Privacy Policy for Data Collected by Blue State Digital

Transcription

1 Privacy Policy for Data Collected by Blue State Digital Overview Blue State Digital LLC. ( Blue State Digital, BSD or we ) provides various services to non- profit entities and other related businesses ( Clients ), including constituent relationship management ( CRM ) software, marketing and fundraising software, content management systems ( CMS ), online marketing services and other related professional services. Blue State Digital does not provide or market its services directly to consumers or individuals. Blue State Digital has created this Privacy Policy ( Policy ) to explain why we collect particular information and how we protect it. The Policy applies to data we receive from and any other website explicitly offered by Blue State Digital including the BSD tools site (tools.bluestatedigital.com) and those which Blue State Digital may later create, operate or acquire (collectively, the "Sites"). For information about how we handle data collected by our Clients, please see Privacy Policy for Data Collected by Blue State Digital s clients. This Policy may be amended from time to time, consistent with the requirements of the Safe Harbor Principles (see below). We will post any revised policy on the Site(s) and your use of any of the Site(s) following notice of such change will be deemed acceptance of the revised Privacy Policy, which may include application of the new policy to information provided prior to the date of such change. Terms Used in This Policy "Constituent Data" means Personal Data or other data collected directly by Blue State Digital's Clients from individuals who: 1) make donations or who may be interested in making donations to Clients or 2) provide their Personal Data to our Clients either through the use of the Blue State Digital software or by other means and the Client subsequently stores such Personal Data in the Blue State Digital software. "Financial Data" means data containing credit card numbers, bank account information or account information for online payment systems such as Paypal. "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity. "Sensitive Personal Data" means personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade- union membership, and/or concerning health or sex life. Website Data means Personal and non- Personal Data collected or submitted on Blue State Digital s Sites. Please click on one of the links below to be directed to any of the following topics:

2 1. Personal Data Received from the European Union (EU)/European Economic Area (EEA) 2. Data We Collect From Visitors to Blue State Digital Sites and From Our Clients 3. What choices you have regarding collection, use and distribution of your Personal Data 4. How we take care of corrections/updates to Personal Data stored in our systems 5. Our use of online surveys 6. The kinds of security procedures we use to protect the loss, misuse or alteration of Personal Data under our control 7. How we enforce compliance with this Policy Personal Data Received from the EU/EEA Blue State Digital handles Personal Data transferred from the European Economic Area (EEA) in accordance with the U.S.- E.U. Safe Harbor Principles (collectively, the "Principles"). Some of this data is collected via Sites using Blue State Digital software and some of it is received by Blue State Digital as a result of its provision of services to its Clients. When acting as an agent processing Personal Data under the direction of its Clients, Blue State Digital enters into agreements with its Clients specifying the conditions under which Personal Data received from the EEA can be processed and kept secure. For information about how we handle data our clients collect, please see "Blue State Digital Privacy Policy for Data Collected By Blue State Digital." [Link] Blue State Digital complies with the U.S. - E.U. Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal data from the European Union. Information regarding the E.U. Safe Harbor Framework can be found at: Data Not Covered by this Policy Please note that certain information, such as how we treat data collected by our clients is subject to different Blue State Digital policies and agreements. For more information about how we handle data our clients collect using Blue State Digital Software, or stored on our servers, or otherwise, please see "Blue State Digital Privacy Policy for Data Collected By Blue State Digital Clients." Data We Collect From Visitors to BSD Sites and From Our Clients Contact and Profile Information Our online registration forms require users to provide contact information that may include name, address, address, interests, and similar information. We use contact information listed on Blue State Digital registration forms to send information the Site visitor requests. Blue State Digital is primarily a business- to- business organisation (B2B entity) and therefore we do not seek to obtain Personal Data about consumers. Nevertheless, if Blue State Digital receives Personal Data (which may be submitted by visitors to its Sites or through other means), it processes such data only for purposes specified in this Policy or for purposes otherwise authorized by the individual to whom the Personal Data relates. Blue State Digital collects, uses and discloses Website Data for various purposes. For example: We require contact and other information to add registrants to our mailing lists and create registrant profiles.

3 We collect contact information such as names, mailing addresses and addresses, and Financial Data such as credit/debit card information and online payment service information (for example, PayPal) from our Clients or prospective clients. We may use such information internally or share such information with third parties (whom we hire to perform certain tasks) for various purposes such as: o for marketing or promotional purposes - for example, to offer our products and services, or upgrades/updates to our products or services, or different products and services; o to provide our products and services, for credit card authorization and verification, to bill for our products and services, to communicate with Clients concerning their accounts, and for other customer service, authorization, account history and billing purposes; o to ask for participation in surveys; o to provide news and newsletters, special offers, promotions and targeted o advertising; or to better understand how Clients and others access and use our products and services, including our Sites and advertising, on an aggregated and individualized basis, for the purposes of improving our products and services, and to respond to Client desires and preferences. We may also collect demographic and profile data (e.g., age, gender and income level) to improve our marketing and promotional efforts, to statistically analyze Site usage, to improve our content and product offerings and/or to customize a Site s content, layout, and services. We may share demographic, profile and/or transaction data with advertisers or other third parties, but on an aggregated basis. o For example, we may share aggregate information regarding purchases and usage of our software products as necessary for the purpose of our making royalty or other payments to third parties or for analysis, marketing or other purposes. We may share Website and/or Client Data with third parties for the purpose of facilitating the marketing or delivery of (i) Blue State Digital products and services and/or (ii) any related third party services. By visiting our Sites or submitting information to us, you consent to the uses and disclosures listed above. Internet Protocol Address IP addresses are collected from all computers that visit our Sites. An IP address is a number that is automatically assigned to your computer when you use the Internet. We use IP addresses to help diagnose problems with our server, administer our Sites, analyze trends, track Site visitors movements, gather broad demographic information for aggregate use in order for us to improve the Sites, and deliver customized, personalized content. IP addresses are not linked to Personal Data. Information from Children Our Sites are directed to adults and usage by children is not intended. We do not seek to collect Personal Data about children through our Sites. If a child submits Personal Data to us on one or more of our Sites, and we know that the individual submitting the information is a child, we delete such information. Use of "Cookies" Our Sites may use cookies to enhance your experience while using our Sites. Cookies are

4 pieces of information that can be transferred by a website to computers browsing that website. Cookies are generally used for record- keeping and analytical purposes. Cookies can make Web surfing easier by performing certain functions such as saving passwords, saving personal preferences regarding use of a particular website and ensuring that the same advertisement does not appear repeatedly. Many people consider the use of cookies to be an industry standard. Your browser might be set to accept cookies. If you would prefer not to receive cookies, you can alter a setting on your browser to block cookies. If you choose to do so, though, please be aware that some areas of our Sites may not function properly when you view them. If you access our Sites from the EU, you should be aware that the EU e- Privacy Directive was recently revised so that users of a website must now consent to some cookies being placed on their computers. The law is evolving in this area, and browser manufacturers are working on enhanced browser settings. In the meantime, we are exploring methods of obtaining consent to certain cookies, such as through pop- up notices and/or its Terms of Service. Choice/Opt- Out Blue State Digital provides its Clients and prospective clients with the opportunity to opt- out of receiving communications from us at any time. If we have contacted you via and you no longer wish to receive promotional s from us, you can click on the "Unsubscribe" link at the bottom of our s and follow the instructions. Your address will be promptly removed from our marketing database. Please note that we may still use addresses for non- marketing purposes such as customer service purposes. For information about how we handle data collected by our Clients, please see Blue State Digital Privacy Policy for Data Collected By Our Clients. Corrections/Updates If you believe that your Personal Data is in our possession, you can always modify or delete it. To make any such changes, us at privacy@bluestatedigital.com. We will respond to your access request within 30 days. We reserve the right to maintain information about individuals who have violated our Terms of Use or who have had their access to one or more of our Sites blocked. Surveys We may conduct occasional online surveys via our website or via an newsletter. These surveys are entirely voluntary and recipients may easily decline to participate. Other Websites Our Sites may contain links to other websites. Please note that when you click on one of these links, you are visiting another website for which Blue State Digital has no responsibility. We encourage you to read the privacy policies on all such sites as their policies may be different than ours. Security To protect your payment information we are 1 PCI compliant. Financial Data transmitted through Blue State Digital's software is transmitted using SSL (Secure Socket Layer) encryption. SSL is a proven coding system that lets your browser automatically encrypt, or scramble, data before you send it to us. Unfortunately, no data transmission over the

5 Internet or data storage is 100% secure. Since no data security measures are 100% foolproof, Blue State Digital cannot guarantee the security of data transmitted or stored via our software and systems. Data Integrity As explained above, if Blue State Digital receives Personal Data, it processes it in a way that is compatible with and relevant to the purposes for which it was collected. Blue State Digital also takes reasonable steps to ensure that Client and Website Data are accurate, complete, current and reliable for its intended use. Limitations As set out in the Principles, our adherence to the Principles may be limited to the extent necessary to meet national security, public interest, or law enforcement requirements. Enforcement Blue State Digital uses a self- assessment approach to assure compliance with this Policy and periodically verifies that the policy is accurate, prominently displayed, completely implemented and accessible. We encourage interested persons to raise any concerns by contacting us (see contact information below). We will attempt to resolve any complaints and disputes regarding our uses and disclosures of Personal Data. Blue State Digital participates in the EU Safe Harbor Privacy Framework as set forth by the United States Department of Commerce. As part of our participation in the Safe Harbor Framework, we have agreed to the Better Business Bureau dispute resolution principles for disputes relating to our compliance with such Framework. If you have complaints regarding our compliance with the Safe Harbor you should first contact us at privacy@bluestatedigital.com. If contacting us does not resolve your complaint, you may raise your complaint by contacting Council of Better Business Bureaus, Inc. You can file a complaint online at dispute- resolution/complaint- info/ For human resources data, we have agreed to cooperate with European Data Protection Authorities. Contacting Us If you have any questions about this Policy, our information collection practices, or your dealings with Blue State Digital, you can contact: Blue State Digital HR Department 5 West 20th St, New York, NY USA Phone: Or you can use our Contact Form to us.