Privacy Policy

Effective date: June 17, 2019

Common Impact (“us”, “we”, or “our”) operates the www.capacitycommons.org website (the “Service”).

This page informs you of our policies regarding the collection, use, and disclosure of personal data (i.e. information that directly or identifies an individual) when you use our Service and the choices you have associated with that data. For European data protection purposes, Common Impact is also the data controller (i.e. the company who is responsible for and controls the processing of, your personal data). By using the Service, you acknowledge the collection and use of information in accordance with this Privacy Policy.

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

User-Provided Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). For example, you provide us with personal information when you register for an account, use the Service, generate User Content, or send us customer service-related requests. Personal Data may include, but is not limited to your:

• Email address
• First name and last name
• Organization and role

If you withhold requested information, we may not be able to provide certain services to you.

“Automatically Collected” Information

When you use the Service, we may automatically record certain information from your device by using various types of technology, including “clear gifs” or “web beacons.” This “automatically collected” information may include your IP address or other device address or ID, web browser and/or device type, the pages or other content you view or otherwise interact with on the Service, and the dates and times that you visit, access, or use the Service. We also may use these technologies to collect information regarding your interaction with email messages, such as whether you opened, clicked on, or forwarded a message. This information is gathered from all users.

“Cookies” Information

When you use the Service, we may send one or more cookies (a small text file containing a string of alphanumeric characters) or similar code to your devices. Some of this code may remain on your devices and may be used by your browser or devices on subsequent visits to the Service. This allows us to “remember” what you have done on the Service before and personalize the Service for you. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Alternatively, to find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit the website: www.allaboutcookies.org. This website will explain how you can delete cookies which are already stored on your device. However, if you do not accept cookies, you may not have access to many features that make our Service smoother and you may not be able to use some portions of our Service.

Analytics

Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. We use cookies provided by Google Analytics to help us measure how visitors use the Service. This information is only collected in the aggregate and individuals can not be identified from this data. The information collected is used for a variety of purposes, including, but not limited to, site traffic reporting. Although Google Analytics logs the information coming from the Service on our behalf, we control how the data may and may not be used.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

Information from Other Sources

We may obtain information, including personal information, from third parties and sources other than the Service, such as our partners and Integrated Services. If we combine or associate information from other sources with personal information that we collect through the Service, we will treat the combined information as personal information in accordance with this Privacy Policy.

Use of Data

Common Impact may use the Personal Data collected to carry out the following purposes:

Please note that you have a right to object to the processing of your personal data where that processing is carried out for our legitimate interest.

Disclosure of Data

We collect several different types of information for various purposes to provide and improve our Service to you.

User-Provided Data

Except as described in this Privacy Policy, we will not disclose your information that we collect on the Service to third parties without your consent. We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:

• Areas of the Service Accessible to Other Users. Any information that you voluntarily choose to include in an area of the Service that is intended to be viewed by others, such as a public profile page or forum post, will be available to anyone who has access to the Service, including other users.
• Service Providers and Other Third Parties. We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Aggregate and Non-identifying Information. We may make certain automatically-collected, aggregated, or otherwise non-personally-identifiable information available to other users of the Service or third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding our users’ interests, habits, and usage patterns for certain programs, content, services, advertisements, promotions, and/or functionality available through the Service.
• Compliance with Law and Law Enforcement. Common Impact may disclose your Personal Data in the good faith belief that such action is necessary to:
  • To comply with a legal obligation
  • To protect and defend the rights or property of Common Impact
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability
• Business Transfers. Information about our users, including personal information, may be disclosed and otherwise transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
• Other sharing. We also reserve the right to disclose your information that we believe, in good faith, is appropriate or necessary to (i) take precautions against liability, (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity, (iii) investigate and defend ourselves against any third-party claims or allegations, (iv) protect the security or integrity of the Service and any facilities or equipment used to make the Service available, or (v) protect our property or other legal rights (including, but not limited to, enforcement of our agreements), or the rights, property, or safety of others.

Security and Retention of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

We may retain information provided by you, including Personal Data, for as long as necessary for the provision of the services, internal analytical purposes or to comply with our legal obligations, resolve disputes and enforce agreements. The criteria used to determine the retention periods include: (i) how long the Personal Data is needed to provide the services and operate the business; (ii) the type of Personal Data collected; and (iii) whether we are subject to a legal, contractual or similar obligation to retain the data (e.g., mandatory data retention laws, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of litigation or disputes).

Your Rights and Choices

You may decline to share certain personal information with us, in which case we may not be able to provide to you some of the features and functionality of the Service. You may update or correct your account information and preferences at any time by accessing your account preferences page on the Service. If you wish to access or amend any other personal information we hold about you or to request that we delete any information about you that we have obtained from an Integrated Service, you may contact us at info@commonimpact.org. Please note that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

If you are located in the EEA, you may have certain data privacy rights which may be subject to limitations and/or restrictions. These rights include the right to (i)  request access to and rectification or erasure of their personal data; (ii) obtain restriction of processing or to object to processing of their personal data; and (iii) request a copy of your personal information to be provided to you, or a third party, in a digital format. If you wish to exercise one of the above-mentioned rights, please send us your request via email to info@commonimpact.org. Individuals located in the EEA also have the right to lodge a complaint about the processing of their personal data with their local data protection authority.

International Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located in the European Economic Area (“EEA”), information collected from you, including Personal Data, via the Service will be transferred to certain recipients located outside the EEA (including to the United States where this website is hosted) which do not provide an adequate level of protection to that provided by countries in the EEA. You hereby consent to the transfer of your Personal Data to the recipients as described in this Privacy Policy which are located outside of the EEA. You may withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Common Impact will take appropriate steps to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your Personal Data.

Children’s Privacy

Our Service does not address anyone under the age of 18 (“Children”).

We do not knowingly collect Personal Data from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Third-Party Services

The Service may contain features or links to web sites and services provided by third parties. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Service. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Service. We strongly advise you to review the Privacy Policy of every site you visit.

Privacy Settings

We may update our Privacy Policy from time to time. If we make material changes to our Privacy Policy we will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact us

If you have any questions about this Privacy Policy, please contact us: