We are committed to the lawful, fair, and transparent collection and use of personal data. This notice is intended to help you understand how our foundation (including our affiliates) collects and uses your personal data, as well as how we share, store, and protect that data. If at any time you have questions about this notice, please let us know.
We may update this notice and any supplemental privacy notices to reflect changes in our practices and applicable law. We will post a notice of any material updates on our sites.
When this notice applies
This notice applies to personal data we collect, including through our website, online portals, electronic forms, surveys, and interactive exhibits that we have or may use in the future.
Supplemental privacy notices
This notice may be supplemented by a supplemental privacy notice applicable to a particular interaction with us, which may be either embedded in this notice (such as the Supplemental Privacy Notice for Volunteers, and Scholarship and Award Recipients) or made available to you separately. We will tell you when a supplemental privacy notice applies.
Links to third-party sites
This notice does not apply to any third-party sites that may link to, or be accessible from, our sites. Your interactions with these sites are governed by the third parties’ applicable privacy notices, statements, or policies. We encourage you to read them.
Date we collect
Data you provide about yourself
We collect your personal data when you voluntarily provide it to us. For example, you may give us: your email address, country of residence, and areas of interest if you choose to receive newsletters, updates, or other information from us; your contact information, and any other personal data you choose to include, if you email us through our sites; and any personal data contained in, or included with, any documents, feedback, comments, photos, videos, or other information you submit via online portals, forms, surveys, or interactive portions of our sites.
It is always your choice whether to provide this personal data. However, some personal data must be provided to participate in certain programs, activities, or events (such as to sign up for a newsletter, apply for a job, or register to participate in one of our events), so the decision not to provide information might limit or eliminate certain functions of our sites or your ability to participate. Please do not disclose more personal data than is requested.
Personal data you provide about others
Do not provide personal data about others unless you are authorized or required to do so by contract or applicable law. You may provide personal data on behalf of another person if you have provided them with a copy of this notice and any applicable supplemental privacy notice, and obtained their explicit consent. We may ask you to provide evidence of that notice and consent.
Data we receive from third parties and other sources
We may receive personal data about you from other sources, including your company/organization, professional references, publicly-available sources, third-party analytics providers, and other third parties. For example, we may receive your personal data if: someone at your company/organization designates you as a contact person for that company/organization or includes information about you in proposal documents; another visitor includes it in any feedback, comments, photos, videos, or other information submitted via online portals, electronic forms, surveys, or interactive portions of our sites; or one of our employees or service providers provides or a third party acting on apparent authority provides it to us when registering you to access our facilities or our sites, apply for a job, or participate in one of our events.
Special categories of data
We will not intentionally collect any “special categories of data” under the EU General Data Protection Regulation (GDPR) without your explicit consent for one or more specified purposes or as otherwise permitted or required by applicable law. Special categories of data include personal data (a) revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; or (b) concerning health or data concerning a natural person’s sex life or sexual orientation.
Our site is not intended for minors (individuals under the age of 13, or equivalent minimum age depending on jurisdiction), and we do not knowingly collect personal data from minors. If you become aware of any personal data we have collected from a minor, please contact us. If we learn that we have collected personal data from a minor, we will take steps to delete the data without notice as soon as possible.
How we use, share and store your data
We may use your personal data to: send you information you have expressly chosen to receive [with your consent]; review and respond to proposal documents, feedback, comments, photos, videos, or other information you submit via online portals, electronic forms, surveys, or interactive portions of our sites [for our legitimate interests and/or to perform a contract with you]; administer and inform our program strategies and charitable activities [for our legitimate interests]; administer, safeguard, and improve our sites, systems, facilities, events, and other business operations [for our legitimate interests]; protect our rights and the safety of others [for our legitimate interests]; contribute to our archive of information in the public interest [for our legitimate interests]; and/or comply with applicable law, court order, subpoena, or legal process served on us [to comply with legal obligations].
Legal basis under GDPR
Outside of U.S. territory, we will collect and use your personal data only if we have one or more legal bases for doing so under the GDPR. The legal bases depend on your interaction with us and our sites. This means we collect and use your personal data only where: you have given your consent for one or more specific purposes; it is necessary to perform a contract we are about to enter into or have entered into with you; it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; it is necessary to protect the vital interests of you or another natural person; or it is necessary to comply with a legal obligation. We will indicate in brackets the legal basis or bases on which we are relying following each purpose. Where we are relying on consent as the legal basis, we will notify you and seek additional consent before using your personal data for a new purpose that is inconsistent with the original purpose for which we collected it.
Affiliates and partners
We may share your personal data with our employees, team leads, and affiliates who have a business need to know, our services providers (including contingent volunteers, consultants, vendors and out-sourced service providers) to process it for us based on our instructions and for no other purpose, and with partners that are collaborating with us to fund projects or host events. We do not share your personal data with any third party (including our service providers) for marketing purposes. If you believe personal data you provided to us is being misused by a third party, please contact us right away.
If you submit feedback, comments or other information to interactive portions of our sites, such submission may be made publicly available to anyone who visits those areas of our site. Other visitors may access, re-post, or use such submission. Even if you remove or delete your submission, copies may remain in cached or archived areas of our sites or retained by other visitors. Please use your discretion when submitting personal data in these contexts.
Storage and transfers
Your personal data may be stored where we or our service providers have facilities. We may also allow employees and volunteer providers located around the world to access personal data as provided in this notice. Outside of U.S. territory, we will ensure your legal rights and protections travel with any such “transfer” of your personal data.
We will store your personal data until it is no longer needed to fulfill the purpose(s) for which it was collected or as otherwise required or permitted by law. After such time, we will either delete or anonymize your personal data or, if this is not possible, we will securely store your personal data and isolate it from any further use until deletion is possible. We may dispose of any data in our discretion without notice, subject to applicable law. Please contact us if you would like more details regarding our retention periods for different categories of personal data.
As the transmission of data via the internet is not completely secure, we cannot guarantee the security of your information transmitted to our sites and any such transmission is at your own risk. However, we maintain appropriate technical and organizational measures, including performing regular self-assessments, to prevent unauthorized disclosure of, or access to, personal data. We limit access to personal data and require that employees authorized to access personal data maintain the confidentiality of that data. We hold our service providers to at least the same data privacy and security standards to which we hold ourselves.
How you control your data
Access and control
Generally, newsletters, auto-generated emails, and updates from us will include links to access, correct, or delete your personal data and to manage any subscriptions directly. If you wish to obtain confirmation that we hold personal data about you, access, correct, or delete your personal data, withdraw any consent you previously provided to us, or object to or restrict our processing of it in any other context, please contact us. We will respond to all legitimate requests within 30 days.
To the extent provided by applicable laws (including the GDPR), you also may have the right to have the data or content deactivated, blocked, anonymized, or deleted, as appropriate, request and receive a copy of the personal data you have provided us and to transmit this data to a third party, and lodge a complaint with the applicable data protection authority. To exercise any of these rights that you are not able to do directly, please contact us.
Supplemental Policy for Volunteers and Award Recipients
Last updated June 28, 2019
This notice supplements our Privacy & Cookies Notice and describes how we collect, use, and share additional personal data when you participate in a foundation event (whether as an attendee, guest, or speaker), and how to access and control this additional data. Please let us know if you have any questions about this supplemental notice.
What additional data we collect about volunteers and award recipients
When you register to participate in a foundation event, we will ask you to provide your name, email address, company/organization, professional title, email address, phone number, emergency contact name and phone number, and any additional accommodation needs. In addition, if you participate as a presenter, panelist, or facilitator at the event, we may collect your photograph and presentation materials. We may also collect feedback and evaluations about you as a presenter, panelist, or facilitator. We will indicate on the form which data is required. Please contact us if you have any questions about why certain data is required.
We may use this information to register you to attend the event [with your consent]; send email to you (and your assistant if one is indicated) to confirm your registration and provide you with updates regarding the event [with your consent]; print your physical badge at the event [for our legitimate interests]; track and administer dietary and physical accommodation requests [with your consent]; review and potentially share your photo, materials, and other information you have authorized us to share with other event participants [with your consent and for our legitimate interests]; send you reports, materials, and updates [with your consent]; contact you about future events [with your consent]; review and respond to feedback, comments, photos, videos, or other information you submit via registration forms or post-event surveys [for our legitimate interests]; administer, safeguard, and improve our event operations [for our legitimate interests].
Event photography and audio video recordings
We frequently take photos and record audio and/or video in public areas of our events. If so, we may make and store photographs containing your likeness and recordings of your voice and likeness. We may associate your image and the sound of your voice with your name if you are identified during the recording or identify yourself by name. We may use, edit, copy, exhibit, publish, or distribute photos and audio or video recording for any charitable purpose relating to the event itself or foundation events in general [for our legitimate interests].
How you control your data
Joe Lee Hansley Foundation
3814 Peach Orchard Circle
Portsmouth, Virginia 23703