The Nancy Lurie Marks Family Foundation (“NLMFF”) is committed to protecting the privacy of visitors to its website accessible at autismaroundtheglobe.org (this “Site”).
- What personal data we collect about you when you visit this Site
- How and why we collect your personal information.
- How your information is used and protected.
- When and with whom we share your information.
- Tools to manage how we collect, use, and share your information.
We automatically gather our users’ internet and network activity such as usage details, IP addresses, search strings used to find this Site, and information collected through cookies. We use such data in the aggregate, to improve this Site.
Through the “Submit Your Story” feature, we invite individuals to submit written and/or graphic materials (including narrative text, photographs, and/or video recordings) (a “Story”) to the Autism Around the Globe project for NLMFF to consider posting on this Site. We collect Personal Information of those individuals who choose to use this feature. If you choose to submit a Story, we may ask for demographic or geographical information such as your full name, e-mail address, and country of origin. We use the information that you provide for the following general purposes: to contact you, to facilitate review of your submission, to confirm receipt of your submission, and to improve this Site. Additionally, if you choose to use this functionality, you may choose to provide biometric information (e.g., biological characteristics, health data, sensitive personal information, etc.) or classifications (e.g., age, race, sex, national origin, medical condition, genetic information, etc.). If you do not consent to our processing and use of your personal information, you must not submit such information through our services.
We do not collect commercial information from third parties.
We strive to maintain reasonable administrative, technical, and physical safeguards to protect your Personal Information. Although we use reasonable measures, no information system is 100% secure, so we cannot guarantee the absolute security of your information.
We will not solicit nor will we knowingly collect personally identifiable information from visitors under the age of 13. We encourage families to obtain additional information about safe use of the Internet at https://www.ftc.gov/kidzprivacy/.
Please note that if you are under age 18 and are choosing to submit a Story to this Site, a parent or guardian must agree to the provided consent form on your behalf before submission. Similarly, if you are age 18 or older but have a legal guardian, then your guardian must agree to the consent form on your behalf. If you are a parent or guardian and you are aware that any of your children has provided us with Personal Information without your consent, please contact us and we will take steps to remove that information from our servers.
We use non-personally identifiable information in the aggregate so that we can improve this Site and for business and administrative purposes. We may use or share with third parties for any purpose aggregated data that contains no personally identifiable information.
Except as otherwise stated above, we will not publish or provide your e-mail address or other Personal Information to third parties without your consent.
UPDATING PERSONAL INFORMATION
If you have submitted Personal Information to NLMFF through this Site, you may update your Personal Information at any time by emailing us at firstname.lastname@example.org. We may keep historical information in our backup files as permitted by law.
CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION
We allow you to opt out of receiving e-mail from us. If you no longer wish to receive emails from us, you may opt-out of receiving them by emailing us at email@example.com.
ADDITIONAL RIGHTS FOR CALIFORNIA RESIDENTS
Additional Rights. If you are a California resident, you have certain privacy rights under the California Consumer Privacy Act (“CCPA Rights”).
- Access to Your Personal Information and Portability. We will grant you reasonable access to the data that we have collected, used, disclosed, and sold in the preceding 12 months as required by law. You may also be entitled to request copies of Personal Information that you have provided to us and/or request us to transmit this information to another service provider (where technically feasible).
- Deletion of Your Personal Information. You may request that we delete your Personal Information by contacting us. Although we will grant a request to delete information, you should note that we may keep your Personal Information to comply with legal obligations or for business purposes. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
- Engage in public or peer-reviewed research in the public interest that adheres to all other applicable ethics and privacy laws, if the information’s deletion may seriously impair such research’s achievement, and subject that you have previously provided informed consent.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Except as provided above, we will delete, aggregate, or de-identify all of your Personal Information as described in this subsection within the timeframes required by law.
- Right to Opt-Out of Disclosure of Personal Information for Valuable Consideration. We do not sell your personal information.
- No Fee Usually Required. You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee or decline to comply with your request if it is clearly unfounded, repetitive, or excessive.
- What We May Need from You. We may need to request specific information from you to help us confirm your identity. We may also contact you to ask for further information in relation to your request.
- Time to Respond and Format. We will endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response to your Account (if applicable); otherwise, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt or will explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
No Discrimination. You will not be subject to discrimination as a result of exercising the rights described herein. In some cases, we will be unable to comply with your request due to legal obligations or otherwise. Our response will not be the result of discrimination and you will be provided with our reasons for declining your request.
Authorized Agent. You may designate an authorized agent to make a CCPA request on your behalf, subject to mailing us a valid power of attorney, the requester’s valid government issued identification, and the authorized agent’s valid government issued identification.
ADDITIONAL RIGHTS FOR RESIDENTS OUTSIDE THE UNITED STATES
If you are located anywhere in the European Economic Area (“EEA”) or in the United Kingdom (“UK”), you understand and expressly consent as required by the General Data Protection Regulation (“GDPR”) and the UK Data Protection Act of 2018 (“DPA”) (together referred to as the “GDPR/DPA”) that (a) your data is transferred to and stored in the United States of America, which does not provide the same level of protection and safeguards for your data as in your own country; and (b) your data may be subject to lawful requests and access by the courts and law enforcement authorities in the United States without your knowledge or consent. You are entitled to certain rights under the GDPR/DPA in addition to other rights under this Policy, which we specify in this section.
If you do not consent to the storage of your Personal Information in the United States, and that your information is subject to the laws of the United States, do not provide us with any of your Personal Information.
Right of Access. You have the right to access the following additional information about your Personal Information to determine that we are processing it lawfully: (i) the purpose of the processing; (ii) the categories of Personal Information; (iii) identification of the recipients and intended recipients of the Personal Information; and (iv) our source of the Personal Information.
Right of Rectification. Subject to our separate confirmation, you may request that we update or correct the Personal Information that we have about you.
Right to be Forgotten. You may request that we erase your Personal Information if it is determined that we do not have a legal basis for using it, you withdraw your consent to our processing, you object to the processing and we have no overriding legitimate interest, or if required by law.
Right of Portability. If we have your Personal Information because of a contract that we entered into with you or because you have consented to providing us your Personal Information, you may request that we provide you with a digital file of the Personal Information that you have provided to us, which includes any records we have collected from observing your digital activities. We will provide you with such digital file if and in a manner compliant with GDPR/DPA.
Right to Object or Restrict Processing. If you feel that our access to or our use of your Personal Information impacts your fundamental rights or freedoms, you may object to the processing of such Personal Information or restrict the processing of such data by contacting us through the information provided below. In some cases, we may have legitimate grounds to process such data that may override your rights or freedoms.
Right to Withdraw Consent. Where we rely on your consent as the basis for processing personal information, you have the right to withdraw your consent.
If you believe your rights regarding your Personal Information have been breached or if a breach has been inadequately addressed, you have the right to report to or file a complaint with any independent public authority which is established by a European Union member state pursuant to Article 51 of the General Data Protection Regulation or as to the DPA, you may make a complaint to the Information Commissioner’s Office (ICO).
Autism around the Globe Project
The Nancy Lurie Marks Family Foundation
60 William Street, Suite 110
Wellesley, Massachusetts 02481
Last Updated and Effective: August 6, 2021