Personal information we collect

What is Personal Information?

Personal Information is information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

We do not consider Personal Information to include information that has been anonymized or aggregated so that it can no longer be used to identify a specific natural person, whether in combination with other information or otherwise.

We collect Personal Information from you when you use our Services.

We collect Personal Information from you and any devices (including mobile devices) you use when you: use our Services, register for an account with us, provide us information on a web form, update or add information to your account, participate in SRC research, or otherwise correspond with us.

Some of this Personal Information, such as a way to identify you, is necessary for you to enter into a User Agreement with us. The provision of all other Personal Information is voluntary but may be necessary to use our Services.

We may also collect Personal Information from other sources, as described below.

Personal Information you give us when you use our Services or register for an account with us

• Identifying information such as your name, organization, addresses, telephone numbers, usernames, websites, or email addresses when you register for an account, request a Proposal ID, participate in a survey, contest or promotion with us.
• Financial information (such as credit card or bank account numbers) in connection with a transaction.
• Payment information including your credit or debit card number, card expiration date, CVV code, and billing address to purchase offerings provided by our Services.
• In some instances, when you use our Services, you may provide age, education, transcripts, test scores, previous employment history, interests, and favorites. You may also be asked to provide information such as government identification number, citizenship, visa status, gender, ethnicity, photographs, and travel information.
• You may also provide us other information through a web form, by updating or adding information to your account, by participating in SRC research, or by communicating with us regarding our Services.

Additional information we are required or authorized by applicable national laws to collect and process in order to authenticate or identify you or to verify the information we have collected.

Personal Information we collect using cookies and similar technologies

• We use cookies, web beacons, unique identifiers, and similar technologies to collect information about the pages you view, the links you click, and other actions you take when using our Services, or within email content.
• For more information about our use of these technologies and how to control them, see Cookies and Similar Technologies.

Personal Information collected from other sources

We may allow you to share information with social media sites. We may also use plug-ins or other technologies from various social media sites. If you click on a link provided via a social media plug-in, you are voluntarily establishing a connection with that respective social media site.

How we use your Personal Information

We use your Personal Information to provide and improve our Services, provide you with a personalized experience on our sites, contact you about your account and our Services, provide you customer service, provide you with personalized marketing, to inform you of research opportunities, and detect, prevent, mitigate and investigate fraudulent or illegal activities. We use the Personal Information we collect from you for a range of different business purposes and according to different legal bases of processing. The following is a summary of how and according to which legal bases we use your Personal Information. If you give us Personal Information about someone else, you must do so only with that person’s authorization. You should inform them how we collect, use, disclose, and retain their Personal Information according to our Privacy Policy. We use your Personal Information to provide you with our Services, to comply with our legal obligations, protect your vital interest, or as may be required for the public good. This includes:

• To operate, measure and improve our Services, keep our Services safe, secure and operational, and customize site content that includes items and services that you may like in response to actions that you take.
• To provide payment processing and account management.
• To contact you regarding your account, to troubleshoot problems with your account, or as otherwise necessary to provide you customer service.
• When contacting you for such purposes as outlined above, we may contact you via email, telephone, SMS/text messages, postal mail, and mobile push notifications. Message and data rates may apply.
• To provide other services requested by you as described when we collect the information.
• To prevent, detect, mitigate, and investigate fraud, security breaches or other potentially prohibited or illegal activities.
• To enforce our User Agreement, Export Control requirements, this Privacy Policy, or other policies.

When we obtain your consent, we may use your Personal Information to:

• Provide you with marketing via telephone calls, email, SMS or text.
• Provide you with marketing from other SRC members.
• Use your sensitive Personal Information to facilitate transactions in certain categories.
• Provide our member companies with aggregate data for their employment and education initiatives.

You have the right to withdraw your consent at any time.

We may use technologies considered automated decision making or profiling. We will not make automated decisions about you that would significantly affect you unless such a decision is necessary, we have your consent, or we are required by law to use such technology.

Your choices about how we use your Personal Information

You have choices about how we use your Personal Information to communicate with you, to send you marketing information, and to provide you with customized content.

Unsubscribe

When you agree to use our Services, some email communication may be necessary to support those business processes. You can unsubscribe from any optional email that you have subscribed to or been subscribed to by replying to the email with the word “Unsubscribe” in the body of the message.

Logging Out

You can typically end your signed-in session by either signing out and/or clearing your cookies. If you have certain browser privacy settings enabled, simply closing your browser may also end your signed-in session. If you are using a public or shared computer, you should sign out and/or clear your cookies when you are done using our website to protect your account and your Personal Information .

If you attempt to change your password, User ID, update any other account information, or attempt other account activity, you will be required to enter your password.

Ways you can access, control, and correct your Personal Information

We respect your right to access, correct, request deletion, or request restriction of our usage of your Personal Information, as required by applicable law. We also take steps to ensure that the Personal Information we collect is accurate and up to date.

• You have the right to know what Personal Information we maintain about you.
• If your Personal Information is incorrect or incomplete, you have the right to correct it or ask us to update it.
• You have the right to object to our processing of your Personal Information.
• You can also ask us to delete or restrict how we use your Personal Information, but this right is determined by applicable law and may impact your access to some of our Services.

Access, correction, and deletion of your Personal Information

You can review and change most of your Personal Information by signing in to your account. Please update your Personal Information immediately if it changes or is inaccurate. Keep in mind, once a public posting is made, it may not be able to be changed or removed.

We will honor any statutory right you might have to access, modify, or erase your Personal Information. To request access, please contact us following the instructions in the Contact Us section. Where you have a statutory right to request access or request the modification or erasure of your Personal Information, we can still withhold that access or decline to modify or erase your Personal Information in some cases in accordance with applicable national laws.

If you request that we stop processing some or all of your Personal Information or you withdraw (where applicable) your consent for our use or disclosure of your Personal Information for purposes set out in this Privacy Policy, we might not be able to provide you all of the Services and customer support offered to our users and authorized under this privacy notice and our User Agreement.

Upon your request, we will close your account and remove your Personal Information from view as soon as reasonably possible, based on your account activity and in accordance with applicable national laws.

Personal Information about minors and children

SRC does not knowingly collect data from or about children under 16 without permission of parent(s)/guardian(s). If we learn that we have collected Personal Information from a child under 16, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under age 16, please Contact Us.

How we might share your Personal Information

We may disclose your Personal Information to members and research participants of SRC or third parties. This disclosure may be required for us to provide you access to our Services, to comply with our legal obligations, to enforce our User Agreement, or to prevent, detect, mitigate, and investigate fraudulent or illegal activities related to our Services. We attempt to minimize the amount of Personal Information we disclose to what is directly relevant and necessary to accomplish the specified purpose. We do not sell, rent, or otherwise disclose your Personal Information to third parties for their marketing and advertising purposes.

We may disclose your Personal Information to the following parties for the following purposes:

SRC members and research participants, who may use it to:

• Provide joint content and services (like registration, transactions, and customer support)
• Help detect, investigate, mitigate and prevent potentially fraudulent and illegal acts, violations of our User Agreement, and data security breaches

Service Providers and financial institutions partners as follows:

• Third party service providers who help us to provide our Services, payment processing services, to assist us with the prevention, detection, mitigation, and investigation of potentially illegal acts, violations of our User Agreement, fraud and/or security breaches, and other business operations.

If we transfer Personal Information to third party providers, this will be solely on the basis of an agreement limiting use by the third party provider of such Personal Information to processing necessary to fulfill their contract with us and obligating the third party provider to take security measures with regard to such data. Third party providers are not permitted to sell, lease, or in any other way transfer your Personal Information to other parties. When we transfer Personal Information to servers controlled by a third-party data hosting company we take steps reasonably necessary to ensure that Personal Information is transferred securely. Unfortunately, the transmission of information via the internet, server, database, network or email transmission is never fully secure or error free. Although we do our best to protect Personal Information, we cannot guarantee the security of the Personal Information you transmit to us, and you accept the inherent risk associated with such transmission.

Law enforcement, legal proceedings, and as authorized by law

• To comply with our legal requirements, enforce our User Agreement, respond to claims that content violates the rights of others, or protect anyone's rights, property or safety.
• To law enforcement or governmental agencies, or authorized third-parties, in response to a verified request or legal process relating to a criminal investigation or alleged or suspected illegal activity or any other activity that exposes us, you, or any other of our users to legal liability. We will only disclose information we deem relevant to the investigation or inquiry, such as name, city, state, postcode, telephone number, email address, and IP address.
• To members and research participants of SRC under confidentiality agreements, as we in our sole discretion deem necessary or appropriate in connection with an investigation of fraud, intellectual property infringement, piracy, or other unlawful activity. In such events, we will disclose your name, street address, city, state, postcode, country, phone number, and email address.

Change of Ownership

If we are subject to a merger or acquisition with/by another company, we may share information with them in accordance with our Privacy Policy. Should such an event occur, we will require that the new combined entity follow this privacy notice with respect to your Personal Information. If we intend to handle your Personal Information for any purposes not covered in this privacy notice, you will receive prior notification of the processing of your Personal Information for the new purposes.

How long we keep your Personal Information

We retain your Personal Information for as long as necessary to provide the Services you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our policies.

How long we retain Personal Information can vary significantly based on context of the Services we provide and on our legal obligations. The following factors typically influence retention periods:

• How long is the Personal Information needed to provide our Services? This includes such things as maintaining and improving the performance of our products, keeping our systems secure, and maintaining appropriate business and financial records. This general rule establishes the baseline for most of our data retention periods.
• Is the Personal Information sensitive? If so, a shortened retention time is generally appropriate.
• If you have provided consent for a longer retention period, we will retain data in accordance with your consent.
• Are we subject to a legal, contractual, or similar obligation to retain your Personal Information? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or Personal Information retained for the purposes of litigation.

After it is no longer necessary for us to retain your Personal Information, we will dispose of it in a secure manner according to our data retention and deletion policies.

Cookies and similar technologies

When you visit or interact with our website, we or our authorized service providers may use cookies and other similar technologies to help provide you with a better, faster, and safer experience.

By using the SRC website, you understand that we may automatically collect and store information about your visit to the SRC website through using browser cookies or similar devices. By continuing to use the SRC website, you consent to our use of cookies in the manner and for the purposes set out below.

What is a cookie?

When referring to cookies in this policy, we are referring to HTTP cookies which are small text files stored on your browser when you use websites and applications. We use a mixture of 'session' cookies, (cookies stored in your web browser for a limited time while you are accessing our website) and 'persistent' cookies (which are stored for longer and are activated each time you revisit our website).

Why do we use cookies?

We may obtain information about your use of the website by using a cookie file that is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve the SRC website and to deliver a better and more personalized service. In addition, they enable us to estimate our audience size and usage pattern.

How to control cookies and similar technologies

You can stop cookies being stored on your browser in the future or delete any cookies that are already stored by your browser. To do so, refer to your browser manufacturer's instructions by selecting "Help" in your browser menu. Information on deleting or controlling browser cookies is available at http://www.AboutCookies.org. Please note that if you disable cookies entirely, you may not be able to use certain areas or features of the SRC website.

The SRC website might set cookies for the following reasons:

Strictly necessary cookies

These cookies are essential to enable you to move around the SRC website and use its features, such as accessing secure areas of the SRC website and providing Services that you have asked for.

Policy related

These cookies are set to test and check for policy acceptance when policies have been updated or if you are a new visitor to the SRC website.

Login related

These cookies are set to maintain aspects of your login session. They are used to:

• Authenticate you as a user
• Associate you with a specific server

General session related

These cookies are used to remember information while browsing from one page to another, for example, when entering data into forms.

Functionality cookies

These cookies allow the website to remember choices you make, for example, whether you have read and accepted this Cookie Policy.

Login settings

These cookies are set to maintain your login session and remember your preference in respect of storing your login credentials.

Performance cookies

These cookies collect information about how you use the SRC website, for instance, which pages you go to most often, and if you get error messages from web pages.

Google Analytics cookies

These are web analytics cookies, provided by Google Inc., that are used to collect information about how visitors use the SRC website. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from, and the pages they visited.

The information generated by the cookie about your use of the SRC website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on behalf of Google. Google will not associate your IP address with any other data held by Google.

By using an SRC website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Logging Practices

SRC automatically records the Internet Protocol (IP) addresses of visitors. Depending on your individual circumstance, the IP address we collect may contain information that could be deemed identifiable and could be associated with your personal computer.

As well as recording the IP addresses of users, SRC may also keep track of sites that users visited immediately prior to visiting SRC’s website and search terms they used to find it. We keep track of the pages visited on SRC’s website, the amount of time spent on those pages, and the types of searches done on them. Your searches remain confidential. SRC uses this information only for statistical purposes to find out which pages users find most useful and to improve the website.

SRC also logs and stores information that your browser provides. This may include browser/device type/version, operating system used, etc.  The date and time of the server request, volume of data transferred, the time the transfer took are logged as well.

Links to other websites

SRC Websites may contain links to third-party websites. These sites are owned and operated independently from us and have their own separate privacy and data collection practices. Any Personal Information that you provide to these websites will be governed under the terms of the privacy policy of that website. We cannot accept liability for the actions or policies of these independent sites and are not responsible for the content or privacy practices of such sites.

How do we protect your Personal Information

We protect your Personal Information using technical and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure, and alteration. Some of the safeguards we use are firewalls and data encryption, physical access controls to our data centers, and information access authorization controls.

Your European Union Privacy Rights

Under the General Data Protection Regulation EU 2016/679, also known as GDPR, if you are an individual protected by the GDPR you may have certain rights as a data subject. To request information about or avail yourself of those rights, please send an email to privacy@src.org with “GDPR Request” in the subject line. In the email please describe, with specificity, the GDPR right you are requesting assistance with. Please note additional information may be requested prior to initiation of a request and that SRC reserves the right to charge a fee with respect to certain requests. Upon SRC’s completion of its review, you will be notified if your request has been granted, denied, or exemptions apply.

Contact Us

If you have any questions or concerns about this Privacy Policy or about the use of your Personal Information, please feel free to contact us by email at privacy@src.org.

Changes to Privacy Policy

SRC may revise this Privacy Policy from time to time. The most current version of the policy will govern our processing of your Personal Information and will always be at https://www.src.org/privacy. If we make a change to this policy that, in our sole discretion, is material, we will notify you via email to the email address associated with your account or by a notice on this website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. Please contact us at privacy@src.org if you have any questions or if we can be of service in any way.