| WSC Privacy Policy |
Privacy PolicyUpdated 24 May 2018 This WSC Privacy Policy (“Privacy Policy”) describes how the Women’s Society of Cyberjutsu (“WSC”, “we” or “us”) collects, uses, shares, and retains personal information that you provide to us, or that we collect, when you use the WSC website located at www.womenscyberjutsu.org and other websites owned or controlled by WSC (the “Website”) or related mobile applications, use WSC products and services and complete related forms, participate in WSC events, or communicate with one of our representatives (“Personal Data”). Collection of Personal InformationInformation You Directly and Voluntarily Provide to Us. Membership: If you provide your Personal Data to WSC to become a member of WSC, or if you sign up to become a registered user of any website operated by WSC, you will be required to provide certain information as part of the registration process. This information will include your first and last name, email address, and business or home address. We may also request that you voluntarily provide other information, such as your phone number, date of birth, demographic information, educational background, work experience, information about your certifications, or courses or areas of study in which you may be interested and information about your company as it relates to WSC’s services and your WSC membership. Membership information is used to communicate with you, to design content and activities that we believe would be of interest to you, and to ensure that WSC will not violate any applicable U.S. sanctions in providing you access to WSC’s services. If you wish to opt-out of receiving these communications from us, please follow the instructions contained in an applicable communication you receive from us.
Events: WSC may host events that include in-person and virtual training, knowledge sharing and webinars. If you register for a WSC event and you are a WSC member, we will access the information in your member account to provide you with information and services associated with the event. If you register for one of our events and you are not a WSC member, we will collect your first and last name, email address, business or home address, and the type of business you work for or with, which we will use to provide you with information and services associated with the event. Communications with WSC: If you communicate or correspond with us by email, through postal mail, via phone or through other forms of communication, we may collect the information you provide as part of those communications. For example, if you correspond with us through email, we may collect and store the email address you use to send the applicable correspondence and use it to respond to your inquiry; to notify you of WSC services and events; or to keep a record of your complaint, accommodation request, and similar purposes. Information We Automatically Collect We collect information that your browser sends whenever you visit our Service ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics. We may automatically collect information from you when you use the website using “cookies”. Cookies are small amounts of data that are stored within your computer’s Internet browser and that are accessed and recorded by the websites that you visit so that they can recognize the same browser navigating online at a later time. The cookies are not able to execute code or access other information stored on the computer. No PII is stored in cookies. This information is collected to enhance the site performance and end user experience. You can set your browser to reject cookies or to notify you when you are sent a cookie. To learn more about your ability to manage cookies and web beacons, please consult the privacy features in your browser. In addition, to find out more about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org. Click here to view our Ad and Cookie Policy. Information Collected by Third-party Links, Content, and Analytics The website may include links to other websites and other content from third-party businesses and can offer direct interaction with external websites, networks or platforms that are outside WSC’s control. These third-party businesses may use cookies, web beacons or other similar technology to collect information about you. WSC does not have access to or control over these third parties or the cookies, web beacons or other technology that these third parties may use. We are not responsible for the security, privacy of the information collected by these third parties or the privacy practices of these third parties or the content on any third-party website. You are encouraged to review the privacy policies of the different websites you visit. In addition, we may use third party services such as Google Analytics that collect, monitor and analyze this type of information in order to increase our Service's functionality. These third party service providers have their own privacy policies addressing how they use such information. You can opt-out of Google Analytics by installing Google’s opt-out browser add-on, and out of interest-based Google ads using Google’s Ads Settings. Information You Post on the Website. If you post information on public areas of the website, that information may be collected and used by WSC, other users of the Website, and the public generally. If you decide to participate in our platforms and professional networking features, keep in mind that your personal information (for example, your name and online user name), along with any substantive information you disclose in the communication you decide to post, will be publicly accessible and viewable by others who visit that area. In addition, we may highlight certain users’ postings or contributions to other members of the WSC professional networking features. For example, users who participate actively in our social networking features, like contributing materials and engaging in certain online activities, will be listed as “active members” in a roster that is viewable by all other registered users. It is possible that your posting may result in unsolicited messages from third parties. We strongly recommend that you do not post any information on the public areas of the Website that allows strangers to identify or locate you or that you otherwise do not want to share with the public. Information You Provide to Payment Processors. All payments made to WSC are processed by a PCI/DSS-compliant (these are payment card industry security standards) payment processing service engaged by WSC. All information collected by these third-party providers for purposes of processing your payments is not available to us, unless you have otherwise provided this information to us in connection with your use of the Website or our products and services. Personal Information Provided by Third Parties. We may receive personal information about individuals from third parties. This may happen if your employer pays and registers you for training or membership, however, we will only share information about you with your employer if you consent in advance to our sharing this information. Our third-party training partners may also share your personal information with WSC when you sign up for training or membership through the applicable partner. Use, Sharing and Retention of Personal Information How We Use Your Information. WSC uses personal information for the purposes described at the time of collection, to provide membership benefits and other services to you, including order processing, or membership applications, or registering you for event or training programs, and to otherwise process your requests or address your inquiries. WSC also publishes the names, titles, country and business affiliations of officers, committee members and others who have assisted with initiatives or projects to provide recognition of their achievements to the WSC community. WSC also uses your information, as permitted by law, to provide you with information about WSC, our services or other products and services in which we believe you may be interested. If you are a member or registered user, we may email you about products and services that we believe may be of interest to you. If you wish to opt-out of receiving these emails from us, please follow the instructions contained in an applicable email you receive from us, which will allow you to opt-out of receiving these types of email communications from us. WSC may also use this information to help us understand our members’ needs and interests, to better tailor our services to meet your needs. How We Share Your Information with Third Parties. Except as set forth in this Privacy Policy or when specifically agreed to by you, we will not disclose personal information we gather from you to third parties unless WSC is required to share this information to complete your request or for legitimate business purposes. WSC shares personal information in the following circumstances: Third-Party Service Providers: We may share your information with vendors or third parties who deliver or provide goods and services or otherwise act on behalf of or at the direction of WSC. These third parties may include, for example, product-fulfillment companies These third-party service providers will only have access to the information needed to perform these limited functions on our behalf. Volunteers and Board Members. We may share your information with our affiliates, subsidiaries and WSC volunteers and board members for purposes of conducting WSC’s internal business operations. WSC also makes publicly available the names, titles, country and business affiliations of officers, committee members and others who have assisted with initiatives or projects. Other ISACA Organizations. We may share your information with your local WSC chapter so that they may offer membership and associated services to you pursuant to your membership in that Chapter. Potential Employers. When you provide information in the Career Center, your information may be accessible to potential employers or recruiters. WSC will only share information about you with potential employers or recruiters if you consent in advance to our sharing of this information. Response to Subpoenas, Court Orders, Government Requests or to Protect Rights and to Comply with Our Policies. To the extent permitted by law, we will disclose your information to government authorities or third parties if: (a) required to do so by law or regulation, or in response to a subpoena or court order or any other enforceable governmental request or order; (b) we believe in our sole discretion that disclosure is reasonably necessary to protect against fraud, to protect the property or other rights of us or other users, third parties or the public at large; or (c) we believe that you have abused the Website by using them to attack other systems or to gain unauthorized access to any other system, to engage in spamming or otherwise to violate applicable laws. You should be aware that, following disclosure to any third party, your information may be accessible by others to the extent permitted or required by applicable law. Business Transfers; Bankruptcy. In the event of a merger, acquisition, bankruptcy or other sale of all or a portion of our assets, any user information owned or controlled by us may be one of the assets transferred to third parties. Unless you are residing in the European Economic Area, we reserve the right, as part of this type of transaction, to transfer or assign your information and other information we have collected from users to third parties. WSC will still ensure the confidentiality and security of any user information. Other than to the extent ordered by a bankruptcy or other court, the use and disclosure of all transferred user information will be subject to this Privacy Policy. Aggregate Information. We may share your information with affiliated or unaffiliated third parties on an anonymous, aggregate basis. While this information will not identify you personally, in some instances these third parties may be able to combine this aggregate information with other data they have about you, or that they receive from third parties, in a manner that allows them to identify you personally. Where we do share your personal data with third parties, WSC takes steps to ensure that they use appropriate safeguards to protect your personal data. Individuals Located in the European Union Legal Basis for The Processing of Personal Information from EEA Residents If you reside within the European Economic Area (EEA), our processing of your personal information will be legitimized as follows: (ii) If the processing of your personal data is necessary for the performance of a contract between you and WSC or for taking any pre-contractual steps upon your request, such processing will be based on GDPR Article 6(1) lit. (b).”). If this data is not processed, WSC will not be able to execute the contract with you. (iii) Where the processing is necessary for us to comply with a legal obligation, we will process your information on basis of GDPR Article 6(1) lit. (c), for example complying in the fields of employment law. (iv) And where the processing is necessary for the purposes of WSC’s legitimate interests, such processing will be made in accordance with GDPR Article 6(1) lit. (f), for example to detect fraud. Transferring Personal Data from the EU to the US: WSC has its headquarters in the United States. Information we collect from you will be processed in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR). A finding of “adequacy” in short means that the European Commission has decided that this country outside the EEA ensures an adequate level of data protection. WSC relies on derogations as set forth in Article 49 of the GDPR as the United States has no “adequacy” decision and no other safeguards under the GDPR are in place (for example binding corporate rules on the transfer outside the EEA). In particular, WSC collects and transfers to the U.S. personal data only: with your explicit consent; to perform a contract with you; in a manner that does not outweigh your rights and freedoms. If this data is not processed and transferred, WSC will not be able to execute the contract with you or you will not have access to any or all of the benefits and features associated with your transaction. WSC endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with WSC and the practices described in this Privacy Policy. WSC also minimizes the risk to your rights and freedoms by not collecting or storing sensitive information about you. If you wish to confirm that WSC is processing your personal data, or to have access to the personal data WSC may have about you, please contact us at info@womenscyberjutsu.org. European Union Data Subject Rights The European Union’s General Data Protection Regulation and other countries’ privacy laws provide certain rights for data subjects (these are persons that can be identified). This Privacy Policy is intended to provide you with information about what personal data WSC collects about you and how it is used. If you wish to confirm that WSC is processing your personal data, or to have access to the personal data WSC may have about you, please contact us at info@womenscyberjutsu.org. You have a right to correct (rectify) the record of your personal data maintained by WSC if it is inaccurate. You may request that WSC erase that data or cease processing it, subject to certain exceptions. You may also ask WSC for your personal data to be supplemented or updated, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. You may withdraw your consent for the processing of personal data or the further processing of personal data by WSC at any time. You may also request that WSC cease using your data for direct marketing purposes. In many countries (including EEA countries), you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how WSC processes your personal data. When technically feasible, WSC will—at your request—provide your personal data to you or transmit it directly to another controller. You have the right to receive your personal information in a structured and standard format. In addition to the information contained in this Privacy Policy, you may be provided with additional and contextual information concerning particular services or the collection and processing of your personal data upon request. Reasonable access to your personal data will be provided at no cost to WSC members, event attendees and others upon request made to WSC via email at info@womenscyberjutsu.org. If access cannot be provided within a reasonable time frame, WSC will provide you with a date when the information will be provided. If for some reason access is denied, WSC will provide an explanation as to why access has been denied. Security of Your Information. WSC uses reasonable physical, technical and administrative measures to safeguard personal information you provide through the Website or in connection with WSC services. Please be aware that no data transmission over the Internet can be guaranteed to be 100% secure. As a result, WSC cannot guarantee or warrant the security of any information you transmit on or through the Website and you do so at your own risk. Data Storage and Retention. Your personal data is stored by WSC on the servers of the database management services WSC engages, located in the United States. WSC retains data for the duration of the customer’s or member’s business relationship with WSC and otherwise as required under applicable law. Personal data will be kept for no longer than is necessary for the purposes for which your personal data are processed. We will retain your personal data as long as you are WSC member or require our services so that we can provide these services to you. If you are located in the European Economic Area, at the moment you cancel your WSC membership or withdraw your consent for the processing of your personal information, all your personal data received and stored are erased if no longer needed by us. Unless we are required to retain this personal data by law or to comply with our regulatory obligations. In such a case, we will only keep this personal data for as long as necessary. Modifications to this Privacy Policy From time to time, WSC may need to update or modify this Privacy Policy, to reflect changes in our business practices, data collection practices or organization. We reserve the right to amend this Privacy Policy at any time, for any reason, without notice to you, other than the posting of the amended Privacy Policy on the Website, or, if you have provided your email address to us, sending you an email notifying you of the amended Privacy Policy. It is strongly recommended to check the Website often, referring to the date of the last modification listed at the top. We will in any case not reduce your rights under this Privacy Policy without your explicit and informed consent. If you do not agree to the changes, you should discontinue your use of the Website, and cease providing personal information to us, prior to the time the modified Privacy Policy takes effect. If you continue using the Website or provide personal information after the modified Privacy Policy takes effect, you will be bound by the modified Privacy Policy. Contact us If you have any questions or concerns about this Privacy Policy, please contact us at info@womenscyberjutsu.org. |
Founded in 2012, the Women’s Society of Cyberjutsu (WSC) is a 501(c)3 International nonprofit community, focused on empowering women to succeed in the cybersecurity industry. WSC’s mission is to advance women in cybersecurity careers by providing programs and partnerships that promote networking, education, training, mentoring, resource-sharing and other professional opportunities.
Women's Society of Cyberjutsu
1405 South Fern Street, #514
Arlington, VA 22202
