Privacy Policy

The Museum of Human Achievement ("MoHA", "we", or "us") advocates for and respects your right to privacy and is committed to protecting it through our compliance with the practices described in this notice, including when you visit our websites and engage with us, online and offline.

This notice describes our practices for collecting, using, maintaining, protecting, and disclosing the personal data we may collect from you or that you may provide when you visit our websites, programs, and events or other digital properties, services, communications, or forms that link or refer to this notice (together, our "MoHA Assets"). This notice applies to the personal data collected through our MoHA Assets, regardless of the country where you are located.

The MoHA Assets may include links to third-party websites, plug-ins, services, social networks or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. We do not control these third-party websites, and we encourage you to read the privacy notice of every website you visit.

We do not rent or sell personal data to third parties. We will not transfer or share this information unless compelled by law, or under the specific conditions listed below, and we will challenge any subpoena or other demand by government or private organizations or individuals to access it.

Please read this notice carefully to understand our policies and practices for processing and storing your personal data. By engaging with our MoHA Assets, you accept and consent to the practices described in this notice. This notice may change from time to time (see page history and changes). Your continued engagement with our MoHA Assets after any such revisions indicates that you accept and consent to them, so please check the notice periodically for updates.

Data We May Collect About You

We do collect and use different types of data from and about you when you visit our MoHA Assets, or subscribe to our campaigns or mailing lists, including:

• Personal data that we could reasonably use to directly or indirectly identify you, such as your name, postal address, email address, telephone number, or other similar identifier, or any other information the website collects that is defined as personal or personally identifiable information under applicable law ("personal data").
• Demographic information when submitted to us (for example, age, race/ethnicity, geographical information, sexual orientation, gender identity). This info helps us improve our programs. It also helps with grant reporting for program funding. This data helps inform us about who we're reaching and if we are meeting our outreach goals.
• Technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, or operating system and platform.

When you submit information on our site using third party forms, data may be collected by those vendors and processed subject to their terms of service.

Treatment of Data as Personal Data

If we combine or connect non-personal, technical, or demographic data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.

We use the information that you have given us in order to:

• Provide you with the information, services and support that you request from us
• Respond to your queries, questions and requests for information.
• Meet our obligations and enforce our rights arising from any contracts or agreements with you, including for billing or collections, or comply with legal requirements.
• Fulfill the purposes for which you provided the data or that were described when it was collected.

We take industry standard security measures to protect personal information under our control from loss, misuse, and breach, but like with every website, there are risks associated with uploading your information online.

When you are asked for your personal data, you are sharing that information with MoHA alone, unless stated otherwise. We use this information to further our mission.

From time to time, we may share your personal data with:

• MoHA’s employees and board members to improve programming and serve our mission

We may also disclose aggregated or statistical data to third parties:

• To respond to funding requests and reports
• To share our impact and other program information

Disclosure of Your Personal Data

We do not rent or sell data to third parties. We will not transfer or share this data unless compelled by law, or under the specific conditions listed below, and we will challenge any subpoena or other demand by government or private organizations or individuals to access it.

Age of Majority and Personally Identifiable Information

MoHA Assets and services are not intended for, or designed to attract, individuals under the age of majority pursuant to applicable law, or those persons under the age of 18. We do not knowingly collect personally identifiable information from any person under the age of 18 or under the age of majority pursuant to applicable law.

How we store your personal information

The security of your personal data is very important to us. We use physical, electronic, and administrative safeguards designed to protect your personal data from loss, misuse and unauthorized access, use, alteration or disclosure. We store all personal data you provide to us on servers employing security protections. Information submitted through our session submission form or any other action form is encrypted through a Secured Socket Layer (SSL) connection, which protects the information while in transit.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our MoHA Assets. Any transmission of personal data is at your own risk. We are not respon sible for the circumvention of any privacy settings or security measures contained on the MoHA Assets.

What Are Your Rights?

You have a number of rights in relation to your personal data. These can differ by country, but can be summarized in broad terms as follows:

• Your right of access: You have the right to ask us for copies of your personal information.
• Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
• Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.

To exercise any of your rights in connection with your personal data, please contact us at info@themuseumofhumanachievement.com. We try to respond to all legitimate requests within a reasonable time. You also have the right to complain to a Data Protection Authority in your country about our collection and use of your personal data.

To help protect your privacy and security, we will take reasonable steps to verify your identity before granting you access to your personal data. Depending upon the circumstances and the request, we may not be permitted to provide access to personal data or otherwise fully comply with your request; for example, where producing your information may reveal the identity of someone else. We may charge an appropriate fee for complying with your request where allowed by applicable law, and/or to deny your requests where they may be unfounded, excessive, or otherwise unacceptable under applicable law. If your request is denied, you will receive an explanation as to the reasons for this denial, unless prohibited by applicable law or regulations.

In addition, and where granted by applicable law, you may have the right to lodge a complaint with a data protection authority in the country where you are habitually resident, where you work, or where the alleged infringement took place, if you consider that we have infringed applicable data protection legislation when processing your personal data.

References

• https://www.rightscon.org/data-usage-policy
• https://www.limitbreak.co.uk/privacy-notice
• https://www.takethis.org/privacy-policy/