Like most websites, GBS collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. GBS’ purpose in collecting non-personally identifying information is to better understand how visitors use our website.
GBS also collects potentially personally-identifying information like Internet Protocol (IP) addresses. GBS does not use IP addresses to identify its visitors, however, and does not disclose such information, other than under the same circumstances that it uses and discloses personally-identifying information, as described below.
GATHERING OF PERSONALLY-IDENTIFYING INFORMATION
Certain visitors to GBS choose to interact with GBS in ways that require GBS to gather personally-identifying information. The amount and type of information that GBS gathers depends on the nature of the interaction. For example, we ask when you submit a Contact Request via our website that you provide us with your first and last name and zip code.
In each case, GBS collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with GBS. GBS does not disclose personally-identifying information other than as described below. Visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities, like submitting a Contact Request.
All of the information that is collected by GBS will be handled in accordance with GDPR legislation.
PROTECTION OF CERTAIN PERSONALLY-IDENTIFYING INFORMATION
GBS discloses potentially personally-identifying and personally-identifying information only to GBS employees that (1) need to know the information in order to process it and/or to provide services available through GBS, and (2) that have agreed not to disclose it to others. All GBS employees are located in the continental United States. This may put them outside of your home country. By using our website, you consent to the transfer of such information to them.
GBS will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to GBS employees as described above, GBS may disclose potentially personally-identifying and personally-identifying information to third parties only when required to do so by law, if you give permission to have your information shared, or when GBS believes in good faith that disclosure is reasonably necessary to protect the property or rights of GBS, third parties, or the public at large.
GBS takes all measures reasonably necessary to protect against the unauthorized access, use, alteration, or destruction of potentially personally-identifying and personally-identifying information.
USE OF PERSONAL INFORMATION
We use the information you provide when you submit a Contact Request or email us directly.
We will not sell or lease your personal information to third parties unless we are required to do so by law.
LEGAL GROUNDS FOR PROCESSING PERSONAL INFORMATION
We rely on one or more of the following processing conditions:
- our legitimate interests in the effective delivery of information and services to you;
- explicit consent that you have given;
- legal obligations.
ACCESS TO DATA
You have the right to request a copy of the information we hold about you. If you would like a copy of some or all your personal information, please follow the instructions at the end of this policy.
RETENTION OF PERSONAL INFORMATION
We will retain your personal information on our systems only for as long as we need to for the success of the website’s functionality and of GBS support systems. We keep contact information (such as names and email addresses) until a visitor requests that we delete that information from our live systems (“servers”).
GBS will not delete personal data from logs or records necessary to the operation, development, or archives of any GBS systems.
GBS Contact Request submission data, including names and email addresses, will be retained indefinitely to preserve our ability to respond to code of conduct reports.
When deletion is requested or otherwise required, we will anonymize the data of data subjects if the deletion of data would break essential systems or damage the logs or records necessary to the operation, development, or archival records of the GBS systems.
If you would like to request deletion of your associated data, please email firstname.lastname@example.org with the subject line “Website Data Deletion.”
RIGHTS IN RELATION TO YOUR INFORMATION
You may have certain rights under data protection law in relation to the personal information we hold about you. In particular, you may have a right to:
- request a copy of personal information we hold about you;
- ask that we update the personal information we hold about you, or independently correct such personal information that you think is incorrect or incomplete;
- ask that we delete personal information that we hold about you from live systems, or restrict the way in which we use such personal information (for information on deletion from archives, see the “Retention of Personal Information” section);
- object to our processing of your personal information; and/or
- withdraw your consent to our processing of your personal information (to the extent such processing is based on consent and consent is the only permissible basis for processing).
If you would like to exercise these rights or understand if these rights apply to you, please follow the instructions at the end of this Privacy statement.
GBS may collect statistics about the behavior its visitors to its website. For instance, GBS may reveal how many times a particular page was visited or how many times a specific link was clicked on. However, GBS does not disclose personally-identifying information other than as described in this policy.
Additionally, information about how you use our website is collected automatically using “cookies.” Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. This information is used to track visitor use of the website and to compile statistical reports on website activity.