This Privacy Policy describes how the Greater Hartford Chapter of ISACA (“ISACA Chapter”, ”we” or “us”) collects, uses, shares, and retains personal information when you use this ISACA Chapter at https://engage.isaca.org/greaterhartfordchapter/home , or when you interact with us in person. Personal information is data that can be used to identify you directly or indirectly or to contact you including, but not limited to, your name, mailing address, email address, and telephone number.
Please note that this Privacy Policy does not apply to information collected or used by the global ISACA web sites, or mobile applications, which is governed by the Privacy Notice located at https://www.isaca.org/privacy-policy. Also, this Privacy Policy does not cover the practices of any of our Chapter’s business partners (such as vendors, sponsors, or advertisers), and does not apply to personal information that we collect from or about our employees, consultants, contractors, vendors, sponsors, or advertisers.
1. Modifications to this Policy
From time to time, we may need to update or modify this Privacy Policy, to address changes in the law, new issues or to reflect changes on our Site. When we update this Privacy Policy, we will change the “Last Updated” date at the top of the Policy, so you know it has been updated. To the extent required by law, we will notify you of material changes to this Privacy Policy.
2. International Visitors
Our Site is for individuals located in the United States. If you are not a resident of the United States, your country’s data protection laws may differ from those in the United States and may provide a greater protection. ISACA has over two hundred local chapters throughout the world. To find your local chapter, you can conduct a search on ISACA’s Local Chapters page.
3. Collection of Personal Information You Directly Provide
We collect personal information from you when you interact with our Site and when you use our services. We may collect information directly from you through, for example, online and offline registration forms for events, exams, or meetings.
Events. We may host events that include in-person and virtual conferences, training, knowledge sharing and webinars. If you register for an event, we may collect the following information from you:
- Name
- Email address
- Phone Number
- The name and type of business you work for or with
- Your role in that Business
- Photographs and videos at Chapter Events
- Webinar
- Demographic information such as courses or areas of study in which you may be interested.
We use the information you give us to provide you with event services. To the extent the information requested is not required for your participation in each ISACA Chapter program, you will be told which information is optional. Should you fail to provide optional information, certain ISACA Chapter programs or features may not be available to you.
Presenter. If you are a presenter at one of our events, we will collect information about you such as your name, employer, contact information and your photograph, and we may also collect information provided by event attendees who evaluated your performance as a presenter.
Committee Member. We may also collect your personal information if you are a committee member, or when you assist with initiatives or projects, or when you serve as a Chapter Officer, or on the Chapter Board.
Chapter Meetings. We may also collect your personal information when you attend a Chapter Meeting.
Communications. If you communicate or correspond with us by email, through postal mail, via telephone or through other forms of communication, we may collect the information you provide as part of those communications. For example, if you correspond with us through email, we may collect and store the email address you use to send the applicable correspondence and use it to respond to your inquiry; to notify you of other ISACA Chapter events; or to keep a record of your complaint, accommodation request, and similar purposes.
We may also maintain information about you that you do not directly provide, whether it is information received from third parties, such as business partners who provide exam administration services, or information we collect about your activities. For example, we may keep track of which events you have attended, which exams you have taken, which boards and committees you have served on, and which offices you have held.
4. Passive Data Collection – Information We Automatically Collect
As you navigate through and interact with our Site, we may use automatic data collection technologies to collect certain information about your device (computer, tablet, smart phone) and your activities, including:
If you access our Site through a computer, we may automatically collect information such as comments made, type of service requested, purchases made, and information collected through cookies, pixel tags, and other technologies.
If you access our Site through a mobile device, we may also be able to identify the location of your mobile device. We use your location information (if shared) to identify the geographic locations from which our content is accessed so that we can better understand what content topics may be most relevant in that region, and to develop resources around those content topics. You may choose not to share your location details with us by adjusting your mobile device’s location services settings.
Cookies are small files, typically of letters and numbers, downloaded onto your computer or mobile device when you visit certain websites. When you return to these websites, or visit other websites that use the same cookies, the websites recognize these cookies and your browsing device. A cookie cannot read data off your hard drive or read cookie files created by other websites. You can set yours to refuse cookies, or to alert you when cookies are being sent; however, if you disable cookies, the full functionality of our Site may not be available to you. More information on cookies and their use can be found at www.aboutcookies.org or www.allaboutcookies.org.
Cookies set by the website operator are called "first party cookies". Cookies set by parties other than the website operator are called "third party cookies". The parties that set third party cookies can recognize your web browser both when it visits our Site and when it visits certain other websites where the third party’s cookies are also present.
On our Site, there may be certain third-party advertisers whose advertisements contain cookies that collect data from you. Some of those cookies may contain tracking mechanisms that observe your behavior across multiple Sites. We do not control the use of cookies by advertisers or third parties displaying data on the Site or on the sites you visit using links from the Site.
5. Why We Collect Your Information
We will only use your information as described in this Policy or as disclosed to you prior to such processing taking place. We may use your personal information:
· To provide our services to you, such as registering you for events or training programs.
· To respond to your requests.
· To advise you with information about other events or services which we believe may be of interest to you.
· To improve our services and to detect, prevent and address technical issues; and
· To enforce compliance with our agreements, codes of conduct and this policy.
6. Sharing Your Information
We may share your personal information with third parties for legitimate business purposes, including in the following circumstances:
- To vendors or third parties who deliver or provide services or otherwise act on our behalf or at our direction.
- To our volunteers and board members to provide our services.
- To ISACA and other ISACA chapters, the IT Governance Institute, and if you participate in our “Enterprise Participation Program,” your information will be shared with your organization’s program coordinator.
- If you are an event attendee, speaker, or sponsor, certain of your information will be included in the event roster, which roster will be publicly disclosed, and may also be shared with third-party event sponsors and exhibitors.
- To investigate potentially fraudulent or questionable activities; and
When we believe it is necessary to cooperate with law enforcement or in response to a government request, including if specifically requested or required, as otherwise permitted by law, and for other valid ISACA Chapter business purposes.
7. Data Retention
We will retain the personal information for as long as is needed to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, legal, accounting, or other purposes). When we have no justifiable business need to process your personal information, we will either delete or anonymize it.
8. Security
We use reasonable measures to safeguard your personal information and follow applicable laws regarding safeguarding such information under our control. We cannot guarantee, however, that your information will remain 100% secure. The Internet by its nature is a public forum, and we encourage you to use caution when disclosing information online. Often, you are in the best situation to protect yourself online. You are responsible for protecting your username and password from third party access, and for selecting passwords that are secure.
9. Your Choices
If you receive commercial electronic communications from us, you can unsubscribe from the receipt of future commercial electronic communications from us by clicking on the “unsubscribe link” provided in such communications.
To help us keep your personal information up to date, you can request access to and seek to correct the personal information we maintain about you, by contacting us at Marketing@isacact.org. In your request, please make clear what information you would like to have changed. For your protection, we may need to verify your identity before implementing your request. We will try to implement your request as soon as reasonably practicable. We reserve the right to refuse to act on a request that is manifestly unfounded or excessive (for example because it is repetitive) and/or to charge a fee that considers the administrative costs for providing the information or taking the action requested.
10. California Residents
This section applies only to California residents.
California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes, to the extent applicable. To exercise your rights, you may make one request annually by writing us at the address listed in the Contact Information section at the end of this Policy. Indicate in your letter that you are making a “Shine the Light” inquiry.
If you are a California resident under the age of 18, and you are registered visitor of a Site, you may request that we remove content or information that you posted on the Site or stored on our servers, by submitting a request in writing as indicated in the “How to Contact Us” section below, and clearly identifying the content or information that you wish to have removed, and providing sufficient information to allow us to locate the content or information to be removed.
Your browser may allow you to adjust your browser settings so that “do not track” requests are sent to the websites that you visit. However, we do not respond to “Do Not Track” (DNT) signals. To determine whether a third-party service it uses honor the “Do Not Track” requests, please read the third-party service’s privacy policy.
11. Links to Third-Party Sites
From time to time, we will provide links to third-party web sites, or advertisements will contain links to third-party sites. For example, we may link to a third party who is assisting in or is providing online training services. These links are provided as a service to you. These third-party sites are operated by independent entities that have their own privacy policies. This Privacy Policy does not apply to those third-party sites or to how those third parties may collect or use your personal information. We have no control over the content displayed on such third-party sites, nor over the measures, if any, that are taken by such sites to protect the privacy of your information.
12. Children
We do not knowingly collect personal information from persons under the age of 16. If you are a parent of a child under 16, and you believe that your child has provided us with information about him or herself, please contact us via the information in the Contact section below.
13. Contact Information
If you have questions or concerns about this Privacy Policy or how we process your personal information, please email us at Marketing@isacact.org .