1. Overview – Privacy Policy
   

ASU Chicago (“ASU Chicago” or “We”) is committed to maintaining your trust by protecting your personal data. This statement explains how we collect, use, share, and protect your personal data. Personal data is any information relating to an identified or identifiable person. Your name, address, phone number, email address, and IP address are examples of personal data.

Unless otherwise specified, this statement applies to ASU Chicago’s website.

ASU Chicago will process your personal data in a transparent and lawful way. Any personal data you provide when using this website or our products and services will be used only in accordance with this privacy statement.

We may change this statement from time to time to reflect privacy or security updates. If we make material changes, we will notify you via the email address listed in your account. We encourage you to periodically review this page for the latest information on our privacy practices.

2. Contact Us

If you have any questions about this statement or if you would like to exercise any rights you may have in relation to your personal data, please contact us at asuchicagoalumni(at)gmail.com.

You have the right to make a complaint at any time to the relevant data protection supervisory authority in the EU member state in which you reside. We would, however, appreciate the chance to deal with your concerns before you approach your supervisory authority so please contact us in the first instance.

3. What Personal Data Does ASU Chicago Collect, and for What Purpose?

Providing information is completely voluntary. The following information is collected when filling out our contact us form.

• Name and/or title, e-mail address, phone number, reason for contact, reason for description—used to respond to inquiries sent to us via e-mail.

4. Legal Basis for Collecting and Processing Data

We will use your personal data when the law allows us to. Most commonly, as an administrator in the system, we will process your personal data in the following circumstances:

• Where you consent.
• Where it is necessary for our legitimate interests (i.e., we have a business or commercial reason for using your information) and your interests and your fundamental rights do not override those interests.

Generally, we do not rely on your consent as grounds for processing your personal information other than in relation to sending marketing communications. Where we rely on your consent as a legal ground for processing, you have the right to withdraw consent at any time.

Our legitimate interests may include the following:

• Being efficient about how we fulfill our legal and contractual duties.
• Providing high-quality customer service.
• Complying with laws or regulations that apply to us.
• Developing the Communications suite, our websites and other products and services, and what we charge for them.
• Contacting you with important information regarding the operation of our products.
• Providing our customers our websites, and other high-quality product and service features.

5. Change of Legal Basis

We will use your personal data only for the uses and purposes set out above, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original uses and purposes. If we need to use your personal data for an unrelated purpose, we will notify you and will explain the legal basis that allows us to do so.

6. Failure to Provide Personal Data

Where we need to collect personal data by law or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

7. Profiling

We will not use your personal data for decisions based solely on automated processing if the decision has legal effects concerning you or if it significantly affects you, unless you gave your explicit consent for this processing.

8. Do We Share Your Personal Data with Third Parties?

Except as described here or in any of our other applicable privacy policies, we will not sell, distribute, lease, or provide any of your personal data to any third parties.

We share your personal data with the following categories of recipient:

Access to third-party accounts

This type of service allows this Application to access Data from your account on a third-party service and perform actions with it.
These services are not activated automatically, but require explicit authorization by the User.

Facebook account access (this Application)

This service allows this Application to connect with the User’s account on the Facebook social network, provided by Facebook, Inc.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Twitter account access (Twitter, Inc.)

This service allows this Application to connect with the User’s account on the Twitter social network, provided by Twitter, Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant.

 

9. International Data Transfers

ASU Chicago is owned and operated within the United States. Therefore, the data that we collect from you will be transferred to, and stored at, a destination outside the European Economic Area (EEA).

10. Security

We are committed to ensuring that your personal data is secure. To prevent unauthorized access or disclosure, we have put appropriate technical and organizational measures in place to safeguard and secure your personal data.

If a data breach does occur, we will do everything in our power to limit the damage. In case of a high-risk data breach, and depending on the circumstances, we will inform you about remedial actions to prevent any further damage. We will also inform the relevant supervisory authority or authorities of the breach.

Unfortunately, no security measures are completely secure. We therefore cannot guarantee that your personal data will not be disclosed, misused, or lost by accident or by the unauthorized acts of others. Further, we cannot control dissemination of personal data you post in the public domain, and you should have no expectation of privacy in respect to such data.

The procedures and related standards include limiting access to data and regularly testing and auditing our security practices and technologies.

Employees and temporary workers are required to follow policies and procedures and complete confidentiality training to understand the requirement of maintaining the confidentiality of customer information. If they fail to do so, they are subject to disciplinary action. All employees are required to complete privacy, security, ethics, and compliance training. We also offer a wide variety of other training to all employees and temporary workers to help us achieve our goal of protecting your personal data.

11. Data Retention

How long we retain your data depends on the type of data and the purpose for which we process your data. Your data will not be retained for a period longer than necessary for the purpose for which we have processed your data, plus any statutory period during which we need to retain the data to resolve any legal claims. In many cases, this means that your data will be retained for the duration of our contract with our client, plus any legal statutory period. Information retained during the legal statutory period will be minimized to only the data strictly necessary to resolve any legal claims that may arise.

However, it may not always be possible to completely remove or delete all your personal data from our databases without some residual data because of backups and for other reasons.

To determine the appropriate retention period for the information we collect from you, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we process the data, whether we can achieve those purposes through other means, and the applicable legal requirements.

12. Data Subject Rights

To exercise any of the following rights, please contact asuchicagoalumni(at)gmail.com.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights discussed herein). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or if you have made a number of requests. In this case, we will notify you and keep you updated.

Please note: our website uses tracking cookies and does not collect personal data to assist with providing a valuable experience on our site. No personal data is collected an stored.

12.1 Right to Request Access

You have the right to request details of your personal data that we hold. Upon request, we will provide a copy of such personal data within a reasonable timeframe.

12.2 Right to Rectification

If you believe that any personal data we are holding on you is incorrect or incomplete, please contact us as soon as possible at the address above. We will promptly correct any personal data found to be incorrect, though we may need to verify the accuracy of the new data you provide to us.

12.3 Right to Object

You may choose to object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data which override your rights and freedoms. You also have the right to object in cases where we are processing your personal data for direct-marketing purposes.

Please note that your objection may be overridden by the legitimate interests of ASU Chicago to process and collect your personal data.

12.4 Right to Erasure

To the extent legally permissible, you may be entitled to have certain personal data erased in the following circumstances:

• The personal data is no longer necessary in relation to the purposes for which it was collected or processed.
• You object to the collection or use of your personal data, and there are no overriding legitimate grounds for the processing.
• The personal data has been unlawfully processed.
• The personal data has reached the defined retention period or for compliance with a legal obligation to which ASU Chicago is subject.
• Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons, which will be explained to you, if applicable, at the time of your request.

12.5 Right to Restriction of Processing

You may have the right to restrict further processing of your personal data in the following situations:

• You contest the accuracy of the personal data.
• The processing of the data is unlawful.
• The personal data has reached the defined retention period, but you require the personal data to establish, exercise, or defend legal claims.
• You object to the processing of data pursuant to the right to object as described above. The processing may be restricted pending the verification of whether ASU Chicago’s legitimate grounds override your rights as a data subject.

12.6 Right to Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. ASU Chicago will assist in the transmission of such data to another entity, upon request, to the extent technically feasible. Note that this right applies only to automated information that you initially provided consent for us to use, or where we need the information to perform a contract with you.

12.7 Right to Revoke Consent

For certain data that you have specifically consented to be processed, you may revoke such consent at any time and request such information be deleted. An example of such data is your responses to security questions. However, if you withdraw your consent, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

This right does not apply to information that is processed pursuant to our contract with your employer or information processed to protect the integrity of the controller’s account. Examples of such data to which this right does not apply include, but are not limited to, records of subscribers created, bulletins sent, and login attempts.

12.8 Right to Make a Complaint

You have the right to make a complaint at any time to the relevant data protection supervisory authority in the EU member state in which you reside