WCO Identity and Access Management Server - Notice on Personal Data Protection

About WCO Identity and Access Management Server

WCO Identity and Access Management Server (referred to as “WCO IAM” within this Notice) is the Identity and Access Management that allows users to connect through the different online services of the WCO connected to this system.

Without being limitative, the WCO IAM is currently used for the following websites:

Notice on Personal Data Protection

This Notice describes how WCO IAM captures your personal information, the purposes of collection, and information about the retention of your personal information.

What is personal information?

WCO IAM considers anything related to you, and by which you may be identified, as your personal information. This includes, but is not limited to:

  • Your username (except in cases where the user name created by your employer is under contract)
  • Your first name, last name
  • Your email
  • Your date of birth/age
  • IP address used to log in
  • Your device ID if you use a device (e.g., phone or tablet) to log in
  • Any other information that you use when registering to the websites of the WCO connected to this service

However, WCO IAM also collects the following information that is not considered personal information, but is used only for statistical purposes. The reason for this is that this information cannot be used to track you.

  • City/Country from which you originated the TCP/IP connection
  • Time of the day that you logged in (year, month, week, hour or minute)
  • Type of device that you used to log in (e.g., phone or tablet)
  • Operating system and generic browser information

Collection of personal information

WCO IAM collects your information only to serve your access requirements. For example:

  • WCO IAM uses your IP address to detect any suspicious login attempts to your account.
  • WCO IAM uses attributes like your first name, last name, etc., to provide a rich and personalized user experience.

Tracking Technologies

WCO IAM collects your information by:

  • Collecting information from the user profile page where you enter your personal data.
  • Tracking your IP address with HTTP request, HTTP headers, and TCP/IP.
  • Tracking your geographic information with the IP address.
  • Tracking your login history with browser cookies. Please see our cookie policy for more information.

Use of personal information

WCO IAM will only use your personal information for the purposes for which it was collected (or for a use identified as consistent with that purpose).

WCO IAM uses your personal information only for the following purposes.

  • To provide you with a personalized user experience. WCO IAM uses your name and uploaded profile pictures for this purpose.
  • To protect your account from unauthorized access or potential hacking attempts. WCO IAM uses HTTP or TCP/IP Headers for this purpose. This includes:
    • IP address
    • Browser fingerprinting
    • Cookies
  • Derive statistical data for analytical purposes on system performance improvements. WCO IAM will not keep any personal information after statistical calculations. Therefore, the statistical report has no means of identifying an individual person. WCO IAM may use:
    • IP Address to derive geographic information
    • Browser fingerprinting to determine the browser technology or/and version

Disclosure of personal information

WCO IAM only discloses personal information to the relevant applications that are registered and approved by the WCO IAM. These applications are registered by the identity administrator of the WCO. Personal information is disclosed only for the purposes for which it was collected (or for a use identified as consistent with that purpose), as controlled by such applications, unless you have consented otherwise or where it is required by law.

Please note that the WCO running WCO may be compelled to disclose your personal information with or without your consent when it is required by law following due and lawful process.

Storage of personal information

Where your personal information is stored

WCO IAM stores your personal information in secured databases. WCO IAM exercises proper industry accepted security measures to protect the database where your personal information is held. WCO IAM as a product does not transfer or share your data with any third parties or locations.

WCO IAM may use encryption to keep your personal data with an added level of security.

How long your personal information is retained

You can update your personal data at any time using the forms in the websites using WCO IAM or by contacting us using their contact forms.

WCO IAM keeps hashed secrets to provide you with an added level of security. This includes:

  • Current password
  • Previously used passwords

How to request removal of your personal information

You can request the administrator to delete your account.

More information

Changes to this notice

Upgraded versions of WCO IAM may contain changes to this Notice and revisions to this Notice will be packaged within such upgrades. Such changes would only apply to users who choose to use upgraded versions.

The WCO may revise this Notice from time to time. You can find the most recent governing Notice with the respective link provided by the WCO. The organization will notify any changes to this Notice over our official public channels.

Your choices

If you already have a user account within WCO IAM, you have the right to deactivate your account if you find that this Notice is unacceptable to you.

If you do not have an account and you do not agree with this Notice, you can choose not to create one.

Contact us

Please contact WCO's Data Protection Officer if you have any questions or concerns regarding this Notice on Personal Data Protection.