General Statement of Privacy
The CGP collects a limited amount of personally-identifiable information voluntarily provided by users of its site. Doing so enables the CGP to allow you access to information on the site and process requests and purchases. The CGP site employs cookies to facilitate its management of the site. The CGP does not sell or lease its member information.
Unless otherwise stated, the legal basis for processing all member and program data is based on your Coalition membership or otherwise by becoming registered on, or visiting, the Coalition’s website. The Coalition also may process any of your personal data where such processing is necessary for compliance with a legal obligation to which it is subject, or in order to protect your vital interests or the vital interests of another person. Please do not supply any other person’s personal data to us, unless we prompt you to do so under the basis of providing goods, services, or programs. Coalition members can add, correct, or update their personal information in their account online or by contacting firstname.lastname@example.org.
Generally, the CGP provides the security of personally-identifiable information on servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. Our cloud data service is with Microsoft Azure. Microsoft is certified to the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce. In addition, Microsoft uses encryption to safeguard its customer data. Here’s a link to Microsoft compliance:
The CGP cloud service is enterprise-grade security with Microsoft. Our data is protected with threat detection and management, device access management, and security dashboards to review activities.
The CGP has policies to address data loss prevention. Specifically, those policies provide for the detection and suspension of a user account, on desktop and internet, immediately for the following:
- Repetitive failed log-in attempts
- Activity from suspicious IP addresses
- Log-in attempt from unknown countries outside of US
- Log-ins from 2 or more locations at the same time
- Ransomware activity
The CGP onsite network is protected by Avast business firewall. All CGP computers are installed with Avast business antivirus protection.
The CGP may use information provided to send announcements, such as notices of events, and newsletters. Users may opt out at any time via a process consistent with the Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act.
The CGP website may contain links to third party sites with their own policies that are outside our control. These third-party sites may collect information in accordance with their private policy and are not covered by this Private Policy.
There are no warranties provided under this policy. The website and links are provided on an “as-is/as-available” basis. Neither the website, nor the content, nor the services provided or associated with it, nor the links provided are subject to any express or implied warranty or condition, including, but not limited to, any warranty of merchantability, satisfactory quality, fitness for a particular purpose or use, and non-infringement. The CGP does not guarantee that the website will be error-free or uninterrupted, or that the website or anything on it or linked to it will be available over time.
Information We Collect
Data that CGP collects is used to further the mission, programs, operations, and services of the CGP; to provide the best experience for members and website visitors; to facilitate and/or improve communications between the CGP and its members; and to facilitate and/or improve communications between the CGP and website visitors. Unless otherwise stated, the legal basis for processing all user and program data is contractual and based on your CGP membership or becoming a registered visitor, a guest, or user of any of our websites, events, or communications tools.
There are two different types of data that can be collected: Personal Identifiable Information (PII) and Non- Personal Identifiable Information (Non-PII). PII is any information that can be used to distinguish or trace an individual’s identity, such as name, address, email, place of employment, or other information that is linked or linkable to an individual. Non–PII data is anonymous to the CGP and cannot be used by the CGP to distinguish or trace an individual’s identity, such as: device IDs, cookies, and IP addresses.
Information we may collect:
- Access Data – This includes your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths.
- Third parties Data –may include your name and email address. The source of the account data may be you, your employer, or affiliated institution with whom we exchange information.
- Profile Data – Profile data may include: your name, address, telephone number, email address, profile pictures, gender, date of birth, interests, educational details and employment details.
- Service Data – Any data that is provided by you when using or participating in any of CGP’s services or programs.
- Publication Data – Information that you post for publication on our websites.
- Inquiry Data – Information contained in any inquiry users submit to CGP regarding goods and/or services
- Transaction Data – May include contact details, credit card details and the transaction details provided by the purchase of any goods and services on our websites.
- Notification Data – Information provided for the purpose of subscribing to our email notifications, newsletters, journals, and webinar services.
- Correspondence Data – Data may include: the communication content and metadata associated with the communication.