Privacy Policy

MÉDECINS SANS FRONTIÈRES NEW ZEALAND PRIVACY POLICY

Médecins Sans Frontières New Zealand (MSFNZ) respects your right to the protection of your personal information. This Privacy Policy details how we manage, collect, use, disclose and hold this information.

In this Privacy Policy, personal information, as defined in the New Zealand Privacy Act 2020 (as amended or replaced from time to time) (Privacy Act), means personal information about an identifiable individual.

This Privacy Policy applies in addition to, and does not limit, our rights and obligations under the Privacy Act or any specific authorisation that you provide to us when you interact with us or use our services.

By providing MSFNZ with personal information, or using our website or other services, you authorise us to collect, use and disclose your personal information in accordance with this Privacy Policy. If you are a company or other legal entity, references to “you” in this Privacy Policy are to your representatives and you confirm that your representatives have authorised you to provide us, or authorise us to collect, their personal information in accordance with this Privacy Policy and that you have informed them of their rights to access and request correction of their personal information, as set out below.

Part 1 – Personal information management

Why we collect your personal information and what it is used for

We only collect, use and disclose personal information where that information is reasonably necessary for purposes which are directly related to one or more of our functions or activities. These include:

  • Processing of donations and administrative purposes, e.g., receipting;
  • Recruitment of international mobile staff (IMS);
  • Ongoing employment and overseas deployment of IMS;
  • Recruitment of staff;
  • Ongoing employment of staff;
  • Communication with our supporters on events and our overseas operations;
  • MSF Australia (MSFA) Association membership management;
  • Procurement tender processes;
  • To better understand our donors;
  • Sharing signed petitions with government;
  • Marketing activities; and
  • Recruitment of volunteers.

In limited circumstances, our employees, consultants and contractors may collect health information from you in relation to specific services that are being or will be provided by us. We will only collect health information with your consent and will provide an additional statement to you about our collection, use and disclosure of such information.

Anonymity

You may request at any time that you remain anonymous when dealing with us or use a pseudonym, and to the extent that it is lawful and practicable for us to enable you to do so, we will accommodate that request. However, if personal information is not provided in full where we have indicated that it is required or when it is otherwise requested, we may not be able to process your donations, recruit you as international mobile staff, enable you to become a member of MSFA, or provide services to you, either in an effective manner or at all.

What we collect and how we collect it

We collect information, such as:

  • Name and physical/postal address;
  • Telephone/e-mail contact details;
  • Bank account/credit card numbers; and
  • Employment/education history/payroll information (job applicants);
  • Police checks for job applicants and supplier due diligence.

The personal information we collect varies depending on the purposes for which it was collected. For more information, see Part 2 of this Privacy Policy – “Specific Information Collection Details”.

It is voluntary to provide us with personal information. However, if you do not provide necessary information, we may not be able to provide particular services to you, or carry out our functions in connection with the purpose for which the information was collected (as described in Part 2 of this Privacy Policy – “Specific Information Collection Details”).

It is our usual practice to collect personal information directly from the individual. From time to time, we may also collect personal information indirectly, as further described in Part 2 of this Privacy Policy (“Specific Information Collection Details”), provided in each case that the indirect collection is authorised by the individual concerned, or it is otherwise permitted under the Privacy Act.

We may also collect anonymous traffic data on our website to improve our services.

If we have indirectly collected your personal information, you may access and correct any personal information we hold about you in accordance with the “Information Quality, Access and Correction” section of this Privacy Policy.

Information about other people

If you provide us with, or authorise us to collect and/or use personal information about another person, you confirm that they have authorised you to provide us, or authorised us to collect and/or use, their personal information in accordance with this Privacy Policy and that you have informed them of their rights to access their personal information, as set out in this Privacy Policy. In some circumstances, we may contact the individual directly to comply with our obligations under the Privacy Act, including to confirm that we have collected their personal information.

Storage of personal information

Personal Information that we collect is either held by us at our head office (refer to the Contact Us section below) or on our behalf. For example, some information we hold will be stored by service providers who operate in a variety of locations. Please refer to the section on “Disclosure Overseas” below for further detail. The use of these services, and the transfer of information overseas (if applicable) will not relieve us of our obligations under the Privacy Act and this Privacy Policy.

Disclosure

We only disclose personal information for the following purposes:

  • for any specific purpose for which it was given to us;
  • for purposes which are directly related to one of our functions or activities, including the purposes described in this Privacy Policy; or
  • where the disclosure is authorised by you or permitted by law;

or where one of the following situations apply:

  • we believe on reasonable grounds that disclosure is required to prevent or lessen a serious threat to your life or physical, mental or emotional health or that of another person;
  • we take appropriate action in relation to a reasonable suspicion of unlawful activity, or misconduct of a serious nature, that relates to our functions or activities;
  • disclosure is required to assist any entity, body or person to locate a person who has been reported as missing;
  • disclosure is made for the purpose of establishing, exercising or defending a legal or equitable claim; or
  • disclosure is made for the purposes of a confidential alternative dispute resolution process.

Transfer within MSF for the recruitment of international mobile staff

MSF is an international organisation working in more than 70 countries. MSF is made-up of 7 operational directorates, 28 associations and 1 international office (Geneva). During recruitment for overseas operations, personal information may be transferred between MSFA and the operational directorates/overseas operations, to facilitate the recruitment process. This personal information may include your health information, which we will not disclose without your consent, unless the disclosure is directly related to the purpose of collection. We will take all reasonable steps to ensure that MSF’s various operational directorates, sections and offices comply with the Privacy Act and this Privacy Policy when they handle your personal information and that they are only authorised to use your personal information for the purpose for which it was collected.

Transfer of information for hosted and contracted staff

MSFA enters into contracts with staff employed by other MSF entities and, in turn, MSFA staff enter into contracts with MSF entities to work overseas. To enable these arrangements, personal information relating to employment (including, but not limited to, contact details, employment contract details, salary and benefits, and where necessary, health information) may be transferred between MSFA and other MSF offices. We will not disclose your health information without your consent unless the disclosure is directly related to the purpose for which it was collected. MSFA will take all reasonable steps to ensure that any MSF office receiving this information complies with the Privacy Act and this Privacy Policy, and that your personal information is only used for the purpose for which it was collected.

Outsourcing

We may also use external service providers to provide us with certain outsourced services, such as helping us with our mailings. These service providers are required to sign confidentiality agreements to maintain the privacy of your information and we only disclose personal information to them to the extent necessary for them to perform the services we have requested. Some of these external service providers may be based overseas, for example, we receive account management services from a third party service provider which requires personal information of donors to be held in Australia and the United States of America. Please refer to the section below on “Disclosure Overseas” for further detail.

Where we do provide your personal information to such external service providers, we will take all reasonable steps to ensure that those external service providers comply with the Privacy Act and this Privacy Policy when they handle your personal information and are only authorised to use your personal information for the purpose for which it was collected.

Profiling

We (or our service providers on our behalf) may collate information about you and your preferences, and evaluate certain things about you, to create a profile to personalise our communication and interaction with you.

We (or our service providers on our behalf) may also use personal information to identify market segments and use that information for data analytics and direct marketing.

We use a variety of social media platforms such as Google Adwords Marketing Platform, and Meta, to run pay-per-click paid advertising campaigns as part of our online marketing efforts. This includes interest, behavioural, intent and demographic ad targeting using the information made available by Google and/or Meta.

We may also upload de-identified hashed data to external platforms for marketing to ensure you receive or are excluded from some communications to enable tailoring of your donor experience with MSF.

We do not engage in any automated profiling which may result in decisions having a legal or similar material impact on you.

Direct Marketing and Opting out

If you subscribe to receive marketing material from us, we may use your personal information to market to you until you unsubscribe. We may communicate with you by phone, email, social media platforms, SMS, messaging services and/or mail.

You can unsubscribe from receiving marketing communications at any time by contacting us at [email protected], calling 0508 633 324 or, using the unsubscribe link in the emails we send to you.

Where we have facilitated direct marketing to you from personal information we have obtained from a third party, you may also request we disclose the original source of the information.

If you unsubscribe from marketing material but are a MSFA Association member we may still send to you membership related communications and MSFA updates.

Data analytics

We (or our service providers on our behalf) may use your name, street address, email address and phone number to conduct data analytics, including the creation of look-alike audiences.

We use the results of data analytics for a range of purposes, including marketing, product and service development, and policy development.

We do not use sensitive information for data analytics.

Our primary analytics tool is Google Analytics which collects anonymous traffic data from our website.

Automated decision making and the use of AI

We may use computer programs to make or assist with decisions that might affect your rights or interests.

We will use and disclose the kinds of personal information described in this Privacy Policy in the operation of these computer programs.

We may also use and disclose the same kinds of personal information in our day-to-day operations, including to adapt, predict, recommend and personalise processes using artificial intelligence (‘AI’) technologies (including machine learning). Your personal information may be disclosed to service providers that we engage to provide us with and conduct AI, and other persons involved in our use of this kind of technology, including developers or owners of AI technologies.

Other circumstances

In relation to employees, contractors and volunteers, we may disclose personal information where it is required to meet our obligations under applicable workplace health and safety and workers’ compensation laws. This includes the provision of relevant information to our insurers (as applicable), ACC, medical practitioners, rehabilitation providers, and regulators, to ensure compliance with our legal obligations and to support you in the event of a workplace injury.

Disclosure Overseas

MSFNZ may transfer and store your personal information outside of New Zealand (including Australia) to:

  • Other MSF offices in a variety of locations;
  • Service providers who operate in a variety of locations.

MSFNZ will only disclose personal information to an entity outside of New Zealand if it has taken reasonable steps to ensure that the MSF entities and service providers who receive your personal information protect it in a way that, overall, provides comparable safeguards to those set out in the Privacy Act.

The countries we may transfer your personal information to are located in Africa, Asia, Caribbean, Central America, Europe, North America, Oceania and South America.

Information quality, access and correction

We take reasonable steps to make sure that the personal information we collect is accurate, complete and up-to-date. These steps include maintaining and updating personal information when we are advised by individuals that their personal information has changed and at other times as necessary.

You are in control of any personal information you provide to us. If at any time, you would like to correct the personal information we have about you or if you would like to change your preferences for contact from us, you can let us know by contacting us at the email, telephone number or postal addresses listed below.

You can access the personal information we currently hold about you or request that we change that personal information at any time. We endeavour to respond to any such request within a reasonable period. We will allow access or make the changes unless we consider that there is a sound reason under the Privacy Act or other relevant law to withhold or refuse to change, the information. If we cannot agree to make requested changes to personal information, we will provide you a written notice which sets out the reasons for our refusal and the mechanisms available to complain about the refusal.

We will attach this written notice to our records that contain your personal information.

There is no cost associated with making a request for access to or correction of your personal information but there may be a cost associated with accessing that personal information. You can obtain further information about how to request access or changes to the information we hold about you by contacting us (see details below).

If you wish to allow another person to access your details (eg family member) you need to notify us in writing and it will be noted on your record. If you are unable to notify us, then your nominated person is required to provide a Power of Attorney.

Information security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification or disclosure.

These steps include a properly configured firewall, encrypted transmission of electronic data where required/appropriate, up-to-date anti-virus software, regular monitoring of all network traffic and strict access control policies on electronic data. Where files are password protected, access is limited to authorised personnel only. There is also securing of paper files in locked cabinets and physical access restriction to these files.

When no longer required, personal information is destroyed in a secure manner or deleted.

Part 2 – Specific information collection details

This section further details the specific methods of personal information collection we undertake and how that information is used.

Donation Information

We collect personal information from donors to process/receipt their donations, contact them to inform when donations have been unsuccessful and to send out periodic mailings relating to our medical-humanitarian work and how donors can further support this work.

This personal information may include:

  • Name and address;
  • Your date of birth;
  • Telephone/e-mail contact details;
  • Credit card and/or bank account details;
  • Bequest intentions.

Donor questionnaire responses

We also collect personal information from donors through questionnaires to help us better personalise communications to them including on specific areas of interest.

The information collected will depend on what you choose to provide us with but may include the following:

  • Reason for donating;
  • What other charities and causes you may support;
  • Ways you are interested in supporting MSF;
  • Your knowledge and understanding of our work;
  • What publications you read and how frequently;
  • What your interests and hobbies are;
  • What television stations you watch, which types of programs and how often;
  • Your travel destinations;
  • Your year of birth;
  • The industry you work in;
  • Education level.

This information collected from donor questionnaires is also used as aggregated, de-identified data to assist us in making cost-effective fundraising method choices.

International mobile staff information

If you are an applicant for our overseas operations then your personal information will be held by MSFA in accordance with their Privacy Policy www.msf.org.au/privacy-policy.

MSFA Association members data

If you are a member of the MSFA Association then your personal information will be held by the MSFA Association in accordance with their Privacy Policy www.msf.org.au/privacy-policy.

Our website

The only personally identifying information collected from visitors to our website www.msf.org.nz is that which is provided to us on a voluntary basis. Where you provide unsolicited personal information to our website, we determine whether or not we should be collecting such personal information and in circumstances where such information is not reasonably necessary for our functions and activities, we destroy or de-identify the information.

Google Analytics is our primary analytics tool for the website. Each page is tagged using Google Analytic universal tracking pixel which collects anonymous traffic data. We use Google Adwords Marketing Platform, and Meta to run pay-per-click paid advertising campaigns as part of our online marketing efforts, this includes interest, behavioural, intent and demographic ad targeting using the information made available by Google and/or Meta.

We use VWO for A/B testing. We have an VWO pixel on each page of the site that collects anonymous traffic data.

Any personal information you provide to us (such as an e-mail address) will only be used for the purpose for which it is collected. We do not trade, sell or rent to any third party information captured or voluntarily submitted on this website.

Any external websites linked to/from MSFNZ website are not controlled by MSFNZ and therefore we cannot take responsibility for content, claims or adherence to the privacy laws in New Zealand or overseas.

Cookies

Cookies are small files that a website transfers to your computer. Most web browsers are automatically set to accept cookies. Your browser controls will allow you to restrict, block or delete cookies.

We use cookies:

  • To collect non-identifying statistical information on how many people visit our website, what country/city/region they are from, which browser/operating system they are using and pages viewed on the website.
  • To allow functionality for the user within our website.
  • For use of third party advertising or social media services to enable tracking and retargeting for online marketing material with the aim of improving their experience with MSF.

Part 3 – Contacting MSFNZ and Privacy Policy updates

What can I do with my personal information?

In addition to your ability to access and correct your personal information as identified in this Privacy Policy, you are able to ask us to delete or restrict (stop any active) use or disclosure of your personal information; and to obtain the personal information you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share this personal information with a third party.

In addition, you can object to the use or disclosure of your personal information in some circumstances (in particular, where we don’t have to use or disclose your personal information to meet a contractual or other legal requirement, or where we are using personal information for profiling, data analytics, or direct marketing).

Your ability to object may be limited, for example if fulfilling your request would reveal personal information about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.

To make any of the above requests, you can get in touch with us using the details set out below. If you have unresolved concerns, you are able to complain to the Office of the Privacy Commissioner (OPC) as set out below.

To the extent that there is no conflict and noting that the level of protection of the individual is higher under European law, MSFNZ will look to apply the higher standard not only because it is part of a Movement that has a significant presence in Europe, but also because of the importance the organisation places on protecting individuals’ right to privacy, regardless of nationality or location.

Contact Us

If you would like to contact us about the way we manage your personal information or to ask a question or, make a complaint:

  • Call 0508 633 324
  • By e-mail to [email protected]
  • Mail us at Privacy Officer, Médecins Sans Frontières New Zealand, PO Box 210110 Returns Centre, Auckland 2154
  • We will endeavour to respond to complaints within 14 days of their receipt. If you are dissatisfied with our response, you may refer the matter to the New Zealand Privacy Commissioner (https://www.privacy.org.nz/).

To update your information through our Supporter Relations team:

  • Cost of a local call 0508 633 324
  • By e-mail to [email protected]
  • Mail us at Médecins Sans Frontières New Zealand, PO Box 210110 Returns Centre, Auckland 2154

For more information please contact us:

Postal address
Médecins Sans Frontières New Zealand
Privacy Officer
PO Box 210110
Returns Centre
Auckland 2154

This Privacy Policy may change from time to time. This policy was last updated on 28/5/26.