Updated: January 15, 2021
We, Creative Education Foundation (“CEF”) are committed to the lawful and transparent collection and use of personal data. This notice is intended to help you understand how CEF collects and uses your personal data, as well as how we share, store, and protect that data. If at any time you have questions about this notice, please contact us at the email listed below.
1. TYPES OF DATA COLLECTED
A. Data You Provide About Yourself
We collect your personal data when you voluntarily provide it to us. For example, you may give us: your email address, country of residence, and areas of interest if you choose to receive newsletters, updates, or other information from us; your contact information, and any other personal data you choose to include, if you email, text, or instant message us, or contact us through our Website; and any personal data contained in, or included with your sign up for any seminar, webinar, event or gathering sponsored by CEF, or feedback, comments, photos, videos, or other information you submit via our online portals, forms, surveys, or interactive portions of our Website. It is always your choice whether to provide this personal data. However, some personal data must be provided to participate in certain programs, activities, or events (such as to sign up for a newsletter, apply for a job, or register to participate in one of our seminar or events), so the decision not to provide information might limit certain functions of our Website or your ability to participate.
B. Personal Data About Others
You may provide personal data about others only if you are authorized or required to do so by contract or applicable law. You may provide personal data on behalf of another person, as their parent or legal guardian or if you have provided obtained their explicit consent. We may ask you to provide evidence of that notice and consent or request that you acknowledge and/or verify your role as a parent or guardian.
C. Data Collected From Cookies and Similar Technologies
D. Special Category of Data
We will not intentionally collect any “special categories of data” under the EU General Data Protection Regulation (GDPR) without your explicit consent for one or more specified purposes or as otherwise permitted or required by applicable law. Special categories of data include personal data (a) revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; or (b) concerning health or data concerning a natural person’s sex life or sexual orientation.
E. Website Not Intended for Minors
Our Website is not intended for minors (individuals under the age of 13, or equivalent minimum age depending on jurisdiction), and we do not knowingly collect personal data from minors. If you become aware of any personal data we have collected from a minor, please contact us at the email address below. If we learn that we have collected personal data from a minor, we will take steps to delete the data without notice as soon as possible.
2. PURPOSE OF USE OF DATA
We may use your personal data to: send you information you have expressly chosen to receive with your consent; review and respond to presentations, documents, feedback, comments, photos, videos, or other information you submit via online portals, electronic forms, surveys, or interactive portions of our Website; administer and inform you about our programs and activities; administer, safeguard, and improve our Website, events, and operations; protect our rights and the safety of others; contribute to our archive of information; and/or comply with applicable law, court order, subpoena, or legal process served on us.
We may also share your personal data with our employees, agents, and affiliates who have a business need to know, our services providers (including consultants, contractors, vendors, and out-sourced service providers) to process it for us based on our instructions and for no other purpose, and with partners that are collaborating with us to sponsor or host events. We do not share your personal data with any third party (including our service providers) for marketing purposes. If you believe your personal data is being misused by a third party, please contact us at the email address below.
3. LEGAL PURPOSE OF USE OF DATA UNDER GDPR
If you are in the European Union, we will collect and use your personal data only if we have one or more legal bases for doing so under the GDPR. The legal bases depend on your interaction with us and our Website. This means we collect and use your personal data only where: you have given your consent for one or more specific purposes; it is necessary to perform a contract entered into with you; it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests; it is necessary to protect your vital interests or another natural person; or it is necessary to comply with a legal obligation. We will indicate the legal basis or bases on which we are relying following each purpose. Where we are relying on consent as the legal basis, we will notify you and seek additional consent before using your personal data for a new purpose that is inconsistent with the original purpose for which we collected it.
4. HOW WE STORE YOUR DATA
Your personal data may be stored in your region or in any other country where we or our service providers have facilities. We may also allow employees and service providers located around the world to access personal data as provided in this notice. If you are in the European Union, we will ensure your legal rights and protections travel with any such “transfer” of your personal data outside the European Economic Area, Switzerland, or Canada. We require that our service providers be certified under the EU-US Privacy Shield Framework or Swiss-US Privacy Shield Framework, as applicable.
We will store your personal data until it is no longer needed to fulfill the purpose(s) for which it was collected or as otherwise required or permitted by law. After such time, we will either delete or anonymize your personal data or, if this is not possible, we will securely store your personal data and isolate it from any further use until deletion is possible. We may dispose of any data in our discretion without notice, subject to applicable law.
5. DATA PROTECTION
As the transmission of data via the internet is not completely secure, we cannot guarantee the security of your information transmitted to our Website and any such transmission is at your own risk. However, we maintain appropriate technical and organizational measures, including performing regular assessments, to prevent unauthorized disclosure of, or access to, personal data. We limit access to personal data and require that employees authorized to access personal data maintain the confidentiality of that data. We hold our service providers to at least the same data privacy and security standards to which we hold ourselves.
6. CONTROL AND ACCESS TO YOUR DATA
Generally, newsletters, auto-generated emails, and updates from us will include links to access, correct, or delete your personal data and to manage any subscriptions directly. If you wish to obtain confirmation that we hold personal data about you, access, correct, or delete your personal data, withdraw any consent you previously provided to us, or object to or restrict our processing of it in any other context, please email us at the address below. We will respond to all legitimate requests within 30 days.
If you do not wish to receive communications from us about special offers and promotions, you can opt-out of receiving these communications by following the instructions contained in the messages you receive. Even if you opt-out of receiving these messages, we reserve the right to send you certain communications relating to the services we provide, and we may send you service announcements and administrative messages. We do not offer you the opportunity to opt-out of receiving those communications.
To the extent provided by applicable laws (including the GDPR), you also may have the right to have the data or content deactivated, blocked, anonymized, or deleted, as appropriate, request and receive a copy of the personal data you have provided us and to transmit this data to a third party, and lodge a complaint with the applicable data protection authority. To exercise any of these rights that you are not able to do directly, please contact us at the email below.
TO CONTACT CEF PLEASE EMAIL US AT: firstname.lastname@example.org