Privacy
- Introduction
- How your personal information is collected and used
- Protecting your information
- Data sharing and transfer
- Accessing and changing your information
- Changes to this privacy statement
- Questions or suggestions
-
Introduction
The APNIC Secretariat respects your privacy and is committed to protecting the personal information that you provide. This privacy statement describes how the APNIC Secretariat collects, uses, and protects your personal information.
As the Regional Internet Registry (RIR) in the Asia Pacific region, APNIC distributes "Internet resources" comprising Internet protocol (IP) addresses including IPv4 and IPv6 addresses and Autonomous System Numbers (ASNs). In so doing the APNIC Secretariat collects personal information that is necessary to support its role as the RIR for the Asia Pacific region.
APNIC endeavours to ensure that all information it holds is accurate, complete, and up-to-date.
-
How your personal information is collected and used
APNIC collects personal information for the following main purposes:
- to support Internet resource requests
- for account and billing purposes
- to administer meetings, training events, and other communication activities (such as mailing lists and the MyAPNIC and ICONS websites)
- to monitor network performance
- for recruitment
Each of these purposes is described below.
2.1. Data used to support resource requests
Internet addresses are public resources. To ensure that these resources are managed responsibly, the APNIC Secretariat must collect a range of information including:
- documentation of network infrastructure, plans, and customer details, which demonstrate the need for addresses requested; and
- personal information of people authorized by an organization to request resources and maintain database entries.
The APNIC Secretariat collects such information from text forms that are submitted by email; web forms, on either the main APNIC web site or the MyAPNIC web site; from general correspondence by phone, email, post, and fax; and from face-to-face meetings.
The APNIC Secretariat uses this information to evaluate resource requests and administer accounts. It also may store some or all of this information for archival purposes, for the purposes of validating or auditing resource allocations in future.
Some of the personal information you provide may be publicly registered in the APNIC Whois Database. This is limited to contact details relating to the allocation of specific public Internet resources.
Please note that in relation to these network contact details, the APNIC Whois Database allows organizations to register "role objects" in place of personal details.
Also, APNIC policies allow for resource holders to choose whether their assignment details should be publicly visible.
2.2. Data used for account and billing purposes
The APNIC Secretariat collects organizational and personal information for billing and account administration purposes.
All APNIC members are required to provide an email address that will be included on a mailing list for membership-related announcements. This does not need to be a personal email address.
The APNIC Secretariat does publish the names and URLs of APNIC member organizations on the APNIC website, but does not publish personal details relating to those members.
2.3. Data used for meetings, training, and communication activities (such as mailing lists and the MyAPNIC and ICONS websites)
In order to administer meetings, training sessions, and public discussion lists, it is necessary for the APNIC Secretariat to use registration forms and voluntary subscription procedures to collect the required information.
The information gathered by registration forms is used to help plan and conduct public meetings and training sessions. The APNIC Secretariat archives registration details to help plan future events and develop services.
The information gathered by subscription procedures is used only in the mailing lists you specify. The APNIC Secretariat provides simple online tools to allow you to manage your own subscription status on mailing lists.
Certain events such as APNIC meetings require photography and videography and such media may be used in APNIC publications or on the APNIC website. APNIC takes all care to inform event attendees that photography and videography make take place.
2.4. Data used to monitor network performance
The APNIC Secretariat logs certain technical data from visits to APNIC web sites in order to analyse how the online services are used and how they perform. This is needed to maintain and develop services.
No attempt is made to personally identify people who browse these web sites, or build profiles of their browsing patterns.
In cases where APNIC's online services are abused or attacked, the APNIC Secretariat may use the logged information to investigate the incidents or to deny further access to those responsible.
APNIC does use "cookies". A cookie is a small file which asks permission to be placed on your computer's hard drive. If you agree, the file is added and the cookie helps analyse Web traffic or assists with the provision of services.
You can choose to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. If you set your browser to warn you before accepting cookies, you will receive a warning message with each cookie. If you set your browser to reject cookies you may not be able to use some services on this Site.
2.5. Data used for recruitment
APNIC will collect information related to your recruitment including your CV, phone calls, emails, letters, and referees. This information may be collected from you either directly or through a recruitment agency that you have authorized.
If you provide personal information for the purposes of recruitment, the APNIC Secretariat will only use your information for that purpose.
Your information will be kept on file for one year after which it will be securely destroyed. During that time, you can update your personal information, or gain access to it at a mutually convenient time, by sending a written request to employment@apnic.net.
-
Protecting your information
APNIC policies and agreements contain specific protections for the confidentiality and security of information collected by the APNIC Secretariat.
All APNIC staff members, contractors, and Executive Council members, are required to sign non-disclosure agreements relating to any confidential information received.
In addition, the APNIC Secretariat maintains a high level of physical security and protection for all its computer and network facilities, and in particular for those in which personal information may be stored.
-
Data sharing and transfer
The APNIC Secretariat may need to share information with other Internet related organizations such as ICANN and IANA. The information shared is limited to that which is required for the respective purpose and is subject to those other organizations providing equivalent levels of security and protection.
Only Internet operational and troubleshooting applications may be downloaded from the APNIC Whois Database. Only information that is normally publicly available is transferred in these downloads.
The APNIC Secretariat does not share personal information which is collected from event registration forms, except as necessary for the conduct of the event in question. The APNIC Secretariat may publish lists of meeting attendees on a website, as part of its commitment to open and transparent policy development but only the name of the attendee and their organization is listed.
The APNIC Secretariat does not share any mailing list subscription details, although it may on occasion forward external messages to a particular mailing list if it is relevant and appropriate for that list. The APNIC Secretariat does, however, provide publicly searchable archives of all public mailing lists, as this is necessary for the open and transparent policy development process.
The APNIC Secretariat does not share personal information that you have provided in relation to recruitment unless you specifically consent to this.
-
Accessing and changing your information
Individuals and organizations that maintain information in the APNIC Whois Database are able to modify their own registration details by using either email or web-based methods. To prevent unauthorized changes there are strict procedures to identify people and verify their right to request changes.
You may modify, at any time, any information you have used in a web-based form. You will need to create a password and APNIC will then send you a personalized URL which allows you to modify that information. This data will generally be deleted from APNIC servers after two weeks.
If you have subscribed to any APNIC mailing lists, you are able to unsubscribe yourself at any time.
If you have concerns about the accuracy or appropriateness of any other personal information held by the APNIC Secretariat, please contact us. The APNIC Secretariat will seek to correct any problems as soon as possible.
-
Changes to this privacy statement
The APNIC Secretariat will amend this statement from time to time. If there are any substantial changes, they will be announced on the APNIC web site.
-
Questions or suggestions
If you have questions or concerns about the issues discussed, contact us.