Data Protection and Privacy Notice

FIRST SEEN 2026-07-29 · VERSION 20260729_rev01 · COMPARED WITH 20250401_rev01

Full text changes — 20250401_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+##### **1\. Introduction**
+##### **Introduction**
+FAO is committed to treat your personal data fairly, with integrity, responsibility, security, and transparency. FAO collects and processes personal data in accordance with its internal rules and procedures on the protection of data, to the exclusion of any single national system of law.
+FAO is committed to process **data** fairly, with integrity, responsibility, security, and transparency. We collect and process data - **personal data and sensitive non-personal data** - solely in accordance with our internal data protection rules and procedures, to the exclusion of any single national or regional system of law. This means we handle information in line with FAO's own [**Data Protection Policy**](https://www.fao.org/fileadmin/user_upload/legal/docs/AC2022-06.pdf) **(DPP)** and not under any national, regional jurisdiction. We process data only for legitimate purposes related to the mandate of the Organization, and we apply the highest standards to safeguard your privacy.
+This Data Protection and Privacy Notice describes what personal information we may collect and process, the reason for processing, how we use, process and ensure protection of all data provided. It also sets out the options for you to request access, correction, deletion and to object to your data being processed by FAO.
+FAO may provide this Notice in different formats. In situations where data is collected offline or verbally (for instance, via phone or in person during field projects), we will inform you of the key points of this Notice and let you know how to access the full text for more details. Regardless of how we collect your data, we handle it according to the principles in this Notice.
+##### **2\. Scope of processing activities**
+##### **Scope**
+This Data Protection and Privacy Notice applies to the:
+This Notice applies to all personal data that FAO collects in the below contexts. It covers the data of:
+a. web-users visiting FAO websites (within the "fao.org" domain name, or any other domain officially owned by FAO) and other online services including FAO social media pages
+b. participants registering for, and attending, FAO events including virtual events
+c. personnel and guests entering FAO premises (HQ and decentralized offices)
+d. subscribers to FAO newsletters
+e. users accessing FAO Knowledge Repository
+f. users accessing FAO databases, systems, blogs, forum and other similar tools
+g. competitors responding to FAO's contests.
+- **Website Users:** individuals visiting FAO websites (within the "fao.org" domain or other official FAO domains), and users interacting with FAO's official pages on social media platforms.
+In addition to being governed by the [**FAO Terms and Conditions**](https://www.fao.org/contact-us/terms/en/), individual platforms or tools on FAO's website may have additional dedicated terms of use. In case of conflict, the present Data Protection and Policy Notice shall apply. For processing activities using FAO apps, please refer to the [**FAO Privacy Policy for the use of FAO Apps**.](https://www.fao.org/contact-us/privacy-policy/en/)
+- **Event Participants:** individuals registering to and/or attending FAO events, conferences, webinars, workshops, or training sessions (including virtual events).
+- **Visitors to FAO Premises:** individuals (personnel and guests) entering FAO premises, offices or facilities, such as guests, meeting attendees, or contractors (whose data may be collected for security and access management).
+- **Newsletter Subscribers:** individuals subscribing to FAO newsletters, email updates, or mailing lists.
+- **Platform/Database Users:** individuals creating accounts to access FAO knowledge repositories, databases, forums, or other online systems managed by FAO.
+- **Contest or Survey Respondents:** individuals participating in FAO-organized contests, competitions, or responding to FAO surveys and questionnaires.
+- **Media Subjects:** individuals whose images, video, audio or voice are captured by FAO during FAO activities.
+- **Project Beneficiaries**: individuals whose personal data is collected in the context of FAO's field projects or programmes. This includes persons benefiting from FAO assistance (e.g. recipients of aid, training participants in the field).
+- **Project Partners**: if an individual's personal data is collected by an FAO implementing partner or service provider (and not directly by FAO), generally the partner's own privacy notice will apply to that data. However, if that partner is processing such data on FAO's behalf - i.e. under an FAO Letter of Agreement (LoA) with a Data Processing Appendix (DPA) - then the data is handled according to FAO's instructions and this FAO Data Protection and Privacy Notice applies. In those cases, the partner must follow FAO's Data Protection Policy and the terms of our agreement to protect the data.
+If you visit FAO's website, you may notice links that may direct you to websites and online platforms managed by third parties. The processing of personal data on the third parties' platforms, including the social media platforms that host FAO's social media pages, are governed by their own privacy policies.
+FAO's services and websites are not directed to minors. We do not knowingly collect personal data from children without consent from a parent or guardian. If you are a minor, please do not provide your data without your guardian's permission.
+##### **3\. What data do we collect and process?**
+This Notice also applies when FAO **obtains personal data about individuals from third-party sources** (not directly from the individual); in such cases, FAO will inform those individuals of the data processing where required, consistent with this Notice.
+As reflected in the [**Terms and Conditions**](https://www.fao.org/contact-us/terms/en/) on FAO's website, except for authorized investigations and to maintain required correspondence files, no other attempts are made to identify individual users or their usage habits. Raw data logs are used to determine the number of users and, occasionally, which general domains are accessing the FAO website. When you visit the FAO website, FAO uses third parties' platforms that collect anonymous information about users' browsing behaviour when users visit the website, through the use of cookies. By using the FAO website, users agree that FAO can place cookies on users' computer, mobile phone or handheld devices.
+In addition to being governed by the [**FAO Terms and Conditions**](https://www.fao.org/contact-us/terms/en) **(which set forth the conditions for use of FAO websites and online services)**, specific FAO platforms or tools may present additional terms of use or privacy information. In case of any conflict, this Notice will apply for data protection matters. For processing activities using FAO apps, please refer to the [**FAO Privacy Policy for the use of FAO Apps**](https://www.fao.org/contact-us/privacy-policy-applications-use/en) (which describes data processing in FAO's mobile applications). For matters related to intellectual property of content or data provided through FAO platforms, please refer to the [**FAO Terms and Conditions**](https://www.fao.org/contact-us/terms/en).
+There may be specific platforms, apps, tools or activities where FAO asks you to provide personal identifiable information (for example, amongst others, full name, date of birth, email and/or postal address, phone number, position/title, company/organisation). This would be for the following processing activities:
+FAO websites may contain links to third-party sites or services (for example, an external social media page). If you follow those links, be aware that any personal data you provide on those external platforms is subject to the third parties' privacy policies, not FAO's, as FAO has no control over those sites.
+. Contacting FAO through FAO website, emails, and other means.
+. Subscribing FAO newsletters.
+. Registering to participate in FAO events.
+. Downloading FAO apps (see [**Privacy Policy for the use of FAO application**](https://www.fao.org/contact-us/privacy-policy/en/)).
+. Registering to access FAO databases, blogs, forum.
+This Notice concerns how we handle personal data about individuals. While FAO also protects internal sensitive non-personal data under the same principles, such data is not about identifiable persons and thus is outside the scope of individual privacy outlined here.
+##### **4\. Why do we collect your data?**
+##### **What data we collect and how**
+FAO will only collect and process your personal data for the purpose of FAO activities undertaken within the context of its mandate and in line with its legal framework. So, we may collect your personal data for one or more of the following purposes:
+The type of information we collect depends on your interaction with FAO. **We only ask for information that is relevant and necessary for the purpose stated.** In general, you may directly provide us with **personal details and contact information;** your full name, title, affiliation or organization, postal address, email address, telephone number, and country, are typically requested when you fill out a form or register to an FAO service. For example:
+- To allow you to contact us and/or receive information from us;
+- To organise or promote FAO events and/or activities;
+- To allow you to register to participate in events we organise or co-organise;
+- To analyse web statistics and log files, with the aim of improving the functioning of our website;
+- To give you access to FAO apps or other platforms;
+- To send you FAO newsletters.
+- If you **contact FAO** with an inquiry (through ServiceNow, our website "Contact us" form or by email), we will ask for your name and email and any details that help us respond to you.
+- If you **subscribe to a newsletter** or mailing list, we will collect your email address (and possibly your name) to send you the updates you requested.
+- If you **register to an FAO event or training**, we may ask for your name, contact details, job title, organization, and any other information needed to manage your participation (e.g. preferences, or, for in-person events, perhaps identification details for security).
+##### **5\. Who has access to your personal data and to whom is it disclosed?**
+**Account information:** if you create an account on an FAO system (for example, to access a restricted database, forum, or to use an FAO mobile application), we will collect the credentials and information necessary to set up and maintain your user account (such as username, email, password). This may also include profile information you choose to provide in such systems.
+Any information provided to FAO by users is managed with utmost care and security. It is not used in any manner other than that set out in this Data Protection and Privacy Notice, or in any additional site-specific policies, without users' consent. All FAO employees who have access to, or are associated with, the processing of personal data are under strict obligations of confidentiality in respect of official business matters, including when processing personal data.
+**Survey or contest responses:** if you take part in a survey, consultation, or contest, we will collect your responses and any personal data you include in them. This could range from opinions and feedback to contact information for contest winners. Participation in these is voluntary, and you will be told what data is being collected when you enter.
+Depending on the purpose for which we process your personal data, we may share the necessary information with selected third parties (duly authorized partners or service providers) to perform services for FAO. We make every effort to ensure that those third parties afford a level of protection and safeguards that are the same as or comparable to FAO.
+**Media (photographs, videos, audio, voice):** if you engage in an FAO project or event where photographs or recordings are taken, and you have given consent for this, we may collect your image, video, audio or voice. Providing personal media is entirely optional and done with your permission. We will ask you to fill out a dedicated Consent & Release Form.
+##### **6\. How long do we keep your data?**
+**Professional or background information:** in certain cases, FAO may ask for information about your professional qualifications or background - for instance, if you are contributing expertise to a technical forum or collaborating as a partner. This might include your CV, areas of expertise, or publications. Such data is usually provided directly by you in a professional context.
+Your personal data will be kept by FAO and its authorized partners and service providers only for as long as necessary for purposes set out in this Notice in accordance with FAO rules.
+**Project beneficiaries:** if you are participating in an FAO project (for example, as a beneficiary receiving agricultural assistance or cash transfers), we may collect personal information needed to carry out that project. This could include your name, contact details, and information relevant to determine eligibility or deliver support (e.g. your occupation, household size, or areas of need). We will inform you at the time of collection what data is required and why. In some cases, we might collect this information through our partners on the ground but rest assured your data is handled with the same care as under this Notice.
+##### **7\. How do we ensure the safeguards of your data?**
+When you visit FAO premises, certain **personal data may be collected for security purposes**. For example, you may be asked to provide identification details at the entrance, and your image may be captured by Closed-Circuit Television (CCTV) cameras on FAO premises for safety and security monitoring.
+To prevent unauthorized access, use or disclosure, maintain data accuracy, and ensure the correct use of data, FAO applies adequate security measures and appropriate physical, electronic, and managerial procedures to safeguard and secure the information we process. These measures and procedures are consistent with FAO's rules, policies and practice, which are aligned with international standards and practices.
+**Automatically Collected Data:** When you use our websites or online platforms, we also collect some data automatically to ensure the sites function properly and to help us improve them. This includes, for example, technical information like your IP address, browser type, operating system, referring website, pages accessed, and the dates/times of access. We use cookies and similar technologies (as described in FAO's website [**Terms and Conditions**](https://www.fao.org/contact-us/terms/en)) to gather some of this information. This usage data is generally analysed in aggregate form and is not used to identify you as an individual. By using our websites, you agree to FAO's use of cookies and analytics for these purposes. You have the option to disable cookies in your browser settings, though some features of our sites may not function fully without them.
+##### **8\. Requests related to your data**
+**Data from Other Sources:** In some situations, FAO may receive information about you from a third party instead of directly from you. For example, we might partner with another organization that shares participant lists for a jointly organized event, or we could receive beneficiary data from a government or NGO in the context of an aid project. If we obtain your personal data from someone else, **we will treat that data in accordance with this Notice** and our data protection policy. We will also ensure that the original collector had the authority or your consent to share your data with us. If required (and feasible), FAO will inform you that we have received your data from another source and the purpose for which we will use it.
+In accordance with FAO internal rules and procedures on data protection, you may make the following requests with regard to your data:
+##### **Why we collect your data**
+a. Access. You may request confirmation of whether your data is being processed and, if that is the case, request access to your data.
+b. Correction. You may request correction or updating of your data.
+c. Deletion. You may request deletion of your data. Requests for deletion will be considered, taking into account whether (i) the data is no longer necessary for the processing purpose, or (ii) you have withdrawn your consent to the data processing and there is no other legitimate basis for processing.
+d. Objection. If you have been asked, but not yet provided your data, you may object to having your data processed. In this case, you should provide compelling legitimate grounds for your objection.
+FAO collects and uses data **only for purposes that align with our mandate and the expectations of the provided service**. The main purposes include:
+##### **9\. Contact us**
+- **To respond to your inquiries or requests:** If you contact us for information or assistance, we use your contact details and any info you provided, to communicate with you and address your needs (for example, answering a question about FAO's work or resolving an issue you reported).
+- **To facilitate your participation in FAO events and activities:** We process registration information to confirm your attendance, prepare necessary arrangements, provide updates, and follow up after events such as conferences, trainings, webinars, campaigns or meetings that you attend. For instance, if you sign up for a workshop, we'll use your details to send you logistical information, materials, and post-event feedback forms.
+- **To allow access to FAO platforms and services:** We use personal data to create or manage your user account on our systems (e.g., FAO data portals, e-learning platforms, discussion forums). This ensures authorized access and personalized experience. We might also use your information to provide you with specific services you requested, such as downloading certain publications or datasets that require user identification.
+- **To send you newsletters, updates or announcements:** If you subscribe to newsletters or mailing lists, we use your email (and name, if provided) to deliver the content you subscribed to - for example, FAO project updates, press releases, or topic-specific newsletters. You can unsubscribe at any time (each message we send includes an unsubscribe option).
+- **To deliver humanitarian or development assistance and manage FAO projects**: For instance, using your information to provide services or benefits you signed up for as part of an FAO programme, to monitor the progress of a project you are involved in, or to follow up with you for feedback on the assistance provided.
+- **To conduct surveys, contests, or gather feedback:** When we run voluntary surveys or contests, we process the data you provide to record your responses or entries, analyse results, announce winners, etc. For example, your opinions in a survey help shape our programs (aggregated analysis), and your contact info might be used to follow up on survey outcomes or to send a prize in a contest.
+- **To promote FAO's mission and share impact stories:** With consent, we use testimonials, success stories, photos or videos featuring individuals to highlight the impact of our work. For instance, we might publish a story on our website or social media about a project beneficiary (with their permission) to illustrate how FAO projects are making a difference. Any such use of personal media will always respect the consent given.
+- **To analyse and improve our website and services:** We use data like website usage statistics and feedback to understand how our online content is performing and how users engage with us. This helps us improve navigation, content quality, and user experience on our digital platforms. (This purpose involves aggregated data analysis and does not focus on individual personal profiles).
+- **Other mission-related purposes:** We may process data for additional purposes that are still within the scope of FAO's mandate and your expectations. For example, if you are a subject matter expert collaborating with us, we might use your information to facilitate that collaboration. We will always inform you of such purposes at the time of data collection.
+- **To** **ensure the security of FAO premises and systems** (for example, managing access controls and CCTV surveillance).
+If you wish to request for access, correction, deletion, or to object to the use of your personal data, or if you have concerns or require more information regarding the personal data you have provided to us, please submit your requests through Service Now by selecting the Data Privacy catalog **[here](https://fao.service-now.com/csp)**.
+FAO will **not use your personal data for any purpose that is incompatible with the original reasons we collected it**. We do not engage in profiling or automated decision-making that could significantly affect you. If for some reason we ever need to process your data for a new purpose not covered above, we will inform you and, if necessary, seek your consent before doing so. Furthermore, we do **not** use your data for commercial marketing to you, nor do we sell your personal data to third parties.
+##### **10\. Changes to data protection and privacy notice**
+##### **Who has access to your data and how we share it**
+FAO may, at its own discretion, update this Data Protection and Privacy Notice, to reflect changes in our rules and practices.
+**Within FAO:** Access to your personal data is restricted to authorized FAO personnel who need that information to perform their duties in line with the purposes described. All FAO employees and collaborators are **bound by confidentiality obligations** and are required to protect personal data as part of their official responsibilities. FAO implements internal access controls to ensure that only the appropriate people can see your information.
+##### **11\. Privileges and Immunities and applicable law**
+Because FAO is a global organization, your data may be stored or processed on servers in different countries. Regardless of location, all FAO data facilities and service providers are subject to the same security standards and FAO's legal protections (privileges and immunities).
+Nothing in this Data Protection and Privacy Notice shall be construed as constituting a waiver of the privileges or immunities of FAO, nor as its acceptance of the jurisdiction of the courts of any country over disputes arising out of this Notice. FAO's processing of personal data is not governed by any national or regional system of law.
+**Third-Party Partners and Service Providers:** FAO may need to share some of your personal data with outside parties in certain scenarios, but _only_ for the purposes explained in this Notice and _only_ with entities we trust. Examples include:
+- An **implementing partner or service provider** assisting in an FAO project, who needs certain information to deliver assistance or services to you on FAO's behalf (for example, a local NGO helping us distribute farming tools to beneficiaries).
+- An **event co-organizer or sponsor** that needs a list of participants for venue security or catering arrangements.
+- A **mailing service provider** that distributes our newsletter on our behalf.
+- A **research partner** assisting in analysing survey results.
+- An **IT service provider or cloud platform** that hosts FAO's databases or websites.
+In all cases, FAO does **not** permit any third party to use your information for their own purposes, such parties are only given the information necessary for their task. When we share data, it is solely to carry out tasks on FAO's instructions. We make every effort to ensure that any third party we work with affords a level of data protection and security safeguard that is equal to or **comparable to FAO's standards**. This is typically enforced through contractual agreements. These partners or contractors are obligated to handle your data confidentially and securely, and to use it only for the specified purpose we've agreed upon.
+FAO **does not sell, rent, or trade your personal information** to any external organization. We also do not share your data with advertisers or for any commercial promotion unrelated to FAO's humanitarian and development objectives. Any sharing of data is rooted in FAO's mandate and is done with respect for your privacy.
+##### **How long we keep your data**
+FAO will retain your personal data **only for as long as it is necessary** to fulfil the purposes for which it was collected, in accordance with FAO's rules. We have internal policies and schedules that define retention periods for different categories of data. These consider the original purpose and any legal or administrative requirements. In practice:
+- If you provided data for a one-time event or query, we will generally delete or anonymize that data after it is no longer needed for follow-up. For example, if you registered for a webinar, your registration data might be deleted from our active list after the webinar and any immediate follow-up, unless you opt-in to other communications.
+- If you are a long-term subscriber or platform user, we retain your data while you remain subscribed or your account is active. If you unsubscribe or deactivate your account, we will remove or anonymize your personal data within a reasonable time after your request, unless retention is required for legitimate purposes.
+- FAO periodically reviews the personal data we hold. When we determine that certain information is no longer required, we securely erase, destroy, or anonymize it.
+There may be circumstances that necessitate retaining data for a longer duration, for instance:
+- **Legal or compliance reasons:** We might keep certain records to comply with (financial) auditing rules, donor requirements, or other legal, regulatory, operational, or institutional obligations. This includes, but is not limited to, obligations related to reporting, archiving, or compliance with FAO's internal rules and procedures, including those arising from its status as a specialized agency of the United Nations.
+- **Public interest archiving, research, or statistics:** Occasionally, personal data (especially if aggregated or pseudonymized) could be kept for historical analysis, documenting FAO's activities, or research purposes in line with our mandate. In such cases, FAO will ensure appropriate safeguards are in place in accordance with our Data Protection Policy.
+- **Protection of FAO's rights:** We may retain data to establish, exercise, or defend against potential legal claims.
+Even in the above cases, data will not be kept indefinitely. It will be archived securely and purged once the necessity expires.
+Importantly, if you **withdraw your consent** for a particular processing, or request deletion of your data, FAO will evaluate if any of the above exceptions apply. If not, we will delete your personal data. If an exception applies (for example, if we must retain certain information for an ongoing project or legal requirement), we will inform you about why we need to retain it.
+FAO does **not** keep personal data longer than justified. We aim to ensure that your data is removed when it is no longer needed, thus reducing any privacy risks over time.
+##### **How we protect your data**
+FAO takes appropriate and diligent measures to safeguard your personal data. We have implemented a range of **technical, physical, and organizational security measures** to prevent unauthorized access, disclosure, alteration, or destruction of your information. These measures include, for example:
+- Secure IT infrastructure with firewalls, encryption in transit and at rest where applicable, and regular security monitoring.
+- Access control mechanisms to ensure that only authorized individuals can access personal data on a need-to-know basis. For instance, your data is stored in secure systems and only accessible by personnel or systems that require it for the intended purpose.
+- Training and policies for FAO personnel and partners on data protection and confidentiality, so that everyone handling personal data is aware of their responsibilities.
+- Procedures to address any suspected data security incidents, including data breach response plans.
+These security measures and procedures are continually reviewed and updated in line with FAO's rules and industry best practices, which are aligned with international standards. FAO strives to use the most effective safeguards available to protect your data.
+If FAO engages external service providers (e.g., for data hosting or email distribution), we contractually require them to also implement **stringent security measures** to protect your data. We carefully select reputable providers and assess their security controls. Your data receives the same level of protection with these providers as it does on FAO systems.
+In the unlikely event of a data breach that poses a significant risk (for example, a security incident leading to accidental or unlawful loss or disclosure of your personal data), FAO will follow its internal incident response procedures. This may include informing affected individuals and taking steps to mitigate any potential harm, in line with our obligations and commitment to accountability.
+##### **Requests related to your data**
+In accordance with FAO's DPP you may submit certain requests with respect to personal data that we hold about you. Specifically, you may request the following:
+. **Access:** You can ask us to confirm whether we are processing your personal data, and if so, you can request access to that data. We will provide you with a copy of the personal data we have about you, as well as information about how we use it.
+. **Correction (Rectification):** If you believe that any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. We encourage you to keep your information up to date and will make corrections promptly when notified.
+. **Deletion (Erasure):** You may request that we delete your personal data. If you no longer want FAO to use your data, and there is no necessary reason for us to keep it, you can ask us to remove it. We will evaluate such requests on a case-by-case basis in line with our retention rules and legal requirements. If the data is no longer needed for any legitimate purpose (and there's no overriding requirement to retain it), we will delete or anonymise it and confirm that to you.
+. **Objection or Withdraw Consent:**
+- If we have asked for your consent to process your data, you can **withdraw that consent at any time**. For example, if you consented to receive a newsletter, you can unsubscribe and we will stop sending it and remove your contact from the mailing list.
+- In certain situations, even if you initially agreed to provide data, you may **object to its continued processing**. For instance, if you provided data for a research project and later change your mind, or if FAO is conducting an activity in the public interest and you have personal grounds to object, you can inform us. We will consider your objection and stop or limit processing unless we have a compelling reason not to (consistent with our DPP).
+- Additionally, if you do not wish to provide data in the first place when we request it (for something non-mandatory), you have the option to refuse. Providing personal data to FAO is generally voluntary. _You will not be penalized for choosing not to share certain information_, though please understand that we might not be able to deliver a service or include you in an activity if we don't have the necessary data. (For example, if you object to us keeping your email, we cannot send you email updates.)
+You have control over your personal data that we hold, and we will respect and facilitate your request to access it, correct it, delete it, or object to its use, as appropriate.
+These requests are subject to certain limitations under FAO's DPP. In some cases, we may have legitimate grounds to deny a request (for example, we cannot delete records that we are required to keep, or we might not disclose data that involves others' privacy). However, we will always respond to you and explain any refusal or limitation of your request.
+FAO also applies its data protection principles outlined in this Notice to other internal sensitive non-personal data it handles, in line with its Data Protection Policy, even though such data is not subject to the individual requests described here.
+##### **How to submit a request or contact us**
+If you wish to submit any of the requests described above, or if you have any questions, concerns, or complaints regarding how your personal data is handled, please reach out to us. The channel to contact us about data protection matters is the **ServiceNow Portal.** You can submit your request or query through our online form by visiting **https://fao.service-now.com/csp** and selecting the "Data Privacy" option. This will ensure your request is logged and addressed by FAO's Data Protection Unit (DPU).
+To protect your privacy, we might need to verify your identity before fulfilling certain requests (for example, access or deletion requests) - this is to ensure we don't disclose your data to someone else. We will respond to your inquiry as soon as practicable and at the latest within a reasonable timeframe in accordance with our internal procedures.
+If you have made a request to access, correct, delete your data, or objected to its continued processing, we will inform you of the action taken. If for some reason we cannot fulfil your request (due to an applicable exception), we will explain the rationale to you. Rest assured, we take your requests seriously and aim to facilitate them to the fullest extent possible.
+##### **Changes to this data protection and privacy notice**
+FAO may update or revise this Data Protection and Privacy Notice from time to time. Such changes could reflect new legal requirements, improvements in our data protection practices, or adjustments to our operations. We encourage you to review this Notice periodically to stay informed about how we are protecting your information.
+If we make significant changes, we may provide a more prominent notice (such as posting a notice on our website's homepage or sending an email notification for major changes). However, minor updates may simply be reflected by a new effective date at the top of the Notice. **Nothing in any updated Notice will reduce your rights or our commitments to protecting your data as outlined here**. We will always indicate the date of the latest revision at the top of the Notice for reference.
+##### **Privileges and immunities & applicable law**
+Nothing in this Data Protection and Privacy Notice shall be construed as a waiver of the privileges or immunities of FAO, nor does it imply acceptance of the jurisdiction of any national courts. FAO is an international organization with its own governing rules. The processing of personal data by FAO is **therefore not subject to any single national or regional data protection law.** Instead, it is governed by FAO's internal legal framework (including the FAO Data Protection Policy and related procedures) and by the general principles of international law. This Notice is provided in the spirit of transparency and accountability to inform you how we handle your data, but it does not create legal obligations for FAO under external laws.