Welcome, and thank you for your interest in the University of Oklahoma's mPING application. ("UNIVERSITY", "we" or "us"), our website at https://mping.ou.edu/ (the "Site"), and all related websites, downloadable software, mobile applications (including tablet applications), and other services provided by us and on which a link to this Privacy Policy is displayed, and all other communications with individuals though from written or oral means, such as email or phone (collectively, together with the Site, our "Service").
This Privacy Policy ("Policy") describes the information that we gather on or through the Service, how we use and disclose such information, and the steps we take to protect such information. By using the Service, you accept the terms and conditions of this Policy.
This Policy is incorporated into, and is subject to, our Terms of Service. Capitalized terms used but not defined in this Policy have the meaning given to them in our Terms of Service.
Collection of Information
We collect different types of information from or through the Service. The legal bases for our processing of information are primarily that the processing is necessary for providing the Service and that the processing is carried out in our legitimate interests, which are further explained in the "Use of Information" section.
User-Privided Information
When you use the Service, you may provide and we may collect certain information that could be used to personally identify you ("Personal Information"). You may provide us with Personal Information in various ways on the Service. For example, when you use the Service, send us customer service-related requests, register for an account, interact with other users of the Service through communication or messaging capabilities, etc. If you choose to withhold any Personal Information requested by us, it may not be possible for you to gain access to certain parts of the Service.
When you use the Service, we may collect information about your location. With your permission, we may also collect information about your precise location using methods that include GPS, wireless networks, cell towers, Wi-Fi access points, and other sensors, such as gyroscopes, accelerometers, and compasses.
Automatically Collected Information
When you use the Service, we may automatically record certain information from your device by using various types of technology, including cookies, "clear gifs" or "web beacons." This automatically collected information may include IP address or other device address or ID, web browser and/or device type, the pages or other content you view or interact with on the Service, and the dates and times of the visit, access, or use of the Service. You may limit the automatic collection of certain information by our Service, for instance by disabling the cookies using your browser options. Please be aware that by doing so it may prevent you from using specific features on our Service, such as maintaining an online account. We use automatically collected information and other information collected on the Service through cookies and similar technologies to: (i) personalize our Service, such as remembering your information so that you will not have to re-enter it during a visit or on subsequent visits; (ii) provide customized content, and information; (iii) monitor and analyze the effectiveness of Service; (iv) monitor aggregate site usage metrics such as total number of visitors and pages viewed; and (v) track your entries, submissions, and status or other activities on the Service.
Use of Information
We take steps designed to ensure that only those employees who need access to your Personal Information to fulfill their employment duties will have access to it.
We use the information that we collect in a variety of ways in providing the Service, conducting research and our operations, including:
to operate, maintain, enhance and provide all features of the Service, to provide the services and information that you request, to respond to comments and questions and to provide support to users of the Service;
to understand and analyze the usage trends and preferences of our users, to improve the Service, and to develop new products, services, feature, and functionality;
to send you communications subject to applicable laws; or
to comply with legal and regulatory requirements, where applicable.
Communication of Information
In certain circumstances, in order to perform the Service, we may disclose certain information that we collect from you:
with the university in order to carry out our obligations;
with third party service providers who provide website, application development, hosting, maintenance, and other services for us. These third parties may have access to, or process Personal Information as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information;
with law enforcement and governmental entities when required. For greater clarity, we may disclose Personal Information or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a facially valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies; and
to an acquirer, successor or assignee as part of any merger, acquisition, debt financing, sale of assets, license, or similar transaction, and only if the recipient of your Personal Information commits to a privacy policy that has terms substantially consistent with this Policy.
When we disclose your Personal Information to third parties, we take reasonable measures to ensure that the rules set forth in this Policy are complied with and these third parties provide sufficient guarantees to implement appropriate technical and organizational measures.
We may finally make certain automatically-collected, aggregated, or otherwise non-personally-identifiable information available to third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding your interests, habits, and usage patterns for certain programs, content, services, and/or functionality available through the Service.
Security and Retention
We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate physical, technical and administrative safeguards to protect Personal Information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Information in our possession. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us or store on the Service, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or administrative safeguards. If you believe your Personal Information has been compromised, please contact us as set forth in the "Contact" section. If we learn of a security systems breach, we will inform you and the authorities of the occurrence of the breach in accordance with applicable law.
We will only keep your Personal Information for as long as reasonably necessary to fulfill the relevant purposes set out in this Policy and in order to comply with our legal and regulatory obligations. If you would like further information regarding the periods for which your Personal Information will be kept, please contact us as set forth in the "Contact" section.
Data Transfer
By using the Service, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules than in your country. While such information is outside of the United States, it is subject to the laws of the country in which it is held, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country. However, our practices regarding your Personal Information will at all times continue to be governed by this Policy and, if applicable, we will comply with the General Data Protection Regulation("GDPR") requirements providing adequate protection for the transfer of Personal Information from the EU/EEA to third country.
Third-Party Services
The Service may contain features or links to websites and services provided by third parties. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators' policies, if any, governing privacy and security, even if accessed through the Service. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Service. We encourage you to learn about third parties' privacy and security policies before providing them with information.
Rights Regarding Personal Information
Under the GDPR, if applicable, you may be entitled to specific provisions, including: (i) the right to withdraw consent to processing where consent is the basis of processing; (ii) the right to The Service may contain features or links to websites and services provided by third parties. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Service. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Service. We encourage you to learn about third parties’ privacy and security policies before providing them with information.access your Personal Information and certain other supplementary information, under certain conditions; (iii) the right to object to unlawful data processing, under certain conditions; (iv) the right to erasure of Personal Information about you, under certain conditions; (v) the right to demand that we restrict processing of your Personal Information, under certain conditions, if you believe we have exceeded the legitimate basis for processing, processing is no longer necessary, or believe your Personal Information is inaccurate; (vi) the right to data portability of Personal Information that you provided us in a structured, commonly used, and machine-readable format, under certain conditions; (vii) the right object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you, under certain conditions; (viii) the right to lodge a complaint with data protection authorities. If you want to learn more about your rights under the GDPR, you can visit the European Commission's page on Data Protection at: http://ec.europa.eu/justice/data-protection/index_en.htm. Please note that the term Personal Information used in this Policy is equivalent to the term “personal data” under the GDPR.
Data Controller / Data Processor
Under the GDPR, the UNIVERSITY is acting both as a "Data Controller" and as a "Data Processor" As Data Controller, UNIVERSITY is responsible for safeguarding the data of our customers as they interact directly with our services like https: www.mping.ou.edu. As Data Processor, UNIVERSITY is responsible for safeguarding the data of our partners' and customers' users as it flows through our system.
Update
Please revisit this page periodically to stay aware of any changes to this Policy, which we may update from time to time. If we modify the Policy, we will make it available through the Service, and indicate the date of the latest revision, and will comply with applicable law. Your continued use of the Service after the revised Policy has become effective indicates that you have read, understood and agreed to the current version of the Policy.
Contact
If you have any questions or comments about this Policy or your Personal Information, to make an access or correction request, to exercise any applicable rights, to make a complaint, or to obtain information about our policies and practices with respect to any service providers, our Data Protection Officer can be reached by email at dataprotection@ou.edu.