity International (Bioversity), is a non-profit international organization, domiciled at Via di San Domenico, 1, 00153, Rome, Italy. Centro Internacional de Agricultura Tropical (CIAT) is a non-profit international organization, domiciled at Km 17 Recta Cali-Palmira, Valle del Cauca, Colombia. CIAT and BIOVERSITY entered into a partnership agreement to operate as the Alliance of Bioversity International and CIAT, (“The Alliance”), in force since January 1, 2020.
The Site comprises the Climate Resilience Platform (“CRP”, “the Platform”), which includes the Open Platform, freely and publicly accessible, and the Members Platform, available to organizations that separately sign up as members.
By accessing or using the Site, you agree to be bound by these Terms. In addition, regional, national or international laws may apply to the access and use of this Site and you are responsible to comply with them.
If you do not agree to be bound by these Terms, please exit the Site. In addition, specific terms of use may apply to specific materials, data or information available through the Site, in which case your access to such materials shall be governed by these Terms, subject to such specific terms of use.
The Alliance reserves the right to modify these Terms in its discretion at any time, such modifications being effective when posted.
If you have any questions or concerns about these Terms, which include our Privacy and Data Protection Policy and Use of the Site, please contact us by post at the below address or by email at bioversity-ds-requests@cgiar.org
Via di San Domenico 1, 00153 Rome, Italy
2. General aspects
The Alliance of Bioversity International and CIAT aims at opening up and widely sharing the results and products of research for development endeavors. In the process of better communicating with users, the Alliance, through some features offered through this Site, collects, stores, protects, handles and otherwise uses certain types of information such as name, surname, email address, organization and role, for users of organizations that sign up as members of the Platform.
The Alliance’s standards for integrity, transparency and equity will guide all collected information. We will make every reasonable effort to protect Personally Identifiable Information or Personal Data provided by you and handle collected information appropriately.
Read this Policy carefully before you provide any Personal Data or Personally Identifiable Information to us. Please proceed if you find the following terms agreeable. Otherwise, you are always welcome to peruse our Site without sharing your Personal Data with us.
3. Definitions
These are key terms used in this Policy:
“Personally Identifiable Information” or “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, psychological, genetic, mental, economic, cultural, or social identity of that natural person.
“Data Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
“Data Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
“Data Subject” is the natural person whose personal data is collected and/or processed.
“Member Data” means data uploaded to or generated within the Members Platform by or for a member organization, including production areas, sourcing regions, supplier locations, asset and portfolio data, and the analytical outputs derived from it.
4. What type of Personal Data do we collect from users?
All visitors are free to peruse and access the publicly available information on our Site, without providing any Personally Identifiable Information.
In addition, we have access to and use data collected by PostHog such as the URL/domain name of any referring website, the time and date of your visit to the Site, the user's browser, operating system, and device. PostHog is configured to discard client IP addresses, so we do not store your IP address with the analytics data we hold. Your IP address is used only at the point of collection, to derive approximate location and to detect automated traffic, and is then discarded. The location information we store is approximate: country, region and city.
Where an organization signs up as a member, we also collect the following for its named users: name, surname, email address, organization, account status, and records of access and activity within the Members Platform. Visitors and Open Platform users do not have accounts and are not asked for this information.
The Members Platform additionally processes Member Data. The Members Platform is not designed to hold Personal Data, and member organizations are instructed not to upload it.
5. How is the information collected?
The Alliance uses third-party platforms to improve the experience of the user. These third-party platforms include PostHog.
PostHog uses cookies, which are small files transferred to your computer’s hard drive through your web browser (if you allow it) that enable the site’s or service provider’s systems to recognize your browser and capture and remember certain information (see section above). Please find PostHog’s Privacy Policy here. The purposes for which PostHog uses cookies include: 1. session Management: tracking user behavior within a single visit, to understand the sequence of pages they navigate; 2. Visitor Tracking: PostHog cookies help in identifying returning visitors and provide insights into user behavior across multiple visits, to enhance user experience and tailor content accordingly; 3. User Preferences: to store user preferences, such as language choices, thereby facilitating a more personalized browsing experience.
We will let you know if and when other data-collecting third party platforms are used in the future.
6. How do we use the collected information?
Whether as a Data Controller or as a Data Processor, we may use the information we collect from you as a Data Subject for the following purposes:
To personalize your experience and to allow us to deliver the type of content you are most interested in.
To stay in touch with you and provide updates.
To help diagnose and solve issues with the site in order to improve it and better serve you.
To follow up with you after correspondence (email inquiries), send information, respond to inquiries, and/or other requests or questions.
To create, administer and secure accounts on the Members Platform, and to provide the climate risk and yield impact analysis that members request.
In doing any of the above, your contact information and preferences are shared among specific and selected few Alliance staff, who have a responsibility and obligation to adhere to Alliance privacy policies.
7. What are cookies?
A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as language, font size and other display preferences) over a period of time, to keep the same settings whenever you come back to the site or browse from one page to another.
8. Do we use cookies? If so, what for?
Yes, the Site uses cookies provided by PostHog.
Session Management: We use cookies to track user behavior within a single visit, enabling the analysis of which pages users view in sequence. This aids us in understanding user engagement during their session on the website.
Visitor Tracking: We use cookies to identify returning visitors, facilitating the analysis of user behavior across multiple visits. This helps us understand user retention and patterns over time.
User Preferences: Through cookies, the website can store user preferences, such as language choices, contributing to a personalized browsing experience for users.
The Platform also uses strictly necessary cookies and local storage to keep members signed in, maintain sessions and secure the application. These are required for the Platform to work.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since each browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies.
9. How is the collected information shared?
The Alliance uses the information internally, mostly among selected and specific members of the team operating the Platform to perform the tasks mentioned above (see section 6). We do not sell, trade, or otherwise transfer Personally Identifiable Information to outside parties unless we specifically ask Data Subjects for their consent to do it and you as a Data Subject have provided it. We may engage partners and other parties to assist us in operating our website, conducting our business, or serving our users. If for these activities such parties needed some Personal Data, we would share it with them so long as they agree to keep this information confidential.
We may release information when it is necessary to comply with the law, enforce our Site policies, or protect ours or others’ rights, property or safety. In this line, the Alliance reserves the right to disclose Personal Data in case of a request by a competent authority to investigate illegal or fraudulent acts committed against third parties or against the Alliance.
Member Data is treated as confidential to the member organization that provides it and is not disclosed to other members in identifiable form. We may use aggregated or de-identified data derived from Member Data to improve the analysis, models and services we provide, as set out in the applicable member terms.
10. How do we store and safeguard your information?
For some of our internal systems, your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information.
Personal information that is collected and stored by third party services is protected according to the privacy policies of each of these providers. The Site and the Platform are hosted on Amazon Web Services in a United States region. Analytics data is processed by PostHog on its United States instance. Any personal information that is accessed by the Site from third-party service providers may be stored in Microsoft Office 365 platforms.
Where Personal Data is transferred to third parties located outside the European Economic Area, the Alliance relies on appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms, in accordance with applicable data protection laws.
11. Third-party links
Occasionally, at our discretion, we may include links to third-party services or providers on our website, or feature content from third-party sites. This Privacy Policy only applies to this Site. Third-party sites have separate and independent privacy policies. To the extent permitted by law, we assume neither responsibility for the content and activities of those linked sites, nor give warranties about their own data and information handling.
12. How long do we retain Personally Identifiable Information?
In accordance with our data retention policy, we will retain your Personal Data only for as long as is reasonably necessary to achieve the purposes for which it is collected and for our legal entitlements and legitimate business interests.
Information collected by external parties, such as information collected through cookies, the URL/domain name of any referring website, and so on is maintained according to their policies.
In particular: member account data is retained for the duration of the membership and then deleted or anonymised within 12 months of the account closing; Member Data is retained for the duration of the membership, made available for export for 30 days after termination, and then deleted within 90 days unless a longer period is agreed in writing; enquiry and demo request correspondence is retained for 24 months from last contact; and server and security logs are retained for 12 months.
13. User’s rights
If you have questions about your privacy rights, want to review any Personal Data that we maintain about you, correct, withdraw your consent, delete your Personal Data, lodge a complaint, or raise a concern, you can contact us at:
Email at bioversity-ds-requests@cgiar.org
Contact us at the following address:
Alliance of Bioversity International and CIAT
Via di San Domenico 1, 00153 Rome, Italy
However, you can also contact:
Italian Data Protection Authority via their website at https://www.garanteprivacy.it/web/guest/home_en or write to them at Piazza di Monte Citorio, 121 – 00186 Roma, Italy.
Colombian Data Protection Authority at Carrera 13 No. 27 – 00, Bogotá, Colombia.
Kenyan Data Protection authority at Britam Tower, 12th & 13th Floor, Hospital Road, Upper Hill – Nairobi, Kenya.
If you are a named user at a member organization, requests relating to Member Data are directed to your organization in the first instance.
14. Availability of the Privacy Policy and updates
This Privacy Policy is effective as of September 1, 2026 and available to you through our website at the URL https://climate-resilience-platform.org/privacy-policy for viewing, printing or downloading.
The Alliance reserves the right to amend the terms of this Policy at any time. We will post a note informing about any updates or amendments to our Policy at https://climate-resilience-platform.org/privacy-policy website.
15. Use of the Site
15.1. General aspects
These Terms address the conditions applicable to specific materials, data or information available through the Site of the Climate Resilience Platform, operated by the Alliance of Bioversity International and the International Center for Tropical Agriculture (CIAT), at https://climate-resilience-platform.org. In case, access and use to those materials, data or information is governed by specific terms, these Terms shall apply, subject to such specific terms of use.
By accessing and using this Site, you are agreeing to be bound by these Terms, all applicable laws and regulations, and agree that you are responsible for compliance with any applicable local laws.
If you do not agree with these Terms, refrain from accessing and using this site.
The materials contained in this Site are protected by applicable copyright and trademark law.
15.2. Copyright
Copyright © Bioversity International and CIAT (International Center for Tropical Agriculture)
Except for third party content, the Bioversity International and CIAT holds the title to the online resource and the materials and content uploaded and posted on the Site. Member Data and the analytical outputs generated for a member organization remain the confidential information of that organization.
15.3. Content
In general, all informational products at CGIAR level are regulated by the CGIAR Principles on the Management of Intellectual Assets and the CGIAR Open Access Policy (CGIAR Open Access and Data Management Policy, approved by Consortium Board October 2013).
