LAST UPDATED: 11-02-2020
Your privacy is important to you…and to us. So we'll protect the information you share with us.
We are a private company, established in the U.S.A., registered at 255 Air Tool Drive, Southern Pines, NC 28387, United States (“Physical Notice Address”) with the contact email address [email protected] (“Email Notice Address”) and for the purposes of the General Data Protection Regulation (“GDPR”) we are the data processor.
We encourage you to review any applicable institutional privacy policies, terms and agreements to see how your personal information may be used or disclosed by that institution.
NOTICE OF INFORMATION COLLECTED AND USE.
(a) Information Collected and Stored.
We will inform you when we need information that personally identifies you (personal information) or allows us to contact you or provide you with the Services. Generally, this information is requested when you register for our Services or when you fill out our contact form on our Public Site, or sign up for our newsletter.
CCI may receive certain information about you from Customers during the implementation and provision of Services. For example, Customers may provide basic information, manually or through provision of our integration services, when they are setting up the Service for their use.
You may be able to log into our Services using single sign-on providers or single sign-on features of other products. These products will authenticate your identity and may share certain personal information with us such as your name and email address.
We use various methods and technologies to store or collect Usage Information (“Tracking Technologies”). A few of the Tracking Technologies used with the Services, include, without limitation, cookies, web beacons, embedded scripts, browser fingerprinting, entity tags, UTM codes (i.e. a code that you can attach to a custom URL in order to track a source, medium, and campaign name), and recognition technologies that make assumptions about users and devices. We use Tracking Technologies for a variety of purposes, including:
- Strictly Necessary. We use Tracking Technologies that we consider are strictly necessary to allow you to use and access our Services, including cookies required to prevent fraudulent activity, improve security or allow you and our Customers to make use of Services functionality.
- Performance Related. We use Tracking Technologies that are useful in order to assess the performance of the Services, including as part of our analytic practices or otherwise to improve the content, ads, products or services offered through the Services.
- Functionality Related. We use Tracking Technologies that are required to offer you enhanced functionality when accessing the Service, including identifying you when you use our Service or keeping track of your specified preferences.
- Targeting Related. We use Tracking Technologies to deliver content, which may include ads, including those promoted by our customers, that we deem relevant to your interests on our Service and third-party services based on how you interact with our advertisements and/or content. This includes using Tracking Technologies to understand the usefulness to you of the content and ads that have been delivered to you.
(b) Location-Based Information. In connection with use of our Services we may use location-based services in order to verify your location and, if we deem appropriate, deliver relevant content and ads based on your location. We also share your location with third-parties (as set out below) as part of the location-based services we offer and for other commercial purposes. You can change the settings on your Device to prevent it from providing us with such information. This location data is collected in a form that personally identifies you and will be used by us, our Customers, and our partners and licensees to provide and improve the Services or for other commercial purposes. You should consider the risks involved in disclosing your location information and adjust your mobile and browser settings accordingly.
(c) Information Collected and Stored – Text Messages. After you sign up for our Services (subject to your consent where required by applicable law), we may send you text messages as part of a two-part authentication process. In addition, we and/or our Customers may send you text messages that provide marketing, promotional, and/or other information. We, our third-party service providers, and Customers use a variety of technologies that automatically (or passively) store or collect certain information whenever you we and/or our Customers send you a text message. This information will be stored or accessed using a variety of technologies that will be downloaded to your mobile device whenever you receive a text message.
(d) California Do Not Track Disclosures. Various third-parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party websites or online services (e.g., browser do not track signals). Currently, we do not monitor or take any action with respect to these signals or other mechanisms.
CCI may receive certain information about you from Customers during the implementation and provision of Services. For example, Customers may provide basic student or staff information, manually or through integration with student information or human resource systems, when they are setting up the Service for their use.
CCI may also record information about how individuals access our Services. This information is typically not personally identifiable and may include internet protocol (IP) addresses (or the DNS name associated with it) of the individual's computer, the web site from which the individual linked to our Services, and the browser software the individual is using to access our Services. This information is used in the aggregate to administer computer systems and to make improvements to our Services.
WHAT WE DO WITH THE INFORMATION YOU SHARE.
(a) CCI shares information under the following circumstances:.
- Information held in the Services may be accessed by and shared with Customers in order for Customers to manage its offerings and programs. Our Customers may use your Information to deliver product information from third parties to you through our Services.
- We will use your information to provide the Services, and we may provide information to companies that assist us in providing Services, such as a hosting provider or a customer service provider. These companies are authorized to use your information only as necessary to provide these Services and to assist with supporting our users
- We may share your information in response to subpoenas, court orders, and other legal processes or governmental requests, or to establish or exercise our legal rights or defend against legal claims.
- CCI may share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, protecting and defending the rights or property of CCI, its Services and its users, violations of our Terms, or as otherwise required by law.
(b) Legitimate Interests. As it is in our legitimate interests to be responsive to you and to ensure the proper functioning of our Services and provide you with a user-friendly service, we will use your personal information, and/or Usage Information:
- to provide you with information such as to send you electronic correspondence or to provide you with promotional and marketing materials on behalf of us or third-parties, including to let you know about new products or services;
- manage risk, or to detect, prevent, and/or remediate fraud or other potentially prohibited or illegal activities;
- manage and protect our information technology infrastructure;
- to improve the Services, marketing endeavors or our Services offerings;
- to customize your experience on the Services or to serve you specific content or ads that we deem are relevant to you;
- to identify your Services related preferences so that you can be informed of new or additional opportunities, products, services and promotions;
- to improve the overall experience at the Services;
- to comply with our legal and regulatory obligations;
- for internal business purposes; and
(c) California Specific Privacy Rights.
This section applies with respect to any users located in the State of California. For California residents, pursuant to the California Consumer Privacy Act of 2018, as amended (“Consumer Privacy Act”), you may (i) elect to opt out of the sale of your “personal information” (as defined by the Consumer Privacy Act) by the CCI, (ii) request that the CCI and its service providers delete any of your personal information collected, (iii) request that the CCI deliver to you, free of charge, any of your personal information collected over the past 12 months preceding the request, and (iv) request certain information regarding any collection, sale, and disclosure of your personal information over the past 12 months preceding the request (including the categories of personal information collected, sold, and/or disclosed for a business purpose, the categories of sources from which the information was collected, the business or commercial purpose for collecting or selling the information, the categories of third parties with whom the information was shared, and the specific pieces of the information collected).
The CCI will honor these rights to the extent required by the Consumer Privacy Act. Any requests submitted must be verified by us before we will respond, and to enable this verification we may require you to provide us information confirming your identity, which may include any username or password information, and the personal information matching that which we have in our records. You may submit requests through an authorized agent given authority through a power of attorney form or other authorization acceptable to and verified by us. The CCI will not discriminate against users based on their exercise of any of the rights under the Consumer Privacy Act, provided that the CCI may charge different prices to users based on the value of the data they provide.
In addition, California Civil Code Section 1798.83, known as the “Shine The Light” law, permits customers who are California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once a year and are free of charge. Under Section 1798.83, we currently do not share any personal information with third parties for their direct marketing purposes.
(d) Nevada Privacy Rights – “Do Not Sell My Personal Information”. We may elect to share information about you with third-parties for those third-parties’ direct marketing purposes. Nevada Revised Statutes §§ 603A.300-.360 permits Nevada residents who have supplied personal information (as defined in the law) to us to, under certain circumstances, request and opt out of the sale of your personal information to third-parties for their direct marketing purposes. If this law applies to you, and you wish to make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a Nevada resident and provide a current Nevada address for our response. To make such a request, please contact us at our Email Notice Address with “Nevada Privacy Rights” as the subject line or mail us a letter at our Physical Notice Address. You must include your full name, email address, and postal address in your request.
ACCESS AND CONSENT.
Upon request, CCI will grant you reasonable access to personal information that it holds about you and was collected on our public websites, https://www.classicalconversations.com/. CCI will take reasonable steps to permit individuals to correct, amend, or delete information about them that is shown to be inaccurate or incomplete.
In addition, CCI allows users to modify the level of communications that you receive related to our Services. You may contact us [email protected] to obtain current information about how to modify the types of information that you receive from CCI.
STANDARD CONTRACTUAL CLAUSES
To the extent CCI has agreements in place with any affiliates or subprocessors, each who may have access to the personal data, such agreements shall incorporate the EU Commission approved Standard Contractual Clauses (“Standard Contractual Clauses”).
(a) Onward Transfer. CCI will not disclose any personally identifiable information to a third party who is not a CCI contractor or agent (“Agent”) except as outlined above. For third parties acting as an Agent, CCI will ascertain that the third party follows the Standard Contractual Clauses, is subject to the EU Data Protection Directive, or has entered into an agreement with CCI that is consistent with the applicable or required principles.
In the context of an onward transfer, CCI has responsibility for the processing of personal information it receives under the Privacy Shield and subsequently transfers to an Agent on its behalf. CCI shall remain liable under the Privacy Shield principles if its Agent processes such personal information in a manner inconsistent with such principles, unless CCI proves that it is not responsible for the event giving rise to the damage.
(b) Data transfer to other controllers. Principally, your any personally identifiable information is forwarded to other controllers only if required for the fulfillment of a contractual obligation, or if we ourselves, or a third party, have a legitimate interest in the data transfer, or if you have given your consent. Additionally, data may be transferred to other controllers when we are obliged to do so due to statutory regulations or enforceable administrative or judicial orders
(c) Service providers (general). We involve external service providers with tasks such as sales and marketing services, contract management and processing, payment handling, programming, and data hosting. We have chosen those service providers carefully and monitor them on a regular basis, especially regarding their diligent handling of and protection of the data that they store. All service providers are obliged to maintain confidentiality and to comply with the statutory provisions. Service providers may also be our affiliates.
CCI takes reasonable technical, administrative and physical measures to protect the security of your personal information from unauthorized use, disclosure and alteration.
When you place orders or access your account or any personal account information you have , you're utilizing a secure connection via SSL, which encrypts your personal information before it's sent over the Internet.
CCI provides information and training to all employees who have access to personally identifiable data maintained by CCI, and CCI employees are responsible for the internal security of such information.
CCI takes all reasonable measures to ensure that such information is reliable for its intended use, and is accurate, complete and current.
Inside the CCI, data is stored in password-controlled servers with limited access.
You also have a significant role in protecting your information. No one can see or edit your personal information without knowing your user name and password, so do not share these with others.
USERS OUTSIDE OF THE UNITED STATES
(a) Transfer of Your Information. Our Services are operated in the United States and intended primarily for users located in the United States. While we do market our Services to users outside the United States we do not do so in any material manner. As such, if you are located outside of the United States, please be aware that information we collect, including personal information, will be transferred to, and processed, stored and used in the United States in order to provide the Services to you. Where GDPR applies and our processors of your personal information are located outside the European Economic Area, such transfer will only be to a recipient country that ensures an adequate level of data protection, or with your explicit consent.
(b) Additional Rights Provided to EU Individuals.
- Access and Portability: You have the right to ask us to access the information we hold about you, including personal information, and be provided with certain information about how we use your such information and who we share it with. Where you have provided your personal information to us with your consent, you have the right to ask us for a copy of this data in a structured, machine readable format, and to ask us to share (port) this data to another data controller.
Right to deletion: In certain circumstances, you have the right to ask us to delete personal information we hold about you:
- where you believe that it is no longer necessary for us to hold your data including personal information;
- where we are processing your personal information on the basis of legitimate interests and you object to such processing and we cannot demonstrate an overriding legitimate ground for the processing;
- where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; or
- where you believe the personal information we hold about you is being unlawfully processed by us.
Restriction: In certain circumstances, you have the right to ask us to restrict (stop any active) processing of your personal information:
- where you believe the personal information we hold about you is inaccurate and while we verify accuracy;
- where we want to erase your personal information as the processing is unlawful, but you want us to continue to store it;
- where we no longer need your personal information for the purposes of our processing, but you require us to retain the data for the establishment, exercise or defense of legal claims; or
- where you have objected to us processing your personal information based on our legitimate interests and we are considering your objection.
In addition, you can object to our processing of your Personal Information based on our legitimate interests and we will no longer process your Personal Information unless we can demonstrate an overriding legitimate ground.
To exercise any of these rights above, please contact us at our Email Notice Address.
Please note that these rights are limited, for example, where fulfilling your request would adversely affect other individuals, where there are overriding public interest reasons, or where we are required by law to retain your personal information.
You can withdraw your consent at any time by contacting us at our Email Notice Address.
- Complaints: In the event that you wish to make a complaint about how we process your Personal Information, please contact us in the first instance at our Email Notice Address and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to raise a complaint with a relevant supervisory authority.
CCI does not knowingly collect or maintain information acquired through our site from persons under 13 years of age (the “Approved Age”), and no part of the site or services is directed to persons under the Approved Age. Any user under the Approved Age should not use or access our site at any time or in any manner. If CCI learns that personally identifiable information of persons less than the Approved Age has been collected from our site without verified parental consent, then CCI will take the appropriate steps to delete this information.
Any questions or concerns regarding the use or disclosure of personal information should be directed to CCI pursuant to the contact information below. CCI will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal information in accordance with the principles contained in this Policy.
All disputes arising out of or related to the Agreement shall be finally settled under the Rules of Arbitration of the International Chamber of Commerce by one arbitrator appointed in accordance with such rules. The place of arbitration shall be in Forsyth County, North Carolina, USA. The arbitration shall be conducted in English. The arbitrator shall award to the prevailing party, if any, as determined by the arbitrators, its reasonable attorneys’ fees and costs, including the costs of the arbitration. Judgment on any arbitral award may be entered in any court having jurisdiction.
The parties shall keep confidential: (i) the fact that any arbitration occurred; (ii) any awards awarded in the arbitration; (iii) all materials used, or created for use in the arbitration; and (iv) all other documents produced by another party in the arbitration and not otherwise in the public domain, except, with respect to each of the foregoing, to the extent that disclosure may be legally required (including to protect or pursue a legal right) or necessary to enforce or challenge an arbitration award before a court or other judicial authority.
IN THE EVENT OF MERGER, SALE, OR BANKRUPTCY.
In the event that all or part of CCI is acquired by or merged with a third party entity, CCI may transfer or assign the personally identifiable information held by CCI as part of such merger, acquisition, or other change of control. In the unlikely event of CCI's bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors' rights generally, CCI may not be able to control how personal information is treated, transferred, or used.