NACAS is committed to protecting the privacy of our members, volunteers, and visitors to our website. In this policy, “we” or “NACAS” or “our” or “us” refers to NACAS staff, board members, and other volunteers, and the “Sites” refer to https://nacas.org and http://www.caspcert.org.
Information We Collect
NACAS may collect Personally Identifiable Information (PII) when you interact with the Sites. PII may include: name, organization’s name, address, telephone number, facsimile number, e-mail address, and, if applicable, ADA needs, contact information for an emergency contact, credit card expiration date, credit card holder’s billing address, and name of credit card holder or checking account owner. The PII that we collect often occurs through prompts such as event registration forms, membership forms, online forms through the Sites, and/or email correspondence. NACAS may collect credit card or checking account numbers and verification codes for credit cards when used for payment. In addition, NACAS may collect PII from other sources, such as public records and, in some cases, combine that PII with other information you provide to NACAS. NACAS will disclose PII collected upon inquiry from the individual.
NACAS also collects technical information, such as anonymous browser information, from visitors to the Sites. Examples of this information include: the URL that referred a visitor, the domain from which a visitor is accessing the Internet, the time they accessed the Sites, the type of web browser and operating system or platform used, the names of the pages they visited while on the Sites, and the Internet address of the website they next visit.
A person may choose not to provide NACAS with any information. However, if that occurs, NACAS may not be able to process requests through the Sites, and the person may not be able to access many parts of our Sites.
If a person would like to unsubscribe from any of our services or would like to be removed from any of our online mailing lists, an e-mail should be sent to firstname.lastname@example.org. Please include the name and e-mail address of the person in question and the desired change in status in the body of the message.
NACAS may also provide a person with an opportunity to opt-out of some services in e-mail messages that the person receives.
How This Information Is Used
Apart from PII required for specific business transactions (e.g. membership applications, event registration forms), NACAS may host surveys and other platforms that collect PII and additional information. All information will be reported in aggregate, and PII will not be presented without prior consent of the individual or institution.
Resale or Disclosure of Information to Third Parties
We share and/or disclose limited categories of PII, including name, organization’s name, professional title, address, telephone number, facsimile number, and email address, with NACAS Business Partners, NACAS Exhibitors, and NACAS members. We never rent, sell, share, and/or disclose financial information to any entity other than NACAS-contracted third-party payment processors solely for processing of payments to NACAS.
When a person registers for an event, NACAS may share and/or disclose limited categories of PII, including name, organization’s name, professional title, city, state, and email address, to all event attendees.
For current CASP designees in good standing, NACAS shares and/or discloses limited categories of PII, including first name, last name, institution, region, and the good thru date of their designation.
Occasionally, we may send the information that we gather to third parties to organize, process, and/or analyze. We use this information solely for the purpose of enhancing the offerings of our websites, primarily to tailor advertisements, updates, and point-earnings/spending offers to a person’s particular interests. Additionally, we reserve the right to disclose information: (i) as may be permitted or required by law or based on our good faith belief that it is necessary to conform or to comply with the law, or by order of a court or an authorized administrative agency or (ii) as may be necessary to protect our rights or property.
The following types cookies are used on our Sites:
• Strictly Necessary. These are cookies that are required for the operation of our Sites. They include, for example, cookies that enable you to log into secure areas of our Sites.
• Functional. These are cookies that allow the Sites to remember choices and requests you make to improve your experience.
• Performance. These cookies allow us to recognize and count the number of visitors to the Sites and to see how visitors move around and interact with our Sites when they are using them. These cookies help us improve the way our Sites work, for example, by ensuring that users are finding what they are looking for easily and identifying popular pages.
• Advertising. These cookies record your visit to our Sites, the pages you have visited, the links you have followed, and other statistics. We will use this information to make our Sites and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including strictly necessary cookies) you may not be able to access all or parts of our Sites.
Digital Advertising & Analytics
NACAS may allow third-party advertisements to appear on our Sites. Our advertisers and our network advertising companies may collect information about visitors. Over time, these third parties may be able to develop a profile based on visits not only to NACAS websites but to other sites as well using information about relationships among different browsers and devices. Because of this, some ads on our Sites may be personalized, meaning that they are intended to be relevant to you based on information advertising providers collect about your use of our Sites over time.
This type of advertising is known as interest-based advertising. We adhere to the Digital Advertising Alliance (“DAA”) Self-Regulatory Principles in connection with this activity. For more information on how to opt out of receiving interest-based advertisements, or to learn more about interest-based advertising please visit the Network Advertising Initiative at http://www.networkadvertising.org/choices/ or the Digital Advertising Alliance at http://www.aboutads.info/choices/.
We may also work with third parties that collect data about your use of the Sites and other sites or apps over time for non-advertising purposes. NACAS uses Google Analytics and other third-party services to improve the performance of the Sites and for analytics and marketing purposes. For more information about how Google Analytics collects and uses data when you use our Sites, visit www.google.com/policies/privacy/partners, and to opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.
All information that NACAS collects is stored in environments that incorporate reasonable technical, organization, and administrative safeguards.