- What is Personal Data?
- Types of Data that CASA Collects
- Data Collected Systematically
- Data Collected by Forms
- How CASA Uses Data
- How Your Information is Shared
- How CASA protects Your Personal Data
- Controlling your Personal Data
- Your Rights and Choices Regarding Your Personal Data
- Accessing, Updating or Removing your Personal Data
- Questions about this Policy
Additional terms and information about CASA’s personal data handling practices may be provided in services descriptions, supplement statements, or contract terms, or notices provided prior to or at the time of information collection.
What is Personal Data?
Personal data is data that can be associated with an individual, and may include, but is not limited to, names, addresses, email addresses, phone numbers, login information (such as usernames and passwords), social media account names, marketing preferences, personal interests, IP addresses, photos and/or videos of an individual’s likeness, audio recordings, payment card numbers, criminal records, educational and professional records, and any form of biometric, health, genetic, racial, ethnic, religion, political affiliation, gender-based, sexual preference, age-related, or other identifying personal data. If we link other data with your personal information, we will treat that linked data as personal data.
Our websites may contain links to other websites, applications and services maintained by third parties. The information practices of such other services, or of social media networks that host our branded social media pages, are governed by third parties’ privacy statements, which we encourage you to review to better understand those third parties’ privacy practices. We have no control over such third parties’ privacy statements or practices.
Types of Data that CASA Collects
CASA collects information from website visitors in two ways: via metrics that are collected by our web server and web techniques (such as storing cookies on your device), and via forms that collect data that you provide.
Data Collected Systematically
Systematically collected data includes (but is not limited to):
- Web browser type and version
- Address of the website from which you arrived at our site
- Your Internet Protocol (IP) Address
- Clickstream behavior, meaning the pages you view and the links you click.
CASA uses this data in aggregate to understand how well the website is performing and to understand the general demographics of our site visitors. This data is not used to identify individuals.
Data Collected by Forms
CASA uses forms to solicit actions from website visitors, such as making donations, finding employment, taking classes, filling out petitions, and requesting information or assistance. This data is personally identifiable and is habitually stored in CASA information systems. CASA primarily stores this information in order to fulfill the function or service requested but might also use the information to communicate about additional CASA events and services.
How CASA Uses Data
As described above, CASA provides services and utilities to assist our constituents, and solicits support in providing the services via online donations and volunteer opportunities. Examples of our website-provided services include, but are not limited to:
- Email signups
- Online donations
- Class registrations
- Voter registration
- Job matching
- Membership inquiries
- Citizenship assistance
- Ally network signups
Personal data submitted is primarily used to accomplish what the forms request. Data is routinely stored in our advocacy database and/or our constituent relationship management system. Non-members will only receive communications as they apply to the request. Signing up for emails will place you on our email list; other actions might result in infrequent, one-off emails informing you of services and opportunities. For most services, membership is required. Members are signed up for email lists and receive regular communications.
CASA in Action PAC is required to file regular reports with the Federal Election Commission that publicly disclose the name, address, occupation, and employer of persons who contribute over $200 during an election cycle, along with the amount and date of the contribution. State and local election laws may also require us to disclose this information at a lower itemization threshold, depending on the committee’s activity.
Should CASA be compelled to respond to a subpoena or other demand for information, we will comply if we believe such disclosure is required by the applicable law, regulation or legal process, or otherwise required by any applicable law, rule or regulation.
Excepting the above, CASA does not share any of the personally identifiable information collected on our websites and not subject to superseding agreements with third parties. CASA does work with vendors and consultants who can access our information systems, and those relationships are always governed by contracts that protect the privacy of that information.
Should a website visitor opt-in to text messaging via one of our forms, that information will not be shared with any third parties, provided that the foregoing does not apply to sharing (1) with vendors, consultants and other service providers who need access to such information to carry out work on our behalf (and who will not use such information for their own purposes); (2) if we believe disclosure is required by any applicable law, rule, or regulation or to comply with law enforcement or legal process; and (3) if the user consents to our sharing of such information.
How CASA protects Your Personal Data
It is our goal to protect the personal data entrusted to us and treat it securely in accordance with current information security standards. We implement various physical, administrative, and technical measures designed to protect your personal data from unauthorized access, use or disclosure. We contractually require our critical vendors to protect such information from unauthorized access, use and disclosure. We restrict access to your personal data to those who need to know that information to provide services or other benefits to you. In addition, our employees are required to maintain the privacy and security of your information.
Controlling your Personal Data
Your Rights and Choices Regarding Your Personal Data
CASA encourages you to keep your personal data accurate and current. In addition, you have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data, clicking the unsubscribe button on any communication we have sent to you, or by contacting us. Please note that some of our services may require our legitimate collection, storage and use of your personal data, and such services may not be available if you are unwilling to provide the necessary personal data.
Where you have consented to allow us to use your personal data, you can withdraw that consent at any time. If the information we hold about you is inaccurate or incomplete, you can notify us and ask us to correct or supplement it. You may request that we erase that personal data or cease processing it, subject to certain exceptions. You also have the right, with some exceptions and qualifications, to ask us to provide a copy of any personal data we hold about you.
You may also request information about: (i) the purpose of the processing; (ii) the categories of personal data concerned; (iii) who else other than CASA might have received the personal data; (iv) what the source of the information was (if you didn’t provide it directly to us); and (v) how long it will be stored.
Where you have provided your data to us and it is processed by automated means, you may be able to request that we provide it to you in a structured, machine-readable format.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to enable us to deal with your request or to speed up our response.
Accessing, Updating or Removing your Personal Data
Reasonable access to a record of your personal data will be provided at no cost on request made via email to privacy (hyphen) info (at) wearecasa (dot) org. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive; alternatively, we may refuse to comply with your request(s) in these circumstances. If access cannot be provided within a reasonable time frame, we will provide you with an estimated date when a record of the personal data will be provided. If for some reason we cannot supply you with a record of the personal data we have collected, used, and/or stored, we will provide an explanation as to why we cannot provide the record.
Questions about this Policy