AtriaConnect Nonprofit Privacy Policy

AtriaConnect Nonprofit (“Atria”) respects your privacy and preferences. This privacy policy (the “Privacy Policy”) sets forth the terms under which you share your personal data with AtriaConnect, how AtriaConnect collects and uses your data, and your rights with respect to understanding and modifying how it will be collected and used.

I. How does this Privacy Policy apply to you?

Generally: This Privacy Policy applies to the personal data provided to AtriaConnect when you make a donation, register for an event, sign up for a newsletter, purchase a product, or otherwise provide us with information via the AtriaConnect Website located at www.atriaconnect.org, the affiliated Atrium Website located at www.atrium.atriaconnect.org, or any other domain names owned or controlled by AtriaConnect (the “Website”). It also applies to personal data you may provide to AtriaConnect via telephone, email, regular mail, social media, texting, mobile applications, at a special event, in response to a solicitation or face-to-face.

Minors: It is AtriaConnect’s policy not to solicit knowingly any personally identifiable information from children under the age of 13. Children under 13 are not authorized to make a donation or purchase, sign up for an event or program, or otherwise provide any personally identifiable information without consent from a parent or legal guardian.

II. What about data you provide to other AtriaConnect internal organizations? 

Sharing of information within the AtriaConnect network:  Your data may be shared within all affiliated university and institutional chapters of AtriaConnect Nonprofit, such as in connection with your participation in an international project. Before we will share your personal data, AtriaConnect Nonprofit requires that the AtriaConnect local chapter receiving the data (the “Receiving Chapter”) maintain security controls that will assure that your data is securely stored and accessible only by appropriately trained personnel. Unless you inform us that you do not consent in writing, Receiving Chapters may in the future contact you about their own programs and activities. 

Likewise, when you provide personal data to a local chapter in connection with your participation in an international project or other volunteer event that AtriaConnect Nonprofit sponsors, your personal data may be shared between (i) the Receiving Chapter and any other organization affiliated with AtriaConnect Nonprofit that hosts the volunteer build (the “Hosting Organization”), and (ii) the Receiving Chapter and AtriaConnect. Unless you inform AtriaConnect or the Receiving Chapter that you do not consent to marketing by Hosting Organization, the Hosting Organization may also contact you about its own programs and activities in the future. 

III. Why do we hold and process personal data?

AtriaConnect may request from you, or you may volunteer to provide, your contact information, including your name, mailing address, phone number(s), social media handles and email address(es). We hold and process supporters' personal data for a number of reasons:

  • To keep a record of donations made and actions taken by our supporters and our communications with them

  • To send our supporters marketing information about our projects, fundraising activities and appeals where we have their consent or are otherwise permitted to do so

  • To fulfill contractual obligations entered into with supporters

  • To support volunteers, such as during build or fundraising events 

  • To support community based fundraising and campaigning

  • To ensure we do not send unwanted information to supporters or members of the public who have informed us they do not wish to be contacted

  • Manage supporters’ accounts and provide customer service.

  • Offer sweepstakes, contests, giveaways or other promotions.

  • Enforce the Website terms of service.

  • Perform other functions as described at the time AtriaConnect collects information.

If you make a donation or a purchase with AtriaConnect, or otherwise provide us your information, AtriaConnect may contact you from time to time about opportunities to make additional donations or purchases or to provide you information about upcoming programs. 

Unless we are informed that we do not have consent (see guidelines below for modifying your consent), AtriaConnect may also share the data of its U.S. and Canadian resident supporters with select third-party sponsors, service providers and other organizations with which AtriaConnect partners, whose products and services may be of interest to those supporters. We may also provide our U.S. and Canadian resident supporters with information about services from third parties. See guidelines for modifying your consent (below, at “How to control what we send you or update your personal information”). 

IV. How and when do we obtain information about you?

AtriaConnect may obtain your personal data in the following circumstances: 

     a. When you give it to AtriaConnect

We will obtain your personal data directly when you make a donation, sign up for one of our events, purchase products from the AtriaConnect on-line retail store, or when you communicate with us directly in some other way.

     b. When you give it to an AtriaConnect Local Chapter

We may obtain your personal information indirectly when you sign up for an event sponsored by AtriaConnect or an AtriaConnect Local Chapter. In such cases, the AtriaConnect Local Chapter will share your data with AtriaConnect to enable us to contact you about your volunteer event or about future AtriaConnect programs and support opportunities. It may also be shared if it is a necessary part of completing a contract or other legal obligations to you in connection with your participation in an event. 

Sometimes your personal data is collected by an organization working on AtriaConnect’s behalf (for example, a professional fundraising agency). In such cases, the agency is acting on our behalf, and we are the "data controller" responsible for the security and proper processing of your data, just as if you had given it to AtriaConnect directly. 

     c. When you access AtriaConnect’s sponsored social media

We might also obtain your personal data through your use of social media such as (but not limited to) Facebook, WhatsApp, Twitter or LinkedIn, depending on your settings or the privacy policies of these social media and messaging services. To change your settings on these services, please refer to their privacy notices, which will tell you how to do this. 

https://www.facebook.com/policy.php
https://twitter.com/en/privacy
https://www.whatsapp.com/legal/#privacy-policy
https://www.linkedin.com/legal/privacy-policy

     d. When the information is publicly available

We might also obtain personal data about individuals who may be interested in giving major gifts to charities or organizations like AtriaConnect. In these cases, we may seek to find out more about these individuals’ interests and motivations for giving through publicly available information. The information sources may include newspaper or other media coverage, open postings on social media sites such as LinkedIn, and services that aggregate data on charitable giving. AtriaConnect will not retain publicly available data relating to major donors without their consent, which will be sought at the earliest practical opportunity. 

     e. When we use cookies

Cookies are a useful way for us to understand how supporters use AtriaConnect’s web site. When you visit our web site, we will use cookies to collect data from your computer or other device, such as a smart phone or tablet. Cookies are created by your web browser when you visit our website. Every time you return to our website, your browser will send the cookie file back to the website's server. They improve your experience of using our website by, for example, preserving your preference settings so that you are shown information likely to be most relevant to you, and measuring your use of the website so that we may continuously improve it. Cookies can also be used to show you relevant AtriaConnect content on social media services. For more information on our use of cookies and how you can control your cookie preferences, see AtriaConnect’s Cookies Policy.

The AtriaConnect website may contain hyperlinks to websites owned and operated by other organizations, including private sector partners, other NGOs and charities, and AtriaConnect Local Chapters. These third-party websites have their own privacy policies, including policies on the use of cookies, which would apply to the use of personal information you submit or which is collected by cookies while visiting those websites. AtriaConnect cannot accept responsibility for the privacy practices of such third-party websites, and we recommend therefore that you familiarize yourself with their policies. 

V. What personal information might AtriaConnect collect?

AtriaConnect will only collect personal data about you that is relevant to the type of transaction or project you have engaged in with us.

For example, we may receive and retain personal information about you when you contact AtriaConnect to make a donation or sign up to any of AtriaConnect’s activities or online content (such as newsletters or message boards); or when you telephone, email, or write to us, or engage with us via social media channels. In each of these cases, the information we collect is relevant to the type of transaction you are entering into. Data such as your name email or postal address, telephone or mobile number will be necessary both to execute these transactions as well as to enable us contact you for further engagement. Bank account or credit card details will be necessary to process any donations. Age and travel restrictions will be relevant if you are signing up for an international build.

Sensitive Personal Data: We do not collect your "sensitive personal data" (e.g., health or dietary information) unless there is a clear reason for doing so—such as your participation in a sponsored physical event or an international project—and then only to the extent such data is required to ensure that we provide appropriate facilities or support to enable you to participate in the event. 

Should you support AtriaConnect in a substantial way, we may provide an account manager to help tailor your relationship to us and the information you receive from us to suit your interests. If this is the case, we may collect sensitive personal data where relevant to our relationship, such as your political or religious views. If you provide us with information about your health or your family, this may also be recorded so we can communicate with you in a considerate and appropriate manner.

All sensitive personal data is deleted when no longer needed by us and is available to you at any point should you wish to see it.

VI. How will AtriaConnect use your personal data?

AtriaConnect will use your personal information for the following purposes:

     a. For administrative reasons, including:

  • “service administration”, which means that AtriaConnect may contact you for reasons related to administering any donations you have made, the completion of commercial or other transactions you have entered into with us, or the activity or online content you have signed up for;

  • to confirm receipt of donations (unless you have asked us not to do this), and to say thank you and provide details of how your donation might be used;

  • in relation to correspondence you have entered into with us whether by letter, email, text, social media, message board or any other means, and to contact you about any content you provide;

  • for internal record keeping so as to keep a record of your relationship with us;

  • to implement any instructions you give us to with regard to withdrawing consent to send marketing information;

  • to use IP addresses to identify the location of users, to block disruptive use and to establish the number of visits from different countries.

     b. For marketing and fundraising 

Sections III and IV above describe what data may be used for marketing and fundraising purposes and under what circumstances.

     c. Analysis

To analyze and improve the activities and content offered by the AtriaConnect website to provide you with the most user-friendly navigation experience. We may also use and disclose personal information in aggregate (so that no individuals are identified) for marketing and strategic development purposes.

VII. Will we share your information outside the AtriaConnect network? 

If you reside in the U.S. or Canada, and unless you instruct us otherwise, AtriaConnect may share your personal data with organizations with which AtriaConnect partners, as well as other companies whose products and services may be of interest to you. In these cases, we may also provide you with information about services from third parties, unless you inform us that you do not want to receive this information. 

Facebook and other Social Media Sites: We may also use your email address and phone number to match to your Facebook or other social media account in order to show you AtriaConnect content while you use those services. We only do this where you have consented to receiving marketing emails, either by opting in (where you reside in the European Economic Area) or by not opting out (where you reside in the United States and Canada). In addition, we may also use your email address and phone number to link to Facebook or other social media sites in order to identify other users of these sites whom we believe would be interested in AtriaConnect.

There are two ways to prevent this use of your data. You can either update your consent preferences directly with us at AtriaConnect (see below, “How to control what we send you or update your personal information”) or via the social media sites:

Facebook: https://www.facebook.com/help/568137493302217
LinkedIn: https://www.linkedin.com/help/linkedin/answer/62931
Twitter: https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html

Updating your preferences with AtriaConnect will not guarantee that you never see AtriaConnect content on social media, since the social media site may select you based on other criteria.

Where legally required: We will also comply with legal requests where disclosure is required or permitted by law (for example to government bodies for tax purposes or law enforcement agencies for the prevention and detection of crime, subject to such bodies providing us with a relevant request in writing).

VIII. How long will AtriaConnect keep your personal information?

We will hold your personal information on our systems only for as long as you continue to provide your consent, which consent will be presumed to expire after 24 months. Beyond that, we will hold your information only for as long as necessary to comply with our legal and regulatory obligations—such as, for example, to provide documentation on funding sources in connection with a review or audit of our compliance with U.S.C. Sec. 501(c)(3). 

If you request that we stop sending you marketing materials, we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us. 

Legacy income is vital to the running of the charity. We may keep data you provide to us indefinitely, to carry out legacy administration and communicate effectively with the families of people leaving us legacies. This also enables us to identify and analyze the source of legacy income we receive.

IX. How to control what we send you and update your personal information

The accuracy of your information is important to us. We want to ensure that we are able to communicate with you in ways that you are happy with, and to provide you with information that is of interest.

If you wish to change how we communicate with you, or update the information we hold, then please contact us:

  • To amend your contact preferences for any type of communication (including newsletters), email us at info@atriaconnect.org, or write to us at: Data Privacy Manager; AtriaConnect Nonprofit; 1200 E. California Blvd., MSC 364, Pasadena, CA 91125.

Timing of implementation. In responding to requests to not receive marketing information, we will make take all reasonable efforts to meet the following service levels: 

  • Email: 48 hours from receipt of email

  • Mail: 28 days from receipt of 'do not mail' request. This period is longer than for other channels due to the production times for mailing campaigns, and in most cases, we would expect the change to be effective much more quickly.

If you are a resident of the European Economic Area and your country has adopted the provisions of the General Data Protection Regulation, you have the right to request a copy of the personal information we hold about you, to have any inaccuracies corrected, and to have any personal information deleted from our systems (a “Subject Access Request” or “SAR”). In line with standard guidelines for these requests, we will require you to prove your identity with two pieces of approved identification. We will respond to such requests within 30 days of receipt.

Please address SARs, or questions or complaints about this Privacy Policy, to the Data Privacy Manager, AtriaConnect Nonprofit; 1200 E. California Blvd., MSC 364, Pasadena, CA 91125.

X. Changes to AtriaConnect's Privacy Policy

This Privacy Policy may be updated from time to time, so you may wish to check it each time you submit personal information to AtriaConnect.

 

XI. AtriaConnect Cookies Policy

How and why we use cookies: Cookies are used to enable us to improve our services by, for example:

  • remembering if you are logged in so you can move around the website without having to log in again on each page (for example if you are in checkout);

  • measuring how many people are using each page of the website and for how long so that we can try to improve the quality of our website;

  • enabling you to view content shared on social media or sharing sites, such as YouTube or Twitter.

If you reside in the United States or Canada, cookies may also be used for “re-targeting” in advertising campaigns so that third-party vendors can display advertising to you about AtriaConnect or other related entities as you use the internet. 

How to manage and delete cookies. If you wish to restrict or block the cookies set by the AtriaConnect website, you can do this through your computer or device’s browser settings. The Help function within your browser should tell you how. 

Alternatively, you may wish to visit www.aboutcookies.org, which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your computer as well as more general information about cookies.

Please be aware that restricting cookies may affect the functionality of the AtriaConnect website. 

If you visit our website as an anonymous visitor (e.g. you switch off cookies), AtriaConnect may still collect certain information from your browser, such as the IP address (which uniquely identifies a computer or other internet device).

© 2018 by AtriaConnect, Inc.